Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa
File:                     hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa (raw, json)
Hash identifier:          vqSF78mDfYw8FPw/UVQKA/kqzkYXD+bA1QJqV/EmiaQ=
Subject key identifier:   85:2C:64:CA:4E:18:A5:EF:5E:CE:B6:29:47:B3:C2:45:86:32:0F:F3
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       0187DBF5ABBE9823009590D0E6C546CF5516
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa
Signing time:             Tue 02 May 2023 10:15:23 +0000
ROA not before:           Tue 02 May 2023 10:15:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        2a10:12c0::/29 maxlen: 29
                          2a0e:be00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:db:f5:ab:be:98:23:00:95:90:d0:e6:c5:46:cf:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: May  2 10:15:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=852c64ca4e18a5ef5eceb62947b3c24586320ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:51:34:57:3e:ed:a8:3c:36:a4:35:53:60:
                    6c:7f:4a:c9:a2:1e:15:1e:dc:8e:df:84:ff:b5:34:
                    b9:94:52:36:2b:35:ab:12:48:1c:2d:07:e7:e9:1b:
                    4f:4a:c7:48:7f:e3:e5:22:25:31:a5:15:0f:7d:80:
                    c1:63:08:6c:6c:bc:6a:ba:36:2c:e8:16:1e:31:48:
                    5f:96:38:73:cc:37:9d:47:53:d7:68:8b:c7:b5:69:
                    22:9a:5e:ac:bf:93:22:ce:f5:0c:23:8e:63:81:61:
                    96:f4:e9:61:0f:41:55:21:c2:2c:d7:cb:66:d4:51:
                    d2:b3:ab:a6:63:2e:21:ee:fd:16:cc:2c:74:c1:da:
                    1a:67:0f:b0:21:4b:90:f9:e2:8c:33:c0:67:1a:5c:
                    dc:90:ee:db:6c:8c:76:cf:45:53:4f:65:22:46:48:
                    63:19:39:80:10:cb:0e:c1:ac:13:18:67:76:d3:f9:
                    52:10:68:02:c6:0b:00:f2:54:1d:d7:47:60:fd:5a:
                    c1:94:6a:f3:e7:37:c8:1d:12:d0:64:39:55:6e:7e:
                    07:ae:11:a4:df:3d:16:41:41:69:86:30:e4:08:24:
                    b4:c3:ac:4b:d3:73:91:9a:71:7c:e0:71:cb:16:cd:
                    a3:2b:e7:14:24:b3:05:e8:05:78:7b:44:38:f7:63:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2C:64:CA:4E:18:A5:EF:5E:CE:B6:29:47:B3:C2:45:86:32:0F:F3
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:be00::/29
                  2a10:12c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:5d:db:63:15:ab:a0:fd:36:38:10:5c:e3:ed:b9:0c:ff:
         fb:0a:b2:2e:63:bf:4b:93:f3:82:56:1a:07:07:08:43:9b:9d:
         ac:a1:49:11:4d:dc:74:8f:22:57:da:7b:22:e7:23:9b:cd:15:
         dd:83:8b:92:f2:6e:a0:41:f0:74:b7:35:63:d7:83:41:1c:9d:
         3d:b7:b9:6b:9e:60:ca:50:b3:da:b5:1e:d1:c7:95:05:7a:1c:
         5b:0c:68:aa:df:48:6a:ad:4a:f6:ac:10:15:6f:90:55:cf:cd:
         2f:d4:6c:1f:3f:9e:43:c9:22:9f:c3:82:d3:e0:1d:64:73:9c:
         91:fd:6b:51:35:51:92:a0:61:c8:99:05:e3:92:aa:17:98:58:
         dc:c3:ba:3f:e4:27:02:e7:e1:52:79:3b:db:a7:e9:73:95:34:
         69:08:b2:ce:0c:d8:e3:eb:f2:a9:d7:72:2b:4a:46:2d:67:e5:
         d1:cd:b6:a1:57:4d:49:6d:d5:f3:f7:64:58:38:4c:2f:90:6a:
         7d:6a:d3:c4:85:9b:97:81:9d:33:3f:b0:a2:ef:73:f8:80:0d:
         32:8e:5e:02:a9:5c:34:47:9c:cc:12:93:b6:9b:69:a1:a8:c4:
         11:0b:55:aa:e7:c5:c3:50:e3:81:b8:d2:92:1c:1f:2b:be:be:
         bc:9d:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----