Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa
File:                     BT4p3PbezEq5aSFHFoe70gyvWHI.roa (raw, json)
Hash identifier:          bUPQMvZtPuizZIoJbkDZnKt/DAKJQMrG+uqX8C4T4r8=
Subject key identifier:   05:3E:29:DC:F6:DE:CC:4A:B9:69:21:47:16:87:BB:D2:0C:AF:58:72
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       018571BA34664818FF86F00698C53B1A0A11
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa
Signing time:             Mon 02 Jan 2023 09:05:06 +0000
ROA not before:           Mon 02 Jan 2023 09:05:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209209
IP address blocks:        2a11:2307::/37 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:34:66:48:18:ff:86:f0:06:98:c5:3b:1a:0a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jan  2 09:05:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=053e29dcf6decc4ab96921471687bbd20caf5872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:95:21:ac:08:f3:c4:da:5f:e1:48:62:19:
                    77:77:60:75:8b:de:bd:0c:52:f2:6c:3c:ee:68:ce:
                    f0:a2:2c:e9:1c:a4:e4:cc:9f:5e:f4:cf:ce:fb:3f:
                    92:e8:0f:0a:82:c9:01:7c:88:b3:ba:f9:0b:9d:19:
                    e4:88:70:1c:a9:35:03:74:b5:35:d4:dc:75:2a:42:
                    a6:ae:44:32:0b:f5:cb:6a:06:9c:29:b9:13:b2:f0:
                    4b:d9:9a:1f:1b:cc:7f:18:e3:6a:20:9a:86:c3:ae:
                    9b:ad:ad:71:c3:97:06:b2:e7:e3:98:37:c0:67:46:
                    96:cc:6e:40:90:6b:8b:73:c2:61:91:6c:93:5a:24:
                    98:38:50:c5:bf:0c:ef:d8:05:bd:a5:c3:44:ce:3e:
                    43:e5:0c:0d:5b:f0:02:31:6a:78:50:13:38:7d:05:
                    7d:e0:07:b2:12:00:e3:82:81:8c:b6:e8:b2:90:bc:
                    9f:71:8a:64:6c:b5:5d:7e:e2:b6:51:78:cd:8c:97:
                    ae:03:99:98:ad:3c:92:33:f3:96:03:4e:e4:9c:a8:
                    5f:1d:f4:57:88:06:40:33:e0:4f:ba:19:bd:04:db:
                    2c:aa:5b:c7:d5:dd:f7:5d:e0:62:a3:0c:e6:d1:97:
                    86:80:ae:0b:f6:a0:73:7b:40:72:6c:56:61:8f:bd:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:29:DC:F6:DE:CC:4A:B9:69:21:47:16:87:BB:D2:0C:AF:58:72
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:2307::/37

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:fd:09:76:21:d2:53:bd:d6:43:45:3f:1a:c9:13:26:78:
         3a:c7:db:b5:4e:90:47:fe:2a:f5:10:0a:88:72:d6:fd:3b:09:
         c2:f0:26:4c:23:6e:2a:e0:03:d3:77:9d:95:a7:39:96:67:2b:
         33:36:08:ff:52:f0:25:83:f3:3e:26:6e:4f:41:cf:82:5a:85:
         a2:3b:c6:30:e6:c7:76:d4:75:69:63:22:e0:f6:82:00:3f:99:
         71:f9:5c:9c:c0:3a:7e:bf:64:50:97:ea:e2:d4:92:7b:33:2a:
         a4:be:28:e5:b1:26:33:f3:ab:96:ce:35:31:f6:8a:57:cc:2d:
         47:25:08:6f:6c:dd:8d:3c:79:e2:4a:0a:4a:aa:53:14:c2:62:
         c9:28:9d:91:f5:eb:eb:96:56:dc:4c:19:fa:1a:66:56:fe:94:
         76:e4:09:16:ff:0c:93:37:b6:4d:76:7e:10:63:cf:78:0c:2d:
         18:b6:9e:3d:4f:da:40:58:e8:06:4b:95:e5:ca:fe:9b:b4:c1:
         d7:32:11:e5:bf:5e:49:52:46:68:b7:5c:68:f3:27:a0:7e:05:
         93:23:68:24:7e:fa:e5:94:d4:15:5b:21:e4:e0:16:d3:02:e1:
         61:83:67:c4:2a:04:b6:a0:96:c0:50:bd:ea:3e:dc:4b:d5:3c:
         a1:67:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----