Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_XfCKUwfq8LR7tGlLnaqAAnGnYE.roa
File:                     _XfCKUwfq8LR7tGlLnaqAAnGnYE.roa (raw, json)
Hash identifier:          rhI6nd6LD6oNUqOYS/zqBxxmtkRmOtBFZdmkbTG/LMM=
Subject key identifier:   FD:77:C2:29:4C:1F:AB:C2:D1:EE:D1:A5:2E:76:AA:00:09:C6:9D:81
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C416D7110453F116C33A7FE4EF47CFE
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_XfCKUwfq8LR7tGlLnaqAAnGnYE.roa
Signing time:             Sun 01 Jan 2023 07:35:05 +0000
ROA not before:           Sun 01 Jan 2023 07:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207268
IP address blocks:        2a0d:2683::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:6d:71:10:45:3f:11:6c:33:a7:fe:4e:f4:7c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd77c2294c1fabc2d1eed1a52e76aa0009c69d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:a8:21:0c:c5:28:61:2b:b3:10:4e:62:cd:
                    8f:10:34:90:99:29:e5:d6:73:cd:a9:57:ec:73:d6:
                    5f:68:32:5d:ee:6e:8b:46:31:83:9a:40:02:37:e1:
                    98:df:bd:22:17:50:37:5b:11:71:02:19:8a:f5:9f:
                    c3:66:42:8d:31:97:1d:a8:da:4c:e5:06:b7:59:b1:
                    75:94:cb:a7:9e:34:4d:cc:ae:dc:02:a9:0c:6f:c4:
                    47:bc:9e:04:38:d0:07:ea:a6:73:2f:79:9d:d3:15:
                    9a:2b:b5:12:5c:e1:df:d4:49:7a:8e:8d:57:4b:a2:
                    de:1a:b8:12:dc:23:ea:22:74:3c:81:d8:20:ae:76:
                    59:66:f3:a9:d8:17:7e:cc:02:8d:6a:ec:b9:e1:7c:
                    82:9c:2b:61:f0:5b:24:e7:3d:54:ed:61:ea:bc:e5:
                    a8:f3:e8:bd:90:4f:92:fc:72:c4:fb:03:b8:61:a0:
                    12:73:bc:38:3e:70:6e:20:e7:d5:94:01:88:26:42:
                    d6:61:80:c8:e5:82:5c:03:15:86:a1:0e:db:00:18:
                    6f:8f:69:bd:d4:8a:5e:a5:29:35:0b:c7:d4:97:3b:
                    92:da:67:22:6a:68:e9:b7:35:61:0d:cf:82:3b:9c:
                    ae:8b:44:60:1d:2d:81:a4:72:6b:dc:ec:c9:46:73:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:C2:29:4C:1F:AB:C2:D1:EE:D1:A5:2E:76:AA:00:09:C6:9D:81
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/_XfCKUwfq8LR7tGlLnaqAAnGnYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2683::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:82:68:3c:88:bd:3c:4b:39:14:76:db:4b:f3:23:d0:6e:
         6b:22:2e:98:1d:b7:f9:67:33:61:5b:f8:f0:e8:e5:5a:a2:50:
         dd:06:9c:88:05:9e:99:2c:e1:96:f3:86:2f:4a:d6:4e:1b:06:
         92:70:ac:0b:15:c6:e5:14:a8:1a:86:40:39:f7:90:4a:c7:9e:
         aa:8d:1c:1f:62:6d:ff:ce:cf:57:42:1b:a8:18:7c:d2:46:df:
         19:7a:dd:91:0c:40:fa:83:15:6f:7b:2b:22:80:02:e2:d2:ad:
         1b:44:cd:37:4e:ec:47:2d:3a:fc:26:39:1e:b3:c9:ee:40:cd:
         66:b5:35:d2:ac:06:65:0e:2d:ff:7a:85:c7:0b:9f:f1:9b:de:
         cb:c5:86:6d:ea:34:39:5c:f4:b1:d0:af:31:3e:4e:a1:a7:5e:
         2e:f9:59:6e:b2:a0:a1:91:e5:c6:7e:b8:df:15:dd:e6:9e:f2:
         c3:21:0f:fe:3a:86:5a:19:bc:43:14:27:25:8e:7b:ff:1a:63:
         03:bf:ac:16:8d:70:0d:42:fa:92:47:76:06:56:27:72:4f:ab:
         c8:53:75:e3:69:5f:4e:00:1b:00:19:54:79:45:1c:a0:77:f8:
         00:7c:07:3a:10:56:6e:fe:db:5d:89:9b:de:98:af:8d:bb:c7:
         89:50:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----