Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/9TP5pNjGoDzdimoLx-sag3rF53o.roa
File:                     9TP5pNjGoDzdimoLx-sag3rF53o.roa (raw, json)
Hash identifier:          lOnLlERAiqAwJLd/O9GJkl1/4FDMcD8BFO8Xnc9sZ4A=
Subject key identifier:   F5:33:F9:A4:D8:C6:A0:3C:DD:8A:6A:0B:C7:EB:1A:83:7A:C5:E7:7A
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018571D7C320F9724C5C616E844F887890F4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/9TP5pNjGoDzdimoLx-sag3rF53o.roa
Signing time:             Mon 02 Jan 2023 09:37:23 +0000
ROA not before:           Mon 02 Jan 2023 09:37:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203396
IP address blocks:        2a04:9a00:1021::/48 maxlen: 48
                          2a04:9a00:1022::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:c3:20:f9:72:4c:5c:61:6e:84:4f:88:78:90:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Jan  2 09:37:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f533f9a4d8c6a03cdd8a6a0bc7eb1a837ac5e77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:db:48:6a:18:4a:9e:5e:09:85:3b:20:6a:
                    e8:fe:63:33:8a:3e:36:cb:e0:fd:72:72:78:54:15:
                    4a:28:90:5d:39:46:45:19:17:6c:e6:47:aa:92:16:
                    b9:08:e0:f5:4a:dc:aa:62:c3:5c:3d:f0:2a:c5:a9:
                    03:b7:b7:95:24:0e:e7:41:cd:7e:cc:52:9d:bc:3b:
                    12:73:76:4f:9d:3f:a1:fe:d2:4e:21:88:e6:b0:3f:
                    d0:26:30:b7:ae:c0:96:05:ac:45:8c:06:1a:18:3e:
                    b3:50:bc:44:1e:f1:19:4c:6d:a0:f8:38:b6:17:0d:
                    b2:ed:36:9b:c9:b9:84:d9:e3:f0:bd:f9:2c:56:ee:
                    67:82:5b:d3:ea:3c:63:a4:d7:89:a8:8c:bd:b1:e5:
                    cb:dc:01:9d:87:85:c7:ac:70:bf:54:b3:8e:cd:8f:
                    0f:57:c4:2a:9f:e7:fa:85:26:38:fc:e2:01:de:eb:
                    12:6c:12:c3:73:27:fa:8f:c6:5b:d4:dc:9e:43:91:
                    39:fb:cb:7b:d6:d3:ea:4f:ad:20:27:ca:84:97:08:
                    6e:72:6c:9d:29:24:bf:d7:b9:5d:38:28:16:3f:9e:
                    3a:3d:27:9a:15:de:77:d5:b2:16:a5:4a:37:b0:13:
                    ba:a6:55:2f:96:70:f3:ef:f0:da:ce:3b:45:87:25:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:F9:A4:D8:C6:A0:3C:DD:8A:6A:0B:C7:EB:1A:83:7A:C5:E7:7A
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/9TP5pNjGoDzdimoLx-sag3rF53o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:9a00:1021::-2a04:9a00:1022:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c9:ec:cd:bf:a1:47:94:b8:c8:c0:63:a9:5e:24:f4:3d:cf:b1:
         12:18:5c:80:39:87:6a:7a:0b:de:ff:51:75:de:97:47:05:02:
         91:1b:11:0c:82:d7:df:79:f5:13:e5:35:ee:ee:b0:22:85:84:
         ef:b0:25:8d:fe:f2:2f:c9:3e:d9:02:46:1c:6e:c8:ea:53:fa:
         b5:b8:c3:a9:16:63:67:4d:3d:2b:b9:21:0f:71:fb:bc:d2:7c:
         8c:d5:ad:a9:15:78:03:e9:29:43:08:a9:06:7d:bc:df:cc:e9:
         d5:03:28:64:fb:d0:05:bd:de:ae:b4:97:65:4e:35:9e:d6:9a:
         1f:f6:d8:a3:e9:d6:30:44:7b:41:ca:bb:f1:22:1b:db:cc:fd:
         07:36:55:8b:33:a8:5c:94:30:07:67:e3:b2:82:d3:84:c1:ca:
         3c:17:56:6f:f4:87:93:98:01:a1:2f:f9:d5:5b:54:d5:81:9a:
         aa:34:65:5b:e8:5f:52:26:c7:b8:53:0a:af:20:1b:7e:c9:9e:
         bd:c1:50:5f:23:5d:e0:6a:e2:97:9c:24:8d:f8:95:fc:68:79:
         a5:17:7d:09:a6:fd:e5:e5:4f:9e:af:82:de:32:36:89:f7:42:
         ed:47:ae:f9:7e:db:9b:26:99:1e:c2:db:ea:aa:38:e1:52:66:
         c6:75:78:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----