Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa
File:                     cqaJO_lAMu416oOR8kAhGeIvIBY.roa (raw, json)
Hash identifier:          /UxvKoYHccIEfHjeldmOTzcUr6Qq0cE+dIZA6/LozT4=
Subject key identifier:   72:A6:89:3B:F9:40:32:EE:35:EA:83:91:F2:40:21:19:E2:2F:20:16
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F796FBF426647F18B0FA9CDDF09A324
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa
Signing time:             Sun 01 Jan 2023 22:35:07 +0000
ROA not before:           Sun 01 Jan 2023 22:35:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5511
IP address blocks:        2a0f:e381::/32 maxlen: 32
                          2a07:e343::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:6f:bf:42:66:47:f1:8b:0f:a9:cd:df:09:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72a6893bf94032ee35ea8391f2402119e22f2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:b5:fa:e2:d4:78:e8:ba:69:2b:ba:5e:2e:
                    36:17:3a:73:92:41:7b:f2:22:b7:97:6d:37:04:aa:
                    bb:00:37:ab:c9:a9:d3:20:95:d2:6a:b2:7d:0f:e9:
                    91:50:ca:63:8a:47:17:10:aa:b5:b1:c4:54:b1:11:
                    1c:60:ff:77:d7:1b:7f:cc:09:37:cb:46:71:1c:16:
                    ec:ea:57:e0:0c:2d:6e:1e:1e:42:09:dd:b3:e8:91:
                    69:b7:5d:ff:b1:ec:69:28:7c:f4:e7:7c:d4:21:0a:
                    4f:d8:d4:65:44:3d:6c:08:e7:e7:f6:42:09:fc:ce:
                    1f:77:db:3f:25:c4:90:3f:1a:31:c6:b6:da:fa:e4:
                    4a:92:ec:a3:6d:eb:23:65:10:35:68:6a:9a:2d:02:
                    af:6c:c3:8e:0d:46:d6:3a:7c:73:6f:a7:5d:18:c1:
                    53:a5:d8:cc:70:4b:38:bc:39:b4:5a:f8:f8:4a:97:
                    fd:15:f2:af:e5:e5:23:17:21:7b:0c:86:69:70:ba:
                    92:2e:ce:cd:aa:f4:e8:ad:a6:09:cb:91:9a:4b:80:
                    5d:da:82:f6:40:d9:17:e3:e9:09:31:53:cb:6e:b3:
                    e5:51:d0:24:99:73:ce:ea:c3:a6:0d:6e:f5:ed:ce:
                    37:16:91:ab:b9:5f:b5:62:55:df:01:1d:b5:9c:6d:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:89:3B:F9:40:32:EE:35:EA:83:91:F2:40:21:19:E2:2F:20:16
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cqaJO_lAMu416oOR8kAhGeIvIBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:e343::/32
                  2a0f:e381::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:98:dd:53:77:61:2c:ce:a4:d9:4f:a6:10:ed:d0:f6:db:
         87:6b:60:4e:a2:c4:17:f4:5b:b9:28:ac:fc:43:02:6e:12:ae:
         3a:7e:03:71:ca:58:f1:8f:90:7b:5a:d1:71:fb:00:7a:72:ef:
         a6:a2:e2:a8:51:50:8c:9f:ff:fd:8a:ea:30:59:a5:bc:36:8d:
         a2:de:49:de:97:6b:23:eb:43:f7:db:b4:47:80:a7:b5:63:4b:
         f4:e8:6f:e9:2f:33:5d:1c:6c:d4:12:e6:aa:1b:b3:6d:7f:f4:
         77:ce:50:54:b8:48:d7:bb:c4:cf:9b:65:8d:44:fd:fd:32:97:
         71:f2:b6:7e:51:ce:e7:59:8a:45:3f:6e:c8:29:6d:53:89:e2:
         b5:24:d0:0b:76:c9:83:64:2d:bc:22:8a:bd:6e:b8:37:32:80:
         3f:49:f5:0a:54:c5:8c:13:f5:b9:bd:bd:cc:20:71:96:5b:50:
         09:81:60:5a:cc:fd:53:7e:a9:17:2a:98:22:56:fe:ed:c5:c5:
         23:d6:82:99:6e:c9:2c:65:c7:9a:f5:19:ec:1f:b0:20:bb:75:
         38:52:e6:da:1f:a7:c4:45:b1:75:89:79:86:90:5b:b7:84:ea:
         61:70:01:3d:d9:0d:c1:dd:c6:f9:08:a7:5a:bd:bb:9c:3b:29:
         82:a1:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----