Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/CzMOzsivEzilya-qhallfCzIm24.roa
File:                     CzMOzsivEzilya-qhallfCzIm24.roa (raw, json)
Hash identifier:          pmQ8SFa+EIvpsGtlMv6U9+XfLxQywziKsv0cdpKtm3U=
Subject key identifier:   0B:33:0E:CE:C8:AF:13:38:A5:C9:AF:AA:85:A9:65:7C:2C:C8:9B:6E
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       018728D6AA2908223FF35F511AE144FC2105
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/CzMOzsivEzilya-qhallfCzIm24.roa
Signing time:             Tue 28 Mar 2023 15:29:29 +0000
ROA not before:           Tue 28 Mar 2023 15:29:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396417
IP address blocks:        2a03:5d60:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:28:d6:aa:29:08:22:3f:f3:5f:51:1a:e1:44:fc:21:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: Mar 28 15:29:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b330ecec8af1338a5c9afaa85a9657c2cc89b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:88:10:6f:cd:5c:25:f7:88:6f:f8:89:43:95:
                    9e:41:05:4d:6c:a1:0f:1f:20:e2:cc:1b:97:6c:69:
                    ec:95:7b:00:e5:d5:20:08:84:f0:70:bc:cc:6c:bf:
                    83:8c:2e:2c:e6:5d:36:c1:71:c1:44:d9:fa:84:90:
                    f1:8e:14:93:fa:77:9d:3c:d1:9e:94:93:23:44:09:
                    16:3b:da:52:74:5a:5f:45:1d:59:55:99:1f:39:c1:
                    fc:34:d0:88:98:89:4f:4c:b1:30:09:a9:73:fb:7f:
                    84:d4:df:04:fa:8b:b3:f2:69:23:99:e7:5b:80:9e:
                    27:10:96:08:38:a9:88:23:2c:58:88:1e:96:ac:91:
                    24:76:77:26:09:ec:7c:44:a2:a0:d1:83:9c:00:8a:
                    ee:ee:8c:ff:52:94:d2:36:f5:3e:ec:eb:a5:98:59:
                    01:68:b6:91:b3:76:04:b5:31:5b:5c:3a:19:06:13:
                    fe:ba:16:22:fe:a2:45:82:05:cc:16:2b:c2:b5:e2:
                    68:55:1c:ff:de:cc:f4:2f:fb:3d:f3:69:59:70:0a:
                    7e:a8:5f:0c:af:af:bd:af:03:e1:4e:5e:e8:64:76:
                    a0:9e:2f:bb:b2:d9:c2:a0:29:15:b3:8a:1f:d7:03:
                    6c:96:05:5f:e4:48:cf:e7:3f:12:60:1e:95:c8:6a:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:33:0E:CE:C8:AF:13:38:A5:C9:AF:AA:85:A9:65:7C:2C:C8:9B:6E
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/CzMOzsivEzilya-qhallfCzIm24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5d60:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:c4:a4:51:0c:ec:ca:8c:46:56:bd:8a:2e:80:18:57:da:
         f5:6b:e9:f0:51:e6:65:ea:6e:6e:81:bc:e7:28:97:5d:c7:9b:
         b9:e2:d0:8a:4a:86:c2:b9:e8:28:ff:d7:b9:46:40:9d:03:bf:
         2c:ab:29:e4:16:a8:23:6d:f8:c1:61:9a:35:46:c8:ae:51:14:
         a1:ea:73:6d:22:e4:36:b9:f3:c4:c3:59:75:f8:9f:37:44:ac:
         a1:b2:9f:d5:3d:ed:b9:68:7f:67:c0:61:d7:07:c5:0b:f6:19:
         e6:be:55:db:b5:04:33:80:3a:b7:70:6e:a8:80:db:b4:76:29:
         58:3b:17:79:52:f9:04:f2:c8:e3:70:31:ad:60:9a:9e:5c:70:
         0e:3e:3f:bc:93:76:80:50:9e:c7:54:8a:49:41:59:e4:19:77:
         05:86:d3:d7:a0:af:94:8b:cd:17:9e:74:fc:94:17:05:70:23:
         84:6d:cd:06:9f:f2:c7:c0:17:79:b1:d6:75:03:0e:6d:e8:3b:
         10:c1:cb:b4:99:0e:96:8f:96:70:ab:8c:65:73:b4:86:4b:65:
         8b:4e:2f:9f:93:c2:45:f1:e9:3f:2a:09:26:5b:ca:15:10:e9:
         6e:79:c8:03:49:39:ae:d9:5e:94:f2:ca:c1:10:1e:06:ed:8a:
         a7:2a:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----