Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DSabnKF4MeqqewjW5ULmnUE9YRA.roa
File:                     DSabnKF4MeqqewjW5ULmnUE9YRA.roa (raw, json)
Hash identifier:          euT5GpJNkZm2w8FSPy20jLcTGQ1UWxTM67MwwEsxJvM=
Subject key identifier:   0D:26:9B:9C:A1:78:31:EA:AA:7B:08:D6:E5:42:E6:9D:41:3D:61:10
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FE22E5D295B399F1597E059CD3116
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DSabnKF4MeqqewjW5ULmnUE9YRA.roa
Signing time:             Sun 01 Jan 2023 21:14:47 +0000
ROA not before:           Sun 01 Jan 2023 21:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138631
IP address blocks:        2a0e:aa06:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:e2:2e:5d:29:5b:39:9f:15:97:e0:59:cd:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d269b9ca17831eaaa7b08d6e542e69d413d6110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:b5:23:c8:db:47:30:ff:51:03:8b:7c:42:
                    ea:9d:5f:90:a6:b1:54:dd:51:0a:aa:25:29:78:bc:
                    c0:97:b4:76:69:4b:85:9c:f4:95:cf:f0:46:45:2f:
                    86:cc:d5:a4:b4:13:60:e9:40:ba:dd:f4:37:87:83:
                    4c:5c:a1:75:6c:1f:03:47:cc:4e:bf:46:f8:9a:32:
                    a5:d0:5c:f7:bb:a1:fb:ee:26:34:18:c5:15:37:4e:
                    f1:67:31:07:0d:81:d1:66:da:25:ee:da:69:33:e8:
                    5e:f9:ca:c8:78:ce:6b:22:4c:ee:bd:59:ec:b3:67:
                    3a:e5:3e:18:97:92:a9:66:f5:a1:16:d1:f8:d3:bc:
                    5e:78:16:0f:12:07:49:86:c6:fc:0d:6a:ab:eb:3c:
                    a2:7f:5b:a5:72:07:08:fa:12:5e:69:24:9d:d3:bf:
                    e8:3b:f3:bd:fa:fd:c6:cb:00:ec:77:e1:f7:b3:5e:
                    f5:10:d6:0d:9d:a3:d6:db:9d:52:b4:63:9f:29:a7:
                    3d:6b:fc:33:67:40:7c:27:a0:c0:78:16:1f:5a:ce:
                    90:8b:2e:22:14:4e:80:a7:4f:bd:e7:03:c2:00:89:
                    2d:91:21:1b:b0:70:cb:2c:2c:7c:dc:49:2a:f7:ef:
                    85:3d:0c:4e:5e:79:7f:cf:15:2d:c6:02:3e:ee:64:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:9B:9C:A1:78:31:EA:AA:7B:08:D6:E5:42:E6:9D:41:3D:61:10
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/DSabnKF4MeqqewjW5ULmnUE9YRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa06:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:63:b1:9d:fa:e1:9b:b8:77:bf:35:b1:40:70:38:f6:23:43:
         ec:43:ff:75:cf:28:2f:93:98:97:9e:f6:f8:27:d1:64:4f:61:
         b4:25:7b:32:14:03:8c:58:b8:f4:7b:aa:3a:20:11:80:e0:36:
         6a:ae:68:3f:c8:03:ad:79:79:d3:2b:a0:da:4b:5c:ef:82:b9:
         b8:cf:1d:f0:fd:10:31:98:5d:e6:28:be:76:c1:61:4c:5e:3a:
         13:b3:22:e3:38:f3:4b:ae:82:49:ae:a1:98:ca:38:cd:04:f6:
         22:da:80:c4:f3:d3:aa:d1:22:a3:d6:20:3e:a2:64:24:eb:66:
         34:7d:9f:50:e8:b2:eb:11:44:9d:4a:7a:b8:9a:ca:20:b1:6e:
         36:74:55:cb:7a:27:60:22:14:f3:2b:a5:d7:0d:e6:b4:35:e4:
         09:e9:43:92:6d:b4:11:8f:6c:b6:5b:0d:d4:25:d5:15:9a:62:
         7c:98:4b:e6:22:37:05:4f:4b:80:e2:e1:16:0f:13:09:3e:1e:
         63:0e:cc:54:dd:6e:48:12:07:35:98:fe:c7:1e:d1:23:ae:9a:
         2b:01:04:23:ea:47:2c:ed:4d:d4:34:d0:2b:f8:18:bb:2b:fd:
         cf:b6:30:de:24:bf:39:81:4d:b6:8c:0a:0f:5e:f8:2f:63:ee:
         7b:d2:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----