Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XTEL79ef-zUS4y0dydCFOSWtPH8.roa
File:                     XTEL79ef-zUS4y0dydCFOSWtPH8.roa (raw, json)
Hash identifier:          OxY7SHFVoVhxzHamjGjFlRQ3GWNQudMU5c02M21GsTA=
Subject key identifier:   5D:31:0B:EF:D7:9F:FB:35:12:E3:2D:1D:C9:D0:85:39:25:AD:3C:7F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018746DBFCC5D2BC33644345077835F7CE2D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XTEL79ef-zUS4y0dydCFOSWtPH8.roa
Signing time:             Mon 03 Apr 2023 11:23:54 +0000
ROA not before:           Mon 03 Apr 2023 11:23:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        2a07:e345:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:46:db:fc:c5:d2:bc:33:64:43:45:07:78:35:f7:ce:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Apr  3 11:23:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d310befd79ffb3512e32d1dc9d0853925ad3c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:ca:91:99:d6:67:1a:42:0a:f0:08:be:2f:
                    0b:16:45:d7:91:ad:50:95:5a:53:f5:63:1a:1c:3f:
                    cd:7b:3f:84:e6:15:96:3b:51:a1:b5:bb:ee:40:a7:
                    fb:7f:40:49:7e:21:20:71:ce:fe:6d:0b:1e:6f:f5:
                    4e:98:f5:89:f2:10:4a:3c:70:a1:80:be:09:9b:14:
                    1e:6b:11:99:b6:79:1d:8f:2d:24:5a:16:8b:27:fa:
                    bc:f2:96:2c:5d:cf:f9:92:14:7c:93:89:7b:eb:06:
                    cd:21:91:36:bc:10:52:1a:1b:3a:a0:99:2e:57:62:
                    3e:48:77:31:1c:81:51:2e:b7:ec:67:71:ca:69:d3:
                    fa:9b:84:c2:e0:9f:0c:aa:ad:05:bd:e2:81:61:f5:
                    ad:33:ef:e7:0c:1b:6e:d6:11:8e:e7:e6:fa:4c:bb:
                    27:bb:d5:ed:f8:f2:b2:d1:cf:2c:83:ab:f2:de:e5:
                    7c:3e:a5:cc:f0:7c:0b:f9:bc:e7:25:41:68:c5:7d:
                    3b:04:5f:ca:80:97:d5:a5:f4:0f:85:f9:8c:d0:74:
                    75:0f:d2:aa:3b:81:4e:d4:9f:52:0f:5c:a9:75:fb:
                    80:e0:b9:92:6c:a7:78:2d:d8:a1:a7:cc:19:31:ec:
                    f1:75:7d:67:db:68:87:d4:fe:2a:75:ef:74:86:18:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:31:0B:EF:D7:9F:FB:35:12:E3:2D:1D:C9:D0:85:39:25:AD:3C:7F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XTEL79ef-zUS4y0dydCFOSWtPH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:e345:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:ae:90:bf:4e:75:6f:b7:f9:3e:fc:08:12:6e:85:e9:08:
         45:e3:a1:26:88:d5:38:5f:19:bf:61:92:5c:2a:4c:4e:8b:1f:
         da:17:c8:b6:c8:f4:83:55:08:54:2e:2a:31:23:6d:00:b0:c8:
         ec:e2:76:2b:9b:da:4a:b5:13:54:3a:15:cd:70:aa:bb:8c:48:
         b6:ea:40:dc:a0:49:c4:68:3a:9a:6a:02:74:d4:c3:d9:a9:da:
         01:23:35:a7:2e:60:a4:76:3f:b8:3c:8f:1f:9a:49:0d:f6:ff:
         c8:b5:2c:87:d0:c4:94:1f:de:1d:c9:cd:0c:dc:65:85:7a:fc:
         2f:c2:e1:42:1c:8d:de:2a:85:37:df:3c:ca:b4:e3:87:48:6c:
         c7:82:37:98:73:8d:cd:78:b4:67:25:0b:4f:f0:08:b4:77:4e:
         9f:84:cc:ee:9b:a2:b4:15:33:ee:d7:6c:b5:83:b3:cc:a5:a3:
         86:f6:7f:fb:97:eb:d5:7b:9a:a4:61:c6:ed:fa:0d:08:18:58:
         a2:aa:6a:ec:b8:3d:3e:8f:fe:8e:c9:38:e6:a7:d8:27:b5:8c:
         fb:7e:a6:2e:d7:bb:5c:24:31:5d:f0:ca:11:44:87:23:e8:07:
         89:2a:5c:4c:42:a9:24:f4:57:83:f2:10:df:e9:1d:5b:11:92:
         0d:3d:7a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----