Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/RUEf0OPPc589qcB0hoPSFGmPYL4.roa
File:                     RUEf0OPPc589qcB0hoPSFGmPYL4.roa (raw, json)
Hash identifier:          FQwPOdLkPgLDAKmmqz+PAzFotQjR2zZMysAGYc0qFMo=
Subject key identifier:   45:41:1F:D0:E3:CF:73:9F:3D:A9:C0:74:86:83:D2:14:69:8F:60:BE
Certificate issuer:       /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial:       018570675236321A2036DF5E37862C62FE83
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/RUEf0OPPc589qcB0hoPSFGmPYL4.roa
Signing time:             Mon 02 Jan 2023 02:54:57 +0000
ROA not before:           Mon 02 Jan 2023 02:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62257
IP address blocks:        2a12:eb80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:52:36:32:1a:20:36:df:5e:37:86:2c:62:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
        Validity
            Not Before: Jan  2 02:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45411fd0e3cf739f3da9c0748683d214698f60be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:aa:ef:ab:fe:ee:47:ab:1e:79:fe:3f:9a:a6:
                    28:f9:62:1f:94:cf:8f:71:74:4a:77:e3:54:6e:43:
                    6d:f3:b9:e0:49:a9:f3:31:27:a6:93:5f:37:02:69:
                    e8:f2:53:bc:58:aa:69:74:d8:3e:d2:64:bb:a0:56:
                    7c:85:4a:50:16:02:73:34:2a:c3:0d:5d:75:73:c5:
                    61:ef:89:3b:f8:55:4e:c9:f3:25:e2:c0:ea:75:60:
                    5f:4b:e7:dc:f9:2c:c0:91:0e:ee:04:b6:f7:16:81:
                    e6:0b:2c:ee:42:ba:dd:e1:04:b7:e6:60:1f:ad:70:
                    1c:b1:d4:cd:4e:91:27:db:32:25:fa:b8:a8:88:03:
                    41:5a:be:51:dc:96:0f:7f:21:1c:2f:a8:8f:5d:75:
                    da:82:ed:af:17:d1:07:58:04:02:04:79:dc:01:67:
                    27:1c:b6:49:ba:e7:31:6e:0a:1d:a0:8d:f4:7b:23:
                    74:a1:42:84:8f:b0:a4:ac:f1:18:e8:1d:01:94:89:
                    29:6a:b7:3e:dc:57:bc:16:56:3c:41:bb:c3:40:34:
                    73:3c:11:99:e3:07:df:de:f0:9b:50:2a:9a:50:74:
                    d9:57:14:69:04:59:cf:ea:a2:b9:3a:83:45:54:9b:
                    fc:38:d9:2a:1f:88:72:9e:92:a2:3d:f3:a7:66:3d:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:1F:D0:E3:CF:73:9F:3D:A9:C0:74:86:83:D2:14:69:8F:60:BE
            X509v3 Authority Key Identifier:
                keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/RUEf0OPPc589qcB0hoPSFGmPYL4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:eb80::/29

    Signature Algorithm: sha256WithRSAEncryption
         ec:0d:ec:64:79:77:6d:d7:92:e7:cd:79:2a:9f:68:05:7a:05:
         18:b2:07:e8:87:2f:bb:7a:1c:94:76:c5:38:67:2f:ae:35:78:
         0f:44:68:0f:3d:44:46:ca:91:11:3c:65:f3:26:6e:dd:7e:26:
         b0:25:e3:5c:c0:bf:df:d9:37:fe:dd:b5:37:f9:0e:13:53:06:
         51:78:a2:fa:03:c6:02:df:e6:43:0f:c5:99:7f:ca:e1:e2:05:
         0a:c4:0b:ac:10:a6:c5:06:27:07:f1:83:f8:44:7d:33:31:4f:
         0c:7c:55:df:27:2a:a8:d3:91:5c:42:41:47:90:f6:f2:e9:cf:
         74:3d:1b:70:54:10:20:58:91:69:a7:39:04:c4:34:97:0f:1c:
         c9:ff:3c:fa:d3:66:a4:29:12:65:80:9d:34:50:be:ba:14:00:
         c8:aa:81:6c:59:25:20:fe:4d:c5:7e:c5:4d:79:46:cd:55:6b:
         93:1b:7b:46:0a:f9:62:a4:2c:5e:78:90:32:35:25:d2:71:54:
         46:12:eb:41:33:2c:db:02:a1:3e:5d:64:06:c7:0b:d2:b8:fc:
         d0:32:23:26:fa:8a:7a:8f:fe:45:e9:3d:4d:09:bf:53:a0:d6:
         cf:7d:c1:ec:29:0f:27:97:c6:45:b1:a0:2b:09:fa:04:31:1e:
         ae:a9:29:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----