Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ICxbBy8sr-p_rxus-j4pwblSuKs.roa
File:                     ICxbBy8sr-p_rxus-j4pwblSuKs.roa (raw, json)
Hash identifier:          xOduAFQs0LBPdRoraNHVchUYvoO41RzKvdP/yTDAnWY=
Subject key identifier:   20:2C:5B:07:2F:2C:AF:EA:7F:AF:1B:AC:FA:3E:29:C1:B9:52:B8:AB
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       0187D136C9E8C8D064B2C3CB0C8BB661A194
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ICxbBy8sr-p_rxus-j4pwblSuKs.roa
Signing time:             Sun 30 Apr 2023 08:10:41 +0000
ROA not before:           Sun 30 Apr 2023 08:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        2a10:12c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d1:36:c9:e8:c8:d0:64:b2:c3:cb:0c:8b:b6:61:a1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Apr 30 08:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=202c5b072f2cafea7faf1bacfa3e29c1b952b8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:7f:e3:30:3d:cc:0d:bd:66:c4:4a:80:ff:
                    fa:61:0c:04:6b:f7:82:72:ef:67:93:6a:b0:57:c5:
                    65:59:e2:ff:d1:ca:cf:a8:f2:c6:92:47:af:e3:09:
                    7b:3c:92:be:c7:a5:29:36:9d:08:3c:8b:d5:19:dd:
                    e3:63:ea:d5:96:80:94:b3:f1:e2:6e:3e:f5:ac:09:
                    fe:c7:17:5a:04:75:2a:1f:b3:ac:2b:8e:4d:2e:d4:
                    04:bf:1c:35:32:04:d8:69:f7:04:e2:6e:1a:00:a9:
                    6b:2a:49:e5:e9:6a:2d:19:4f:52:84:6b:22:90:bb:
                    9c:26:92:58:84:01:03:cc:32:22:65:c7:4d:75:b2:
                    4e:0c:27:38:bb:8c:1f:f9:b7:74:32:90:55:ee:c8:
                    bc:7e:25:4f:97:9c:fe:4e:fb:f8:ac:12:b7:c8:2c:
                    6b:f3:74:89:af:25:d8:75:6f:46:66:36:58:e2:ff:
                    2d:5d:9e:f4:05:66:4e:ec:b5:d3:07:82:c2:0b:89:
                    20:25:97:e6:2d:14:4f:2b:a0:ab:ab:38:8e:a1:96:
                    d0:82:43:a5:a9:44:31:d6:6b:53:72:7b:47:12:82:
                    2e:21:e4:23:a8:d8:98:30:a3:c2:bc:43:ec:18:dc:
                    45:fe:54:f0:42:4f:a9:e6:5c:9e:e3:c9:2a:99:6d:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2C:5B:07:2F:2C:AF:EA:7F:AF:1B:AC:FA:3E:29:C1:B9:52:B8:AB
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ICxbBy8sr-p_rxus-j4pwblSuKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:12c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:ae:82:96:59:f5:66:96:2c:e5:8b:eb:9b:d3:1c:0e:60:
         70:c6:54:22:4c:66:eb:9e:9e:d6:7d:2f:84:b7:43:4f:86:f0:
         67:27:c3:40:b8:0a:11:34:5c:d0:3d:e1:5c:48:69:95:19:e5:
         e8:66:e4:36:ce:d9:8a:43:bc:85:0d:9c:58:a1:93:d0:77:80:
         9c:8e:68:1d:49:a9:0a:dc:33:e3:24:43:b3:33:13:c9:62:91:
         89:73:93:f4:c9:a6:7a:8b:ee:2f:1e:e5:26:41:20:da:64:5d:
         a8:5c:d7:ec:dc:78:39:29:1b:36:44:a3:38:06:ea:fb:4a:52:
         18:00:02:4d:e3:fe:59:41:32:28:3f:7c:a6:94:04:32:74:6c:
         7c:c2:09:c3:a9:8f:31:90:0e:85:b2:4f:69:35:a8:b6:f7:12:
         34:8c:24:69:d9:a1:34:fa:ae:2f:58:60:41:52:ef:91:73:9a:
         07:80:5a:40:ca:5e:25:1f:c3:b4:6e:23:60:c7:0d:02:18:53:
         66:ac:7e:cd:a9:fc:78:39:9d:fa:f4:56:21:0c:8b:c7:1e:49:
         93:02:2d:65:86:0d:21:28:40:3c:79:64:d8:ed:bd:c0:7d:11:
         0c:0a:84:f7:94:04:a6:8f:a2:f7:84:5f:ea:01:ca:8d:02:91:
         73:63:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----