Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa
File:                     ynNTGz5PL_nB2c371DCyv2nK6CI.roa (raw, json)
Hash identifier:          McS29geYVrLzxkDXR1+reMMJmuScakhkg/up7S4bCts=
Subject key identifier:   CA:73:53:1B:3E:4F:2F:F9:C1:D9:CD:FB:D4:30:B2:BF:69:CA:E8:22
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01863FA38DD844AB3D8704682BB97361C8FD
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa
Signing time:             Sat 11 Feb 2023 08:42:08 +0000
ROA not before:           Sat 11 Feb 2023 08:42:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200021
IP address blocks:        2a0e:aa07:e060::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3f:a3:8d:d8:44:ab:3d:87:04:68:2b:b9:73:61:c8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Feb 11 08:42:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca73531b3e4f2ff9c1d9cdfbd430b2bf69cae822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:b4:f9:aa:25:ec:e7:6c:2a:8d:df:99:51:
                    4b:00:4c:7e:c4:56:42:dc:a9:e6:1c:5b:4a:f8:be:
                    a5:48:e9:50:93:a9:74:a2:b3:99:a3:7c:45:15:51:
                    44:5d:52:0c:fa:3f:d3:28:c8:5e:22:64:82:88:69:
                    25:3c:ec:5a:f4:ba:9c:1a:bf:bb:c1:83:1a:e6:97:
                    67:5c:e5:d2:0b:52:49:d3:d7:5c:3c:57:da:29:97:
                    ed:50:40:bf:e1:99:38:7b:71:4d:bc:e2:93:cd:fd:
                    1b:54:71:dd:7b:76:67:90:00:94:99:e3:5f:f2:b0:
                    b4:3b:d3:55:73:f6:40:cd:84:7a:ce:b1:92:f4:7d:
                    41:27:5b:e9:c9:5a:ee:21:a4:ec:98:7c:a0:24:e3:
                    ff:b8:ab:48:64:cf:b9:f2:57:6c:2e:99:06:53:73:
                    59:e4:a7:80:79:11:84:d4:ad:c0:56:e9:eb:e3:64:
                    6f:1c:38:4f:0d:a1:9a:74:dd:0f:fd:e7:43:44:44:
                    f3:89:0d:29:a9:a2:0c:47:d7:c5:c9:a3:4d:42:a9:
                    e7:39:e5:e7:73:42:eb:b1:4f:bd:f2:64:6d:11:8d:
                    41:45:c6:13:34:ad:74:d0:c1:94:dc:0a:96:b7:2b:
                    89:4d:dc:a2:ef:cb:9c:69:8f:93:3a:02:84:12:cb:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:53:1B:3E:4F:2F:F9:C1:D9:CD:FB:D4:30:B2:BF:69:CA:E8:22
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ynNTGz5PL_nB2c371DCyv2nK6CI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e060::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:97:c7:c1:ac:31:6a:86:34:74:99:de:43:c1:3f:6a:ab:4b:
         cf:70:ab:50:13:ee:24:32:d4:5c:7e:2e:8b:f6:26:c5:df:f8:
         02:ee:b9:37:84:96:c2:8d:20:82:a6:c8:d9:73:d2:e7:1e:f9:
         6e:2a:9c:47:98:ca:c2:53:e4:27:11:9d:c0:2e:a5:88:dc:30:
         46:dd:ed:ce:a9:fd:6d:1d:b5:96:bd:49:bc:6f:d8:60:ea:34:
         b1:43:c1:d4:26:c1:90:72:51:33:77:ce:50:d5:54:02:82:53:
         da:13:2f:dc:05:ec:2a:c8:41:8b:ac:73:1a:a5:1c:60:d7:ae:
         35:1c:3f:8a:dd:ac:14:66:55:55:47:66:fd:79:f8:44:58:80:
         28:b5:1c:a2:4a:ac:b2:8d:93:fa:52:a9:b7:74:ce:db:ec:35:
         5f:41:0f:ad:12:43:96:77:02:1e:98:17:3a:1f:f0:1b:fc:35:
         0f:90:83:84:fd:3f:15:1e:21:dd:0b:e1:0d:d5:da:66:1e:27:
         ad:a6:e8:4e:1c:0c:d1:91:60:1b:41:f5:fa:90:69:fa:d1:62:
         b2:d5:69:5b:d2:d1:07:c9:c9:94:0c:cc:51:17:d7:01:85:05:
         1e:04:8d:0b:ec:05:de:00:d4:e8:61:52:e8:7a:65:6a:be:af:
         e3:3b:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----