Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kg8sqrwdda3MaV2MjX0aPWvTo4.roa
File:                     6kg8sqrwdda3MaV2MjX0aPWvTo4.roa (raw, json)
Hash identifier:          WvtR+WaHkUq8fp1FBXwBRbr9SsdyY/l1xEc/EL5cXSo=
Subject key identifier:   EA:48:3C:B2:AA:F0:75:D6:B7:31:A5:76:32:35:F4:68:F5:AF:4E:8E
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018798A1515398989FCA05FCE286A665D561
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kg8sqrwdda3MaV2MjX0aPWvTo4.roa
Signing time:             Wed 19 Apr 2023 08:28:41 +0000
ROA not before:           Wed 19 Apr 2023 08:28:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0f:7d00:1::/48 maxlen: 48
                          2a12:d6c1::/32 maxlen: 32
                          2a0a:2d00:1::/48 maxlen: 48
                          2a0c:7884::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:a1:51:53:98:98:9f:ca:05:fc:e2:86:a6:65:d5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 19 08:28:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea483cb2aaf075d6b731a5763235f468f5af4e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:68:d5:54:25:37:8d:07:1d:95:71:fb:e2:
                    b8:32:c3:03:ab:4a:74:1b:bc:fd:e4:69:fa:12:3e:
                    2d:22:0e:4b:32:ea:9d:a1:52:a5:84:90:2d:3e:72:
                    02:21:9c:23:ce:62:11:ae:7d:5f:09:c3:9f:e7:9b:
                    92:e1:c7:a5:81:2d:c5:ea:83:21:11:4b:d7:d5:ce:
                    97:90:d2:40:55:0c:6d:4f:9c:c0:f9:71:82:a9:84:
                    28:91:a2:8c:0c:2f:43:22:03:2d:9c:fd:bf:f1:29:
                    23:3b:4a:a0:21:dc:fb:67:b8:1b:bd:a9:77:18:70:
                    fc:93:e5:1d:80:d9:7e:6b:be:1f:42:d1:c6:fc:d4:
                    d6:1d:9b:55:88:2a:a3:0a:fc:e1:fb:9b:42:25:59:
                    22:09:b2:b0:35:91:7f:8b:8f:22:71:49:bc:28:87:
                    9a:c4:f4:73:c2:f2:79:8d:01:73:26:15:64:9f:1d:
                    9b:2d:61:ba:88:e6:bb:3a:6d:07:7d:3d:61:79:c8:
                    fb:56:aa:8f:06:a5:96:99:65:23:4e:84:b6:ee:cd:
                    71:8a:07:92:b3:75:93:eb:3d:4e:f2:bc:88:c1:16:
                    a4:96:cd:f4:01:2f:30:9b:e1:1a:f3:a8:47:0f:2b:
                    01:74:8c:2a:29:cf:e3:8f:25:29:87:89:5f:83:af:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:3C:B2:AA:F0:75:D6:B7:31:A5:76:32:35:F4:68:F5:AF:4E:8E
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6kg8sqrwdda3MaV2MjX0aPWvTo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2d00:1::/48
                  2a0c:7884::/32
                  2a0f:7d00:1::/48
                  2a12:d6c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:90:e9:06:96:76:4e:38:83:3b:2d:25:b3:44:37:c2:b6:
         b5:d0:4b:09:e0:2a:7e:72:29:1f:aa:85:20:e9:64:77:21:94:
         88:52:6e:66:31:80:a6:c9:ce:77:74:4d:f7:31:80:9f:32:11:
         0a:39:a0:c4:1b:0d:b6:c4:23:60:17:f9:a3:99:4e:41:86:54:
         dc:ea:99:9d:85:f2:3f:31:23:4a:37:20:88:a8:a8:5e:b0:11:
         b1:db:37:a0:c5:e4:76:73:c9:dc:18:53:88:2d:e5:ea:17:d9:
         f1:8b:fd:e0:2f:ce:18:e3:c6:1b:b9:da:20:ba:b2:0f:ff:f6:
         d2:01:5a:ed:07:38:57:9b:1c:37:b5:d5:d3:b9:d3:e5:65:96:
         46:b9:0f:95:f7:69:6b:6a:55:10:f7:72:31:de:f1:2b:3f:a6:
         d4:e1:f5:8d:2f:33:1b:d0:a9:eb:bc:22:d1:12:4c:e8:05:92:
         46:83:4c:b3:c4:c2:9e:9d:51:77:82:eb:0e:e6:47:38:66:d3:
         57:5d:1d:77:6a:a0:77:05:cd:0b:a8:e4:0c:8a:19:03:c4:e9:
         d4:61:66:89:8c:18:54:ce:35:36:0e:f4:19:ea:b6:10:c6:b1:
         9a:ce:4d:77:8a:1d:bf:d5:9b:27:e9:b9:bd:90:36:cd:86:c2:
         ef:12:a2:bf
-----BEGIN CERTIFICATE-----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