Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/p0fxIsHu1HEVStVOqU1Z4wb7Hg4.roa
File:                     p0fxIsHu1HEVStVOqU1Z4wb7Hg4.roa (raw, json)
Hash identifier:          kPjjlsXz9vGPaCeSjPNh16upzp8Er1grLblIHdlJdN0=
Subject key identifier:   A7:47:F1:22:C1:EE:D4:71:15:4A:D5:4E:A9:4D:59:E3:06:FB:1E:0E
Certificate issuer:       /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial:       01870D3014B7219F7D7B7D3CD5D9A1958685
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/p0fxIsHu1HEVStVOqU1Z4wb7Hg4.roa
Signing time:             Thu 23 Mar 2023 06:37:47 +0000
ROA not before:           Thu 23 Mar 2023 06:37:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59613
IP address blocks:        2a02:2278:fffd::/48 maxlen: 48
                          2a02:2278:fffe::/48 maxlen: 48
                          2a02:2278:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:30:14:b7:21:9f:7d:7b:7d:3c:d5:d9:a1:95:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
        Validity
            Not Before: Mar 23 06:37:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a747f122c1eed471154ad54ea94d59e306fb1e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:10:51:6c:b2:cd:25:7f:b0:a5:61:3a:3c:
                    ea:b2:20:c6:3d:71:a3:30:1c:10:63:fe:cc:11:7b:
                    41:94:1c:37:c2:b2:55:4d:3b:30:36:85:23:1c:69:
                    c3:c5:a6:30:f1:74:65:cb:49:2d:13:55:98:01:ec:
                    35:df:b5:f8:04:58:41:42:ff:c5:c1:c2:68:f3:5d:
                    3a:a0:d3:f3:dd:9d:4d:ff:bc:6d:4a:63:e6:a0:36:
                    67:1d:e7:b5:bd:48:4c:0f:1a:ae:e1:0d:95:11:7d:
                    71:5e:3b:8e:96:bd:d5:94:35:b2:ad:5a:a8:2d:65:
                    5d:a3:89:8f:29:75:e5:cf:7d:35:34:de:ff:32:67:
                    64:4c:75:2f:43:dc:ff:b9:ef:42:b0:8f:17:c7:ac:
                    e0:54:7d:98:70:f3:eb:4b:06:46:10:c2:86:bf:7c:
                    d0:43:26:95:74:c1:1b:70:0f:a2:db:8d:5f:77:6c:
                    95:79:3a:94:9d:d3:f4:bc:43:2a:ec:c8:c5:0f:74:
                    e6:fc:d6:e9:1f:fd:18:44:fe:24:b8:3e:c0:2f:20:
                    28:62:e9:9d:f2:ea:f7:80:06:b5:43:9b:43:fc:26:
                    57:ef:04:23:d6:90:aa:2d:a0:b6:c8:fa:7e:f6:69:
                    97:f6:df:11:f6:a3:82:80:b2:ca:20:3e:68:da:33:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:F1:22:C1:EE:D4:71:15:4A:D5:4E:A9:4D:59:E3:06:FB:1E:0E
            X509v3 Authority Key Identifier:
                keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/p0fxIsHu1HEVStVOqU1Z4wb7Hg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:2278:fffd::-2a02:2278:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:52:9f:2e:95:89:e0:f8:31:48:7e:b7:8b:d0:27:a4:ea:
         ce:af:02:a7:4d:ef:90:3a:51:41:66:87:a8:06:d2:a1:3d:b7:
         2f:c1:0a:00:34:dd:34:44:39:46:65:d4:37:99:c1:fd:32:80:
         20:d0:36:3b:47:71:03:de:2a:ca:e5:16:05:7f:ab:f8:7c:fb:
         03:07:24:b0:79:dd:86:a3:ba:d0:6e:9b:8f:22:5b:c4:5e:5b:
         75:6a:cb:09:66:60:31:ca:3a:63:bc:48:fb:a8:71:cc:33:85:
         d0:0f:2c:bf:69:f2:c3:1a:99:a1:8b:48:00:7c:81:a8:fd:0f:
         28:c3:17:b0:f3:f2:91:94:95:7d:e4:93:7e:94:5d:be:9f:d1:
         47:ba:0b:61:9c:0f:74:b0:f1:15:03:0e:42:5b:6d:33:a7:24:
         b1:53:99:e6:35:fc:05:87:e7:34:d9:1b:3e:f7:1c:ce:6c:73:
         87:f1:aa:77:6f:c2:38:db:e3:ed:67:39:b9:cc:e2:63:7f:b2:
         06:f9:01:0e:62:69:de:24:c1:89:e0:48:a0:1a:9a:b7:07:c8:
         3a:8c:4e:83:9d:a0:28:9b:da:8f:4a:bd:d2:3a:f0:73:cd:79:
         52:8e:19:f9:71:8b:a6:7e:ba:7b:9b:66:1f:08:be:69:bc:65:
         99:ed:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----