Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/1-hBo7f54ApHHcy1TQKZjlaNyM6Y.roa
File:                     1-hBo7f54ApHHcy1TQKZjlaNyM6Y.roa (raw, json)
Hash identifier:          N/aj289YeWR8gpToyUNw4ics6UbvvbtWShwEq4rp40E=
Subject key identifier:   FA:10:68:ED:FE:78:02:91:C7:73:2D:53:40:A6:63:95:A3:72:33:A6
Certificate issuer:       /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial:       0189DA44A1EBA239CC45F37DF162C8DDC37C
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/1-hBo7f54ApHHcy1TQKZjlaNyM6Y.roa
Signing time:             Wed 09 Aug 2023 12:27:58 +0000
ROA not before:           Wed 09 Aug 2023 12:27:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201949
IP address blocks:        2a12:5343:6::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:da:44:a1:eb:a2:39:cc:45:f3:7d:f1:62:c8:dd:c3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
        Validity
            Not Before: Aug  9 12:27:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa1068edfe780291c7732d5340a66395a37233a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:c3:47:b3:aa:fe:f7:f8:57:bd:e5:b7:4e:
                    e9:aa:83:da:41:d3:c0:5f:96:b0:2a:35:80:10:3d:
                    5b:96:40:f0:8b:c6:e9:55:0a:64:f5:61:e0:8a:53:
                    dc:27:86:78:2b:10:62:a2:e4:ab:85:35:02:99:f6:
                    f5:ad:7c:30:60:1b:5c:4d:9c:7c:c6:4d:78:31:52:
                    75:61:46:90:29:d5:a0:5e:30:ef:a8:ab:d4:d1:0d:
                    1c:75:b4:c4:1d:59:1c:c6:1a:92:37:c3:19:50:50:
                    70:8a:dc:b6:3e:59:1b:07:62:89:e2:bf:7b:54:27:
                    d0:15:28:08:77:a3:53:7a:78:8f:a2:0e:8c:62:47:
                    fa:96:ac:b8:cb:83:eb:2e:b3:0f:71:a4:3c:17:59:
                    b9:89:83:a3:31:dd:33:64:f3:ad:78:c9:45:31:53:
                    39:59:b8:b4:7a:a8:85:a8:59:d5:f7:fa:04:62:e5:
                    68:1f:27:41:e3:ea:d6:b5:a4:dd:bc:05:4b:f0:06:
                    5d:3b:ca:68:1f:1a:43:6b:a1:9f:5b:53:87:fe:c2:
                    61:1e:38:b8:c5:a8:16:35:5b:0e:55:3b:98:2f:ae:
                    e9:33:b0:e5:5e:9d:33:d3:92:89:01:99:b5:9a:c2:
                    8f:57:e0:b0:da:50:b7:62:de:2b:44:ef:34:09:7e:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:68:ED:FE:78:02:91:C7:73:2D:53:40:A6:63:95:A3:72:33:A6
            X509v3 Authority Key Identifier:
                keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/1-hBo7f54ApHHcy1TQKZjlaNyM6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5343:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:e5:63:c4:7c:3c:f1:9c:e4:13:99:85:1f:98:ef:61:cc:
         24:d3:4c:e9:06:69:93:5f:13:ab:b2:86:9c:78:4a:d6:4d:7f:
         fa:d4:e6:18:3f:79:2c:2d:91:de:63:a8:33:1d:bd:9f:7a:78:
         fd:a1:89:9b:5c:b4:14:8c:38:99:ae:d0:32:4c:c1:6e:e2:48:
         d5:d6:01:42:ad:b9:4f:10:3b:3e:a6:a1:96:d7:21:19:e1:0e:
         fc:09:7c:e6:81:cc:79:45:4f:33:73:bd:ad:a2:53:bb:21:ae:
         e8:98:a7:d5:2b:44:72:dd:2e:b5:5b:c8:05:9f:0c:33:f0:e2:
         7e:82:2d:9c:95:4d:e3:38:a2:d5:43:62:fb:78:4e:d7:88:78:
         a3:60:f6:45:74:4b:55:c8:95:39:50:71:55:f7:28:94:dc:ef:
         b3:92:bb:9c:68:4f:7e:8e:aa:63:ae:f4:a4:e6:9e:1e:35:e7:
         6c:b3:f9:a7:89:b3:d8:55:66:d0:fa:47:a1:24:f1:ab:1c:f4:
         5d:dc:bd:43:7b:da:79:97:fb:ef:83:31:57:40:01:a3:9f:41:
         9e:0d:cb:7b:5a:60:53:b2:fc:83:e5:b9:37:51:8d:a6:32:2e:
         c3:95:bc:4a:27:44:31:1b:b5:a8:74:dc:b4:da:03:c9:25:50:
         66:80:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----