Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w1QFxUaqcj-sv6Jek0qQna_LOe4.roa
File:                     w1QFxUaqcj-sv6Jek0qQna_LOe4.roa (raw, json)
Hash identifier:          19UdZ+Lu6WTIBXgrxmsSoYv5e0TSZIt5m1mGQyqTxU8=
Subject key identifier:   C3:54:05:C5:46:AA:72:3F:AC:BF:A2:5E:93:4A:90:9D:AF:CB:39:EE
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FE3C4C0929C852802F629BD8CB27C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w1QFxUaqcj-sv6Jek0qQna_LOe4.roa
Signing time:             Sun 01 Jan 2023 21:14:47 +0000
ROA not before:           Sun 01 Jan 2023 21:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0e:aa07:f080::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:e3:c4:c0:92:9c:85:28:02:f6:29:bd:8c:b2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c35405c546aa723facbfa25e934a909dafcb39ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b3:cf:76:47:3d:e9:e0:d3:56:51:14:05:67:
                    f8:2a:0a:09:97:48:fb:e8:19:83:da:06:b1:be:d9:
                    b0:69:d9:e5:58:12:b5:0b:9e:d9:71:4c:10:b7:47:
                    5f:d6:29:da:54:14:dc:9d:04:fd:6e:3c:e2:7e:d0:
                    63:0b:7c:b2:a5:a2:06:ab:1e:55:34:1e:a3:7d:50:
                    14:93:de:df:a7:e7:9c:14:5d:aa:68:f8:d1:3f:41:
                    ae:34:3a:04:fb:70:48:70:13:98:32:73:75:b3:b7:
                    8e:22:ad:b3:d7:3d:be:84:76:6f:83:01:5c:54:a1:
                    96:77:2e:30:c9:08:07:af:56:ec:98:93:4e:4b:4f:
                    ba:8b:35:f4:fa:d1:a3:2d:ec:73:a6:ec:8b:b5:31:
                    bc:b3:48:82:5c:ac:1a:d4:b6:05:a2:c8:9f:72:17:
                    9c:b8:79:a0:c2:78:38:7e:05:1d:75:0f:04:02:ad:
                    ae:9d:ea:76:2c:54:a7:5f:52:18:28:18:82:82:6a:
                    49:2f:4e:2d:03:71:b0:af:fc:ee:d1:25:80:78:38:
                    c7:b2:0b:68:d4:a9:8a:8c:5f:db:d1:cc:28:89:cd:
                    b9:d0:c7:54:da:70:29:ac:2d:c2:fd:21:68:b8:8c:
                    f4:6e:67:e9:ae:66:f7:85:ef:74:94:78:07:47:ba:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:05:C5:46:AA:72:3F:AC:BF:A2:5E:93:4A:90:9D:AF:CB:39:EE
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/w1QFxUaqcj-sv6Jek0qQna_LOe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:f080::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:df:18:0a:49:86:ed:82:57:77:5c:5b:d6:d8:01:bb:85:
         9d:ca:c7:92:8f:57:79:a5:be:8f:46:4c:60:b2:00:5a:93:aa:
         5b:4a:a1:38:7a:b4:4b:ff:14:a8:92:b4:ab:dd:9f:c8:d4:e5:
         d4:ad:4c:56:ad:7f:e2:0a:b1:f7:dd:69:b1:85:0e:c4:2a:5d:
         a1:33:00:27:7e:3d:f6:6b:ec:90:f4:b8:33:e4:bf:85:91:ce:
         b2:13:20:20:e3:86:6d:63:f2:9d:ab:f4:16:ab:65:93:3a:6c:
         6e:78:a7:68:a5:e6:98:ab:9e:d9:aa:51:87:d4:2d:d1:a0:1f:
         6d:38:62:4f:07:2a:44:dc:1f:47:f6:10:55:88:5d:13:32:b1:
         7c:d1:6a:cd:72:5b:1e:61:b8:a1:7f:82:71:d8:08:10:ac:2a:
         7e:70:07:58:98:fc:81:29:e4:52:74:f4:15:b5:23:5e:59:b2:
         56:9c:b1:c9:1b:a1:cc:a4:ec:a6:ed:7d:d1:6c:3c:59:fe:26:
         3e:b0:0d:da:4b:15:90:cd:76:72:0f:a3:c0:c6:a2:f5:50:c1:
         bd:19:d8:e4:2b:a7:14:27:6e:e3:d5:17:24:0c:ea:6f:35:56:
         3f:21:9e:3e:a0:e2:41:18:0d:93:74:33:26:27:e1:ef:12:38:
         cb:ea:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----