Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa
File:                     BcD_E7_Rrisv7vykXx--KSg9jFo.roa (raw, json)
Hash identifier:          Nr803cu1JLRwZxoSiynyh1OJcbVTFLI9Vul7xW7ZSHg=
Subject key identifier:   05:C0:FF:13:BF:D1:AE:2B:2F:EE:FC:A4:5F:1F:BE:29:28:3D:8C:5A
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C3248B4EF252A3948C0780AF25ADDB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa
Signing time:             Mon 02 Jan 2023 09:14:52 +0000
ROA not before:           Mon 02 Jan 2023 09:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208872
IP address blocks:        2a06:e881:6600::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:24:8b:4e:f2:52:a3:94:8c:07:80:af:25:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05c0ff13bfd1ae2b2feefca45f1fbe29283d8c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:82:94:c1:05:34:79:57:fa:d0:15:90:29:
                    e8:e8:94:a2:5b:c7:c0:24:79:4b:88:33:ca:25:3d:
                    f3:3c:0c:37:94:de:2f:7f:db:cf:fe:c4:fc:0f:40:
                    48:4f:c1:1a:ac:8a:8c:64:6d:f9:62:c8:7b:e3:6e:
                    bf:91:12:66:af:0e:82:f2:fe:c4:3a:d2:72:b2:16:
                    96:47:5a:fe:30:0e:bd:52:d2:70:02:be:d8:d1:0c:
                    e2:6a:dc:ff:21:5a:cc:53:dc:35:0c:c8:38:f8:75:
                    f8:71:c7:2a:db:51:af:94:c8:8c:e8:36:a6:db:b3:
                    f3:ae:e8:88:cf:0d:4c:41:40:e0:19:61:30:a2:5b:
                    1b:55:37:9a:9c:10:32:aa:19:5e:8e:40:7c:87:5e:
                    9c:57:5d:02:69:44:3f:fb:a9:bc:af:70:bb:f8:10:
                    c7:33:f1:4b:d8:f0:88:d0:85:9d:d6:ff:97:d9:6d:
                    6b:33:c3:30:30:65:ba:26:ba:39:5d:cd:e4:e5:02:
                    9c:11:4b:4d:f6:37:7e:a1:e1:d1:25:91:1f:48:e5:
                    40:65:bd:60:af:86:e5:ec:6e:55:87:8f:8a:81:df:
                    c4:a5:08:09:e4:53:a0:76:64:19:16:8e:67:d9:37:
                    73:2e:05:05:4a:81:18:6e:38:55:dd:a7:7f:7b:86:
                    bd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:FF:13:BF:D1:AE:2B:2F:EE:FC:A4:5F:1F:BE:29:28:3D:8C:5A
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:6600::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:98:55:17:b6:15:11:35:fc:5e:c1:75:82:3d:92:4d:73:10:
         0f:e1:d8:5d:ab:10:fa:5e:47:80:03:e5:76:cd:bf:fc:c1:0b:
         3c:69:e9:5e:5e:e2:72:e6:e7:2f:79:ea:64:cd:ba:76:66:1f:
         7d:52:d2:7c:04:cc:60:da:53:7f:ac:98:e9:bf:20:5d:71:5e:
         5b:b4:30:27:2e:47:f4:12:1d:63:c5:c2:d0:da:95:68:86:d1:
         94:9e:83:c6:64:07:2f:7f:fb:eb:89:d4:b4:18:f6:5f:9f:9b:
         27:e2:2a:01:ec:fd:70:10:43:5d:f9:f8:bf:9d:9b:98:6c:39:
         0e:af:23:04:c2:d3:60:1c:06:37:b8:2d:f1:5b:46:28:56:7e:
         fa:e6:38:03:5a:c2:aa:f5:ed:29:69:11:87:ff:12:13:14:49:
         d2:f7:bc:ef:c5:57:96:23:58:74:27:fc:2a:9d:49:e5:38:ca:
         af:c3:9d:b6:02:9c:26:0d:b9:59:02:0d:d4:a1:38:15:0d:c9:
         89:16:0d:10:22:aa:ab:3c:4f:8d:72:8f:2e:38:c3:1b:28:bb:
         8d:bf:09:22:ee:f9:d8:d6:ad:fb:2c:66:3a:19:b0:69:09:18:
         e7:a8:2b:4d:fa:e5:57:bb:3a:bc:81:14:4f:09:8a:88:66:61:
         d1:a5:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----