Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/00x5kPbf_4w9AOX5sZx2W_YOx-s.roa
File:                     00x5kPbf_4w9AOX5sZx2W_YOx-s.roa (raw, json)
Hash identifier:          l63pOO9aIbnUe8rlztNOEsRC6qfyzN7bT2VXo4ODmKo=
Subject key identifier:   D3:4C:79:90:F6:DF:FF:8C:3D:00:E5:F9:B1:9C:76:5B:F6:0E:C7:EB
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       01856F824015D2623AB14CCD26FC0BFAF320
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/00x5kPbf_4w9AOX5sZx2W_YOx-s.roa
Signing time:             Sun 01 Jan 2023 22:44:44 +0000
ROA not before:           Sun 01 Jan 2023 22:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210960
IP address blocks:        2a0e:b704::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:40:15:d2:62:3a:b1:4c:cd:26:fc:0b:fa:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jan  1 22:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d34c7990f6dfff8c3d00e5f9b19c765bf60ec7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:3e:1a:05:2b:11:eb:ef:96:ce:fa:b0:c7:
                    df:2c:c4:20:04:96:ed:02:f2:a4:5e:d3:ae:86:0f:
                    77:39:2d:4d:3e:60:84:af:6b:1c:29:7b:b2:e0:51:
                    85:8f:66:3d:61:11:6c:55:c2:a9:c9:c0:ce:1b:d1:
                    48:bb:4e:59:4f:99:9c:f0:12:87:b8:33:1d:7c:c7:
                    7d:41:7c:79:ff:94:38:19:9d:d0:24:5e:04:ba:b0:
                    a3:35:dc:67:29:b6:3e:ba:db:d9:99:56:aa:0d:f0:
                    ba:ad:69:03:ca:85:a7:f6:c0:fe:ac:76:b7:19:2f:
                    b1:fc:30:92:11:c2:a2:1e:b4:17:08:51:aa:db:3c:
                    d7:45:bc:30:2d:20:17:ef:38:fa:08:cc:eb:79:07:
                    01:be:3b:86:0c:cd:a7:58:d7:15:8d:74:be:66:01:
                    b8:ab:07:ae:d8:c4:fa:97:36:29:dd:f7:98:8f:fe:
                    71:33:f1:57:06:e1:76:6f:05:5b:27:e8:d5:76:42:
                    a3:1a:f9:f8:b4:eb:09:b9:00:1f:0d:04:0b:b5:20:
                    fc:16:1c:cd:ce:dd:52:d9:1f:8e:b9:43:db:76:ce:
                    48:4b:f6:0b:7c:15:8c:1d:f9:84:d9:45:d5:50:e6:
                    78:e9:f0:92:82:ed:b2:2a:62:0f:b0:b7:96:df:87:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4C:79:90:F6:DF:FF:8C:3D:00:E5:F9:B1:9C:76:5B:F6:0E:C7:EB
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/00x5kPbf_4w9AOX5sZx2W_YOx-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b704::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:f0:9a:fd:89:e7:f1:80:86:b9:dc:4a:b8:6e:d8:8a:69:07:
         2a:a6:30:7c:c1:f3:fa:53:de:c1:94:39:c4:0b:b4:13:0a:c0:
         ca:1a:8a:78:e2:6e:6d:62:43:a8:b6:dc:03:28:0a:6b:2e:92:
         2d:b7:4a:dd:89:57:c8:f3:11:39:07:d0:4d:f4:49:66:b2:03:
         ce:be:23:d9:39:81:d3:01:4a:51:98:71:73:d5:e7:2e:10:d8:
         1e:5d:48:ec:20:18:f9:40:36:01:e4:2f:6f:f8:44:94:ea:76:
         4f:8c:e7:1a:c9:19:51:46:ba:02:71:46:cf:da:3b:98:02:b3:
         5a:00:03:19:36:48:e8:21:ea:cc:51:2b:4f:f6:7a:38:bf:3b:
         db:ea:8f:fb:20:16:85:e3:9f:b5:3f:ef:13:59:26:84:1e:dc:
         cc:b5:59:42:a7:44:7a:e2:9f:45:02:2e:52:95:e2:66:6c:10:
         93:ea:eb:79:ab:dd:61:60:69:4c:6d:ec:29:d5:ee:be:97:f5:
         7e:b7:c7:e7:4b:9f:89:32:bf:11:7a:ef:61:01:8a:ca:6f:e0:
         cb:cd:ce:50:c7:66:71:37:05:f1:6e:70:94:d5:9a:f5:79:70:
         99:c3:40:f2:25:dc:ce:4b:ff:00:66:a4:66:98:28:e1:c4:01:
         54:c7:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----