Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tbx0dhX2ScCpmFWyL92HPW_kcG8.roa
File:                     tbx0dhX2ScCpmFWyL92HPW_kcG8.roa (raw, json)
Hash identifier:          Dxx5aCsQglZ3i66LjPGCqGJZnWk4O/Lz85uab+A3YXo=
Subject key identifier:   B5:BC:74:76:15:F6:49:C0:A9:98:55:B2:2F:DD:87:3D:6F:E4:70:6F
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C322FBCCB6A4DD7BFCC97092D0491C
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tbx0dhX2ScCpmFWyL92HPW_kcG8.roa
Signing time:             Mon 02 Jan 2023 09:14:51 +0000
ROA not before:           Mon 02 Jan 2023 09:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207754
IP address blocks:        2a06:e881:7104::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:22:fb:cc:b6:a4:dd:7b:fc:c9:70:92:d0:49:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5bc747615f649c0a99855b22fdd873d6fe4706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:1d:90:e3:ab:cd:65:f4:ea:28:e0:2f:0c:
                    9d:1a:38:a3:54:f1:3c:c8:22:2a:20:c0:84:19:97:
                    80:d9:f9:ea:8d:77:39:5a:87:cb:70:a8:a2:48:67:
                    da:65:04:e6:27:15:6e:1e:61:51:c7:72:ad:cf:ee:
                    73:9a:2f:32:f6:fa:cb:c2:9d:68:27:94:3f:f4:f6:
                    89:ed:75:00:54:ba:4d:82:50:a3:12:85:bd:b0:3f:
                    9c:29:da:ea:63:6a:c5:c8:d8:e9:2a:26:81:e6:bf:
                    cc:af:ef:19:5c:4e:91:29:5f:7f:98:10:87:0d:d8:
                    d1:e0:6a:40:a2:ea:d4:10:9a:3a:1c:b8:39:e4:dc:
                    c3:b5:91:1b:1b:c3:9b:79:d6:1c:d6:7f:fa:6c:2c:
                    f9:46:ba:fc:7a:5e:06:4e:51:e2:00:68:54:95:30:
                    22:e6:ca:7b:a7:f2:a9:05:49:36:4f:ce:81:9c:03:
                    29:89:2f:03:65:ac:e8:c7:69:e9:d3:4c:0a:7b:9b:
                    53:c8:11:ad:87:9e:5d:df:63:5e:be:98:92:6d:30:
                    38:7b:a9:b9:54:36:e3:f0:6b:4f:de:b4:ae:2e:bf:
                    3b:e6:33:e7:e5:37:1c:46:76:77:a5:be:57:ae:ff:
                    c2:6f:0d:93:71:33:72:99:4e:57:25:e8:1c:9a:7f:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:74:76:15:F6:49:C0:A9:98:55:B2:2F:DD:87:3D:6F:E4:70:6F
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tbx0dhX2ScCpmFWyL92HPW_kcG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:7104::/46

    Signature Algorithm: sha256WithRSAEncryption
         24:c7:88:7f:ab:72:18:74:84:f6:d8:a9:10:3c:b0:50:94:4a:
         bd:e1:d6:ea:b2:41:83:d4:fc:3f:97:68:cc:59:3d:14:b2:23:
         ca:6f:fc:7b:4b:e1:e6:c7:39:49:c8:89:8d:6d:de:33:b2:ae:
         dd:71:09:d9:a1:55:38:d4:da:d7:88:19:d7:5f:8c:35:78:e6:
         aa:8d:91:5e:15:d0:c0:4c:8f:65:5b:13:d2:d7:77:3f:fc:db:
         29:53:8a:6d:c9:b1:21:7f:ac:98:ee:7a:a3:81:bd:de:7e:b1:
         ab:20:25:d6:24:38:cb:01:da:5e:ce:e3:0d:54:24:f8:61:14:
         78:a5:21:f8:39:c9:9a:bc:92:f6:d5:4a:01:99:d5:a5:9e:87:
         7b:25:d6:7e:b1:0e:b5:46:3b:cb:81:a3:a9:ed:98:27:f4:ea:
         5c:cf:b8:ea:77:c6:c4:11:ad:87:ff:38:74:6b:4c:91:f2:b9:
         67:51:cb:d9:7c:e5:f1:ee:d7:16:21:47:24:6e:48:bf:c2:cd:
         76:00:29:48:c7:41:bd:9d:15:39:90:25:dc:b1:b0:a9:f5:b2:
         3c:3f:ee:26:0b:d2:d9:23:7e:e1:93:5b:6c:07:d2:84:9b:1c:
         2f:e8:cb:c0:ed:d6:59:4b:27:54:77:84:8a:61:9c:6d:12:d1:
         c5:5b:2b:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxwyL7zLak3Xv8yXCS0EkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMwMTAyMDkxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWJjNzQ3NjE1ZjY0OWMwYTk5ODU1YjIyZmRkODczZDZmZTQ3MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslEdkOOrzWX06ijgLwydGjijVPE8
yCIqIMCEGZeA2fnqjXc5WofLcKiiSGfaZQTmJxVuHmFRx3Ktz+5zmi8y9vrLwp1o
J5Q/9PaJ7XUAVLpNglCjEoW9sD+cKdrqY2rFyNjpKiaB5r/Mr+8ZXE6RKV9/mBCH
DdjR4GpAourUEJo6HLg55NzDtZEbG8ObedYc1n/6bCz5Rrr8el4GTlHiAGhUlTAi
5sp7p/KpBUk2T86BnAMpiS8DZazox2np00wKe5tTyBGth55d32NevpiSbTA4e6m5
VDbj8GtP3rSuLr875jPn5TccRnZ3pb5Xrv/Cbw2TcTNymU5XJegcmn/GGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLW8dHYV9knAqZhVsi/dhz1v5HBvMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvdGJ4MGRoWDJTY0NwbUZXeUw5MkhQV19rY0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgbogXEE
MA0GCSqGSIb3DQEBCwUAA4IBAQAkx4h/q3IYdIT22KkQPLBQlEq94dbqskGD1Pw/
l2jMWT0UsiPKb/x7S+HmxzlJyImNbd4zsq7dcQnZoVU41NrXiBnXX4w1eOaqjZFe
FdDATI9lWxPS13c//NspU4ptybEhf6yY7nqjgb3efrGrICXWJDjLAdpezuMNVCT4
YRR4pSH4OcmavJL21UoBmdWlnod7JdZ+sQ61RjvLgaOp7Zgn9Opcz7jqd8bEEa2H
/zh0a0yR8rlnUcvZfOXx7tcWIUckbki/ws12AClIx0G9nRU5kCXcsbCp9bI8P+4m
C9LZI37hk1tsB9KEmxwv6MvA7dZZSydUd4SKYZxtEtHFWyte
-----END CERTIFICATE-----