Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/F6d8KN8FIS3e4q00oBiP6DWmSIc.roa
File:                     F6d8KN8FIS3e4q00oBiP6DWmSIc.roa (raw, json)
Hash identifier:          jOcMlq3m8Efsw7limVt9YpzmOYBwG09jjsl4nL89gWU=
Subject key identifier:   17:A7:7C:28:DF:05:21:2D:DE:E2:AD:34:A0:18:8F:E8:35:A6:48:87
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       018645291EC6776DD83D75D4E4DBDF68A0E7
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/F6d8KN8FIS3e4q00oBiP6DWmSIc.roa
Signing time:             Sun 12 Feb 2023 10:26:08 +0000
ROA not before:           Sun 12 Feb 2023 10:26:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212389
IP address blocks:        2a12:4942:4009::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:45:29:1e:c6:77:6d:d8:3d:75:d4:e4:db:df:68:a0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Feb 12 10:26:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17a77c28df05212ddee2ad34a0188fe835a64887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:4b:35:b4:e8:c9:89:47:fe:3f:c1:29:52:
                    85:b0:0a:fe:77:fa:10:82:6f:36:0f:72:ef:c4:58:
                    d2:d4:f6:f9:9c:99:8c:ab:22:b2:e9:c8:98:2d:98:
                    38:b1:9f:93:bb:6b:8d:61:48:40:cf:06:d0:bf:b2:
                    3b:a8:0c:8d:46:30:16:d7:05:58:e6:4d:40:f9:9d:
                    dc:83:b9:b1:c7:4a:7b:b8:42:e7:38:ee:6f:81:a4:
                    23:0f:11:3f:fa:bf:f4:be:e0:e0:c9:c2:ae:22:ab:
                    11:e2:3b:b8:a7:19:c1:8b:3e:00:db:5b:16:2c:e1:
                    55:59:ad:3c:21:90:7f:08:3e:51:f7:14:43:55:1d:
                    85:16:e8:c5:b2:1d:c3:38:44:28:11:63:ff:e6:4d:
                    68:c1:db:30:b7:33:f1:88:80:ab:66:68:35:9d:ae:
                    4d:08:ce:8d:35:a4:b0:c3:bd:33:ad:f1:d5:64:32:
                    ae:72:bd:ad:9a:6b:ae:65:75:a1:5b:de:bb:33:2c:
                    cd:3b:44:eb:8a:2d:80:1d:b8:8d:e5:ff:6f:da:4b:
                    32:89:12:b7:2d:5a:01:22:b7:e1:bf:2c:3c:23:f3:
                    53:c2:27:cf:5d:d4:ae:7d:bb:f8:21:7f:8e:e6:b7:
                    08:eb:3c:73:d9:1d:d8:92:9e:39:48:3e:4e:4c:bf:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A7:7C:28:DF:05:21:2D:DE:E2:AD:34:A0:18:8F:E8:35:A6:48:87
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/F6d8KN8FIS3e4q00oBiP6DWmSIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4942:4009::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:61:47:c6:5e:91:d3:e3:ab:40:e4:66:72:3c:80:67:fd:ca:
         d0:13:94:2f:7d:eb:e4:4d:1e:0f:05:fc:4d:1f:be:b0:1e:fa:
         87:b9:93:29:d5:aa:43:3b:35:79:b8:6d:97:82:58:39:2c:97:
         7e:64:0d:4b:0e:bc:f2:1c:20:36:3b:fa:f9:19:be:e8:e6:a9:
         70:a0:54:c4:6a:9d:f3:55:ac:c4:b5:83:64:7b:cf:02:c8:2f:
         d0:a1:95:b5:9d:a6:68:bb:11:9b:7b:40:45:3a:ae:6c:41:28:
         de:93:82:e0:23:52:3f:76:7c:9f:da:7c:25:df:1a:19:2a:36:
         15:a3:96:d3:1a:3d:e9:53:dd:45:d7:52:b0:f7:71:88:1f:e1:
         bb:76:73:01:15:53:df:11:29:c1:cf:70:60:dc:bb:8e:56:65:
         7c:be:48:83:c8:60:6c:0d:81:f9:3e:2d:bc:99:e9:84:3e:84:
         54:10:9c:07:10:15:05:9a:f5:3e:68:2a:b1:2e:c2:da:06:b8:
         88:95:fa:4b:1c:eb:d1:df:c9:6e:3d:45:d1:f7:94:e3:c2:f6:
         99:16:73:51:cc:f4:65:84:ed:20:bb:1f:c6:80:58:a0:c1:c8:
         e4:f2:b5:b0:5a:6b:06:13:37:b1:62:9b:a7:8e:d3:36:70:e9:
         47:07:42:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZFKR7Gd23YPXXU5NvfaKDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh
NjhhOWYwHhcNMjMwMjEyMTAyNjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2E3N2MyOGRmMDUyMTJkZGVlMmFkMzRhMDE4OGZlODM1YTY0ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYJLNbToyYlH/j/BKVKFsAr+d/oQ
gm82D3LvxFjS1Pb5nJmMqyKy6ciYLZg4sZ+Tu2uNYUhAzwbQv7I7qAyNRjAW1wVY
5k1A+Z3cg7mxx0p7uELnOO5vgaQjDxE/+r/0vuDgycKuIqsR4ju4pxnBiz4A21sW
LOFVWa08IZB/CD5R9xRDVR2FFujFsh3DOEQoEWP/5k1owdswtzPxiICrZmg1na5N
CM6NNaSww70zrfHVZDKucr2tmmuuZXWhW967MyzNO0Trii2AHbiN5f9v2ksyiRK3
LVoBIrfhvyw8I/NTwifPXdSufbv4IX+O5rcI6zxz2R3Ykp45SD5OTL+luwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBenfCjfBSEt3uKtNKAYj+g1pkiHMB8GA1UdIwQY
MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt
ZmI3NzRhYmRmYWMyLzEvRjZkOEtOOEZJUzNlNHEwMG9CaVA2RFdtU0ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy
LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhJJQkAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQAUYUfGXpHT46tA5GZyPIBn/crQE5QvfevkTR4P
BfxNH76wHvqHuZMp1apDOzV5uG2Xglg5LJd+ZA1LDrzyHCA2O/r5Gb7o5qlwoFTE
ap3zVazEtYNke88CyC/QoZW1naZouxGbe0BFOq5sQSjek4LgI1I/dnyf2nwl3xoZ
KjYVo5bTGj3pU91F11Kw93GIH+G7dnMBFVPfESnBz3Bg3LuOVmV8vkiDyGBsDYH5
Pi28memEPoRUEJwHEBUFmvU+aCqxLsLaBriIlfpLHOvR38luPUXR95TjwvaZFnNR
zPRlhO0gux/GgFigwcjk8rWwWmsGEzexYpunjtM2cOlHB0LX
-----END CERTIFICATE-----