Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MUrYxTJqP4wENvnd5pLDCL3D-6E.roa
File:                     MUrYxTJqP4wENvnd5pLDCL3D-6E.roa (raw, json)
Hash identifier:          Lw8Ed/jX1dLEn0v2svxHDD29/zz6/2BKPS73GZC0xAA=
Subject key identifier:   31:4A:D8:C5:32:6A:3F:8C:04:36:F9:DD:E6:92:C3:08:BD:C3:FB:A1
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       01856F94D63A26FEE1955DDA5D0F9FE4CBAB
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MUrYxTJqP4wENvnd5pLDCL3D-6E.roa
Signing time:             Sun 01 Jan 2023 23:05:03 +0000
ROA not before:           Sun 01 Jan 2023 23:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        2a07:9944:1a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 15 Jul 2023 00:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:94:d6:3a:26:fe:e1:95:5d:da:5d:0f:9f:e4:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan  1 23:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=314ad8c5326a3f8c0436f9dde692c308bdc3fba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:74:b3:c3:01:db:f1:6b:aa:f9:23:6a:b7:
                    53:5a:4e:27:23:af:97:a4:c3:82:ac:c6:94:7e:ab:
                    02:4d:f0:e5:1e:67:f7:e9:c5:6d:cc:b7:c3:d3:3a:
                    52:21:ab:40:e4:fe:57:85:64:58:ab:70:9a:ed:0c:
                    88:f1:6e:9d:41:78:e0:0b:22:0e:42:ec:22:6c:27:
                    f1:ce:00:7e:b3:64:f3:4b:8c:f2:25:7a:13:90:66:
                    30:50:9c:d8:80:c9:ed:97:f1:9f:c4:01:55:ab:2f:
                    25:5b:d8:3c:83:86:1e:a4:d2:ae:ac:90:75:2f:15:
                    2e:c3:08:1a:e4:63:19:dc:19:ab:9f:d5:fe:43:cb:
                    fb:07:08:e4:39:c5:12:91:64:ef:53:30:60:ab:79:
                    55:8b:69:92:d0:cb:2c:70:9b:6d:53:f1:a0:5a:c6:
                    6b:6a:49:58:a0:0c:98:82:28:0e:60:56:3a:55:cc:
                    1b:6a:76:b3:f6:ef:81:fc:68:d5:2a:ff:73:ba:3a:
                    ec:6b:f8:d4:16:2d:cf:6a:3b:55:b0:c3:ed:e0:74:
                    25:aa:73:41:46:f6:f6:5d:fe:a3:be:ba:a3:8b:e4:
                    90:c9:d7:3d:69:0e:e5:75:67:eb:10:49:41:d8:f8:
                    2e:b0:5a:8b:fa:4b:81:36:21:3b:33:0e:99:43:74:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4A:D8:C5:32:6A:3F:8C:04:36:F9:DD:E6:92:C3:08:BD:C3:FB:A1
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/MUrYxTJqP4wENvnd5pLDCL3D-6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:9944:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:1e:74:cc:78:75:c3:c0:5d:be:23:be:41:62:3d:21:da:
         54:9e:d4:d1:cb:b0:35:98:91:a1:9f:60:a7:7d:3d:84:f3:10:
         7f:ce:1b:23:b2:35:10:ea:c8:41:45:23:3c:f9:d2:4c:63:b8:
         6f:25:a7:ae:94:9c:7e:55:0f:e5:f9:2d:fb:f3:50:67:8d:f4:
         f8:02:c5:99:ba:c8:da:8e:6e:0e:77:93:a5:17:42:24:6b:d9:
         f0:d1:df:3a:d5:f5:92:84:c5:06:7e:1f:cd:f8:5d:3b:7e:eb:
         88:20:e7:00:c3:41:06:ef:42:85:06:92:da:86:67:c7:2c:ab:
         2d:fd:25:a7:16:66:71:2b:96:55:b2:85:0e:c8:fe:02:4e:b6:
         e7:41:4a:69:45:c6:bd:be:08:f3:cc:c1:2a:6f:3a:b4:a2:53:
         bc:d9:2b:8a:7d:3f:03:64:31:f1:14:3f:a8:ea:dc:a3:18:77:
         4c:43:ea:52:9a:f3:ed:72:79:10:39:c3:42:78:f5:5d:15:8c:
         09:3d:1c:a9:61:ae:e9:23:74:d3:04:58:5a:91:d2:9d:bc:b7:
         37:fe:54:6c:8e:9b:2f:e8:18:c0:25:8e:07:a1:d4:37:a2:d3:
         c5:d5:c8:dd:fd:7b:c7:d8:b2:0d:55:af:a5:4d:70:31:bf:e2:
         9b:53:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----