Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/Ys_c-C-1RWfqZSgS4BmDBqHxqQ8.roa
File:                     Ys_c-C-1RWfqZSgS4BmDBqHxqQ8.roa (raw, json)
Hash identifier:          QIdcuNM7rocyzMqRMj31smo+1J7YYzl83s6kF9y3pd8=
Subject key identifier:   62:CF:DC:F8:2F:B5:45:67:EA:65:28:12:E0:19:83:06:A1:F1:A9:0F
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       01857139AEFC1E8B30CC47AC2140C602D5BD
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/Ys_c-C-1RWfqZSgS4BmDBqHxqQ8.roa
Signing time:             Mon 02 Jan 2023 06:44:43 +0000
ROA not before:           Mon 02 Jan 2023 06:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20755
IP address blocks:        80.69.32.0/20 maxlen: 20
                          2a00:1a18::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:ae:fc:1e:8b:30:cc:47:ac:21:40:c6:02:d5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Jan  2 06:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62cfdcf82fb54567ea652812e0198306a1f1a90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:5b:bb:40:81:6d:d3:79:d6:75:52:d7:bf:
                    66:c0:03:bb:d8:05:47:8c:c8:86:3e:bc:06:d5:70:
                    ec:fd:27:2c:1b:67:d5:c9:3d:57:6d:7c:44:18:eb:
                    55:cb:de:dc:b2:b8:65:9b:74:ce:64:f6:86:fa:4b:
                    a6:ae:fa:25:1d:66:68:ba:3a:75:27:06:e2:7a:e9:
                    a2:4a:35:f1:75:2c:51:23:92:40:95:68:11:63:05:
                    b7:c9:02:b5:db:49:41:2a:7f:ac:24:d7:35:19:a7:
                    3d:60:17:2e:65:90:20:22:0a:89:4e:5f:38:3b:4b:
                    90:63:c8:c9:43:3a:c3:a3:03:38:d6:b8:28:b8:60:
                    72:4d:cc:ed:31:e1:4e:86:a9:74:6e:71:4d:60:5d:
                    22:68:9e:ef:3a:41:8f:5f:b9:46:ec:b6:15:27:b3:
                    57:e3:f0:b6:36:b9:f3:af:cd:9e:d0:90:9b:3f:e5:
                    cf:1b:74:82:58:08:fe:73:29:36:5b:41:85:c8:6c:
                    74:57:1f:83:75:4c:dc:b0:f7:ff:47:34:40:5b:f6:
                    1c:0d:da:09:6e:db:fe:42:7b:de:af:08:f7:00:91:
                    1c:fb:e3:bf:44:05:ce:df:e9:a3:ba:1f:71:d7:24:
                    91:eb:24:a0:c5:06:a1:12:6e:d0:5c:e7:bb:8c:f8:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:DC:F8:2F:B5:45:67:EA:65:28:12:E0:19:83:06:A1:F1:A9:0F
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/Ys_c-C-1RWfqZSgS4BmDBqHxqQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.69.32.0/20
                IPv6:
                  2a00:1a18::/29

    Signature Algorithm: sha256WithRSAEncryption
         cf:0c:2e:58:c9:8e:19:52:ce:06:28:60:5a:77:f2:ae:a5:6b:
         c2:22:77:9a:2d:54:5d:5a:f1:eb:4a:02:3c:12:12:ba:75:57:
         c0:6c:8c:2e:a9:66:99:0b:25:2b:58:19:5f:c8:85:e2:f5:b1:
         a7:8c:42:23:4e:52:59:eb:40:d5:2e:13:38:64:ad:f9:99:8b:
         e0:e2:90:65:c6:ba:a1:06:23:ad:02:75:14:9c:d8:24:be:5b:
         10:bf:39:45:a6:eb:df:b9:b6:fd:55:34:ae:fd:a7:dc:3e:c1:
         0c:ce:31:c8:82:4c:02:02:07:b8:48:b5:6b:e5:c3:b4:e9:12:
         40:9b:c5:fb:36:cd:f8:f5:9e:8b:86:a2:71:26:46:63:8c:db:
         65:4a:31:bc:86:d0:e0:8c:81:99:c9:41:4c:d0:84:97:5d:6e:
         21:61:80:5c:f9:7f:d8:18:ee:22:d8:98:52:e1:e2:8c:59:ec:
         7b:ea:dd:06:ba:65:41:27:df:d1:75:9a:1e:76:79:df:5b:cd:
         85:97:db:95:7d:f4:2d:8b:c4:7e:88:05:72:9c:1d:b5:d2:a5:
         47:22:a1:af:77:f9:1d:e3:5e:12:d3:9a:0f:72:b7:ae:81:a8:
         b4:68:36:46:10:d5:24:e0:a8:81:f0:84:eb:f4:aa:84:31:3d:
         58:c5:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----