Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/VlubFYUKVc2da2F7xjimQbXybqQ.roa
File:                     VlubFYUKVc2da2F7xjimQbXybqQ.roa (raw, json)
Hash identifier:          vIU65Qi6NLWJww9BYlVCellDkulf7zhV20INUK0NxHU=
Subject key identifier:   56:5B:9B:15:85:0A:55:CD:9D:6B:61:7B:C6:38:A6:41:B5:F2:6E:A4
Certificate issuer:       /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial:       01856D78B0B7682F5450CDADAB4974834AD6
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/VlubFYUKVc2da2F7xjimQbXybqQ.roa
Signing time:             Sun 01 Jan 2023 13:15:04 +0000
ROA not before:           Sun 01 Jan 2023 13:15:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64520
IP address blocks:        2a02:d58:200a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:b0:b7:68:2f:54:50:cd:ad:ab:49:74:83:4a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
        Validity
            Not Before: Jan  1 13:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=565b9b15850a55cd9d6b617bc638a641b5f26ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:b1:f8:12:82:3d:7d:86:d8:2c:56:d6:f7:
                    4d:7d:04:2b:bb:2e:88:58:6c:14:6a:6e:50:d4:5e:
                    89:06:d3:c8:64:2c:97:43:ca:9b:2a:28:3e:86:74:
                    60:20:d5:28:bd:46:58:2f:43:4a:57:dd:98:d8:cc:
                    e3:e4:f3:f3:ed:78:5b:d5:54:a9:a0:dc:6d:3f:6d:
                    a0:6e:9e:ab:52:fa:49:0a:e9:69:91:07:11:f5:23:
                    c6:ba:bc:e9:b0:73:a2:a1:49:c1:02:15:e3:53:1a:
                    15:51:7a:fd:c8:00:22:5e:6c:78:fb:2b:e9:d2:e3:
                    bd:26:4e:91:2e:7d:51:c5:c9:36:8c:27:bd:7d:e5:
                    36:8c:60:14:f4:79:bd:76:f6:a1:22:14:c4:db:e6:
                    05:62:0b:62:34:57:77:b5:3d:3a:d9:13:38:3c:16:
                    9a:c8:6c:08:44:af:6c:58:03:14:25:cf:d1:cd:1d:
                    79:07:6d:a9:6c:c4:15:e2:b3:07:2c:87:b3:8b:21:
                    a9:d9:96:f7:47:7f:06:9f:f6:4e:f8:37:51:66:29:
                    98:e4:20:e2:d3:19:ee:c4:f7:cc:34:c4:19:2a:e2:
                    88:11:f2:84:76:b1:6f:e8:bc:b6:24:33:9c:a0:cc:
                    8e:ba:ad:a5:9b:8b:75:2e:af:39:c9:69:64:45:5a:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:9B:15:85:0A:55:CD:9D:6B:61:7B:C6:38:A6:41:B5:F2:6E:A4
            X509v3 Authority Key Identifier:
                keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/VlubFYUKVc2da2F7xjimQbXybqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d58:200a::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:5b:37:ea:31:5a:b6:45:01:f3:d7:b7:a5:52:7a:7e:77:5d:
         22:f7:69:e2:cf:d1:0d:10:12:d1:9b:60:d3:ec:70:db:3d:a7:
         95:92:eb:ae:96:5d:3f:d8:94:1e:e7:49:15:b6:a4:7b:98:a0:
         97:11:77:64:82:06:87:80:b6:9e:23:ac:97:e5:3c:32:97:a3:
         48:c5:50:b6:19:e4:a5:31:49:e5:f7:07:e0:05:68:07:e8:41:
         45:c7:5a:a9:5c:ec:a3:22:a8:c3:2a:04:38:46:55:32:79:63:
         d3:f9:8b:6c:0d:e3:20:1d:0b:9e:05:60:e5:35:f4:ee:76:ef:
         28:8c:a2:6b:70:01:42:be:84:a4:17:64:fd:08:41:ee:dc:cf:
         f4:a3:16:0f:d8:4a:2b:b8:7d:0a:e2:41:8f:b6:6d:af:91:fe:
         ff:ff:66:28:8e:ed:8f:9a:f7:2c:d8:3c:9f:96:08:c8:12:a4:
         58:49:57:8e:e2:35:90:72:f6:70:e8:92:69:11:0b:24:d8:8e:
         71:f1:ea:89:47:21:76:6c:7e:5c:6f:db:f2:f9:d2:81:e8:48:
         97:28:f4:a3:82:ff:6d:3d:5e:04:8d:20:d5:11:7d:5f:c7:36:
         33:6a:80:21:31:a2:fd:d1:e9:47:a3:4c:ce:df:90:08:19:7e:
         a1:04:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----