Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/o16dBvQxrpXqXhlAMT8yw7YtbHY.roa
File:                     o16dBvQxrpXqXhlAMT8yw7YtbHY.roa (raw, json)
Hash identifier:          cOMDeM4LzcE/LadawLpCAfgDaxH3mys7nwwJUAnCK5o=
Subject key identifier:   A3:5E:9D:06:F4:31:AE:95:EA:5E:19:40:31:3F:32:C3:B6:2D:6C:76
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01856ED4D69C023162F9BF1AC1E7429110C2
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/o16dBvQxrpXqXhlAMT8yw7YtbHY.roa
Signing time:             Sun 01 Jan 2023 19:35:20 +0000
ROA not before:           Sun 01 Jan 2023 19:35:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211352
IP address blocks:        2a09:11c0:300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:d6:9c:02:31:62:f9:bf:1a:c1:e7:42:91:10:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jan  1 19:35:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a35e9d06f431ae95ea5e1940313f32c3b62d6c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:12:4b:d5:0b:56:3a:14:a1:65:43:ee:fe:
                    bd:a8:49:bf:20:11:80:2d:66:83:2c:b7:bb:7a:24:
                    ed:d5:05:5c:ea:34:ed:14:cb:8a:03:06:f5:ff:d2:
                    a5:df:0b:6a:20:42:e7:9a:67:bf:28:67:22:8b:a2:
                    6e:2b:fe:62:7b:48:88:e7:23:80:1a:b8:c1:1a:76:
                    f0:15:41:0a:62:85:e6:b6:e1:27:cc:4d:d8:cf:18:
                    27:ea:8a:8e:c1:8a:b5:42:a9:db:57:97:a2:3c:b8:
                    99:d7:90:9f:1f:ba:c3:f8:95:c4:ca:03:95:9b:5b:
                    dd:cc:83:6a:63:74:29:23:8b:e4:19:0e:00:37:1d:
                    81:36:a8:00:d4:b2:1a:77:41:b3:3e:c3:44:a6:05:
                    35:21:20:a1:1a:26:64:55:89:9b:47:03:7e:c7:3b:
                    fd:ed:63:98:a0:10:2d:64:63:69:3b:a4:ed:8b:70:
                    f0:f0:d4:e9:e7:4c:83:42:38:58:a0:dc:81:5a:12:
                    06:00:9e:71:68:41:cb:5b:cd:5a:54:33:03:21:85:
                    a3:bd:c8:52:49:c8:b9:ba:83:04:0e:60:2c:39:50:
                    48:b8:7b:a8:89:db:41:5e:a2:3e:05:20:b8:5f:fe:
                    82:f9:5e:27:69:fc:31:0e:72:53:54:3d:14:c3:a5:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:9D:06:F4:31:AE:95:EA:5E:19:40:31:3F:32:C3:B6:2D:6C:76
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/o16dBvQxrpXqXhlAMT8yw7YtbHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:11c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:e8:6f:9a:5d:f7:71:08:fc:36:cf:ca:8f:d8:9b:0c:c3:
         98:c3:9f:13:ce:34:20:6d:d6:53:ee:2b:69:f5:ca:5a:e9:d4:
         e6:ba:20:45:75:8a:fe:39:34:a4:78:d4:26:69:20:e4:4e:ec:
         15:91:49:5f:35:64:8c:1c:e7:db:79:e8:f1:65:a4:23:3a:08:
         83:52:49:68:f7:2b:5b:6a:92:12:3a:cb:3a:db:0a:e2:3a:60:
         66:2d:97:c1:d5:6b:f5:37:08:21:94:63:d7:6a:e3:97:b5:75:
         1c:12:f9:15:a7:ce:40:6b:2b:a2:5f:61:f4:a4:f6:3b:49:b4:
         2a:1b:16:ae:2b:c4:d2:fe:c0:94:0e:1c:67:dc:28:64:53:37:
         fe:bb:f0:c0:f7:75:cd:2d:95:eb:37:6f:b8:70:1a:99:88:7f:
         16:e3:cf:73:a5:10:0f:d4:41:41:21:29:09:6f:bb:d1:75:19:
         91:d0:f2:da:38:2a:2f:48:ab:f3:38:c6:5e:35:e0:7f:e6:59:
         70:1a:c1:94:20:7f:79:36:79:53:8d:67:7e:5c:86:16:f3:31:
         43:e3:92:43:d5:ca:f8:55:aa:88:41:46:e2:dd:a9:79:1d:a1:
         91:51:61:ff:33:f1:72:23:e1:1e:88:18:a4:56:7f:92:c3:e8:
         14:88:f3:c9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVu1NacAjFi+b8awedCkRDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjMwMTAxMTkzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzVlOWQwNmY0MzFhZTk1ZWE1ZTE5NDAzMTNmMzJjM2I2MmQ2Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfYSS9ULVjoUoWVD7v69qEm/IBGA
LWaDLLe7eiTt1QVc6jTtFMuKAwb1/9Kl3wtqIELnmme/KGcii6JuK/5ie0iI5yOA
GrjBGnbwFUEKYoXmtuEnzE3Yzxgn6oqOwYq1QqnbV5eiPLiZ15CfH7rD+JXEygOV
m1vdzINqY3QpI4vkGQ4ANx2BNqgA1LIad0GzPsNEpgU1ISChGiZkVYmbRwN+xzv9
7WOYoBAtZGNpO6Tti3Dw8NTp50yDQjhYoNyBWhIGAJ5xaEHLW81aVDMDIYWjvchS
Sci5uoMEDmAsOVBIuHuoidtBXqI+BSC4X/6C+V4nafwxDnJTVD0Uw6VZjQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKNenQb0Ma6V6l4ZQDE/MsO2LWx2MB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvbzE2ZEJ2UXhycFhxWGhsQU1UOHl3N1l0YkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgkRwAMw
DQYJKoZIhvcNAQELBQADggEBAFHy6G+aXfdxCPw2z8qP2JsMw5jDnxPONCBt1lPu
K2n1ylrp1Oa6IEV1iv45NKR41CZpIORO7BWRSV81ZIwc59t56PFlpCM6CINSSWj3
K1tqkhI6yzrbCuI6YGYtl8HVa/U3CCGUY9dq45e1dRwS+RWnzkBrK6JfYfSk9jtJ
tCobFq4rxNL+wJQOHGfcKGRTN/678MD3dc0tles3b7hwGpmIfxbjz3OlEA/UQUEh
KQlvu9F1GZHQ8to4Ki9Iq/M4xl414H/mWXAawZQgf3k2eVONZ35chhbzMUPjkkPV
yvhVqohBRuLdqXkdoZFRYf8z8XIj4R6IGKRWf5LD6BSI88k=
-----END CERTIFICATE-----