Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa
File:                     gJOHk1T22BQYM7SIjFT53cgn6fI.roa (raw, json)
Hash identifier:          KhDVAuHvui7E6B8u5I6xQvFdzFDe4qB3zkhZVqHR7pU=
Subject key identifier:   80:93:87:93:54:F6:D8:14:18:33:B4:88:8C:54:F9:DD:C8:27:E9:F2
Certificate issuer:       /CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Certificate serial:       01857315F5734A12969708FBFB0E53085A9D
Authority key identifier: 20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa
Signing time:             Mon 02 Jan 2023 15:24:56 +0000
ROA not before:           Mon 02 Jan 2023 15:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207487
IP address blocks:        2001:678:c18::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:f5:73:4a:12:96:97:08:fb:fb:0e:53:08:5a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
        Validity
            Not Before: Jan  2 15:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8093879354f6d8141833b4888c54f9ddc827e9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:4b:50:67:29:71:92:db:e1:64:0e:86:37:
                    98:6f:18:16:a6:ec:4b:ef:78:ea:a8:3c:f4:98:a4:
                    c6:8f:b2:0e:ae:ff:44:8b:27:51:16:4f:67:01:01:
                    39:6b:0d:d9:5b:e8:70:d5:b5:c9:41:0c:a7:ad:bc:
                    9e:73:63:ef:98:f7:9d:35:44:b4:67:91:26:5e:53:
                    58:ea:8c:cf:d7:c4:1f:0e:cf:c2:e5:95:65:34:81:
                    61:e6:e9:97:9b:e0:7a:e6:9d:c0:cf:e6:d9:26:0e:
                    03:d4:83:29:78:32:3f:c8:df:f4:8c:9f:76:d4:78:
                    26:6f:db:86:0b:0b:1d:b0:9a:f5:fe:0a:0f:09:7b:
                    59:54:89:97:d2:2a:6f:d3:67:6d:a6:4c:64:c4:22:
                    e2:98:f7:6d:21:5b:57:fb:c6:dc:53:c3:35:5f:ae:
                    b8:16:ab:3d:9e:25:e8:ae:47:0c:52:8b:a5:43:92:
                    c4:e6:bc:ae:ea:cd:65:68:7d:8e:2a:26:4a:e5:09:
                    0e:1a:bf:21:6d:2b:39:85:33:a6:b0:91:1f:9f:3f:
                    6b:89:7d:7d:dd:a8:1e:ed:65:c9:f4:5f:72:72:92:
                    0c:98:ac:2e:2e:5d:64:9a:a4:9a:51:57:f2:42:b3:
                    fe:23:d9:e8:db:7a:c5:ae:cb:85:7d:78:51:4d:7e:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:93:87:93:54:F6:D8:14:18:33:B4:88:8C:54:F9:DD:C8:27:E9:F2
            X509v3 Authority Key Identifier:
                keyid:20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c18::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:07:9a:e8:36:7c:da:13:0a:c6:df:01:07:09:67:dc:82:fb:
         70:e7:ab:13:e5:ab:85:b6:f6:34:55:4f:7e:88:8a:0d:90:cd:
         a0:71:ee:4d:63:04:33:a1:ca:44:ca:2c:e1:14:e2:33:2a:65:
         17:25:31:b4:92:fa:52:4e:72:9d:62:52:21:89:a4:57:09:e0:
         62:1b:cb:9f:3d:37:1d:40:5a:77:ab:43:bb:75:24:d0:8b:eb:
         7b:2d:4d:f7:2d:06:a8:dd:d5:1a:e9:a0:09:6c:22:f2:22:ba:
         39:3e:f2:0e:ea:f8:85:30:b6:d9:20:4f:a3:b6:9c:66:77:20:
         27:07:a1:22:75:9a:b2:94:c4:22:f9:68:14:1b:36:f9:64:8c:
         77:97:70:36:a8:44:2a:43:54:66:1a:e2:44:8f:ab:bf:a5:cc:
         46:6e:c6:44:23:67:a2:01:30:c1:73:4d:60:a0:58:68:55:16:
         c4:a0:08:bb:02:ba:6f:0a:9f:5d:b5:f6:92:f8:c7:b5:11:d1:
         ee:fd:fe:6c:86:df:10:c1:f7:06:e0:aa:c9:3c:61:a8:bd:cb:
         d0:20:36:69:a8:61:0e:c2:69:ae:26:a8:ff:01:6d:3e:07:e0:
         25:41:9c:68:ea:38:23:77:f0:b3:6e:fc:f0:64:26:7d:f4:b7:
         0b:10:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----