Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gwb8BDyPHFK4CLtQOMg-Mo4MHQA.roa
File:                     gwb8BDyPHFK4CLtQOMg-Mo4MHQA.roa (raw, json)
Hash identifier:          aM9Ln3wgfGQXjp7cimkhhoiY67KKLv/a81Go35zHntA=
Subject key identifier:   83:06:FC:04:3C:8F:1C:52:B8:08:BB:50:38:C8:3E:32:8E:0C:1D:00
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       0188E2FBC76539999D374BDA0676C7FA1160
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gwb8BDyPHFK4CLtQOMg-Mo4MHQA.roa
Signing time:             Thu 22 Jun 2023 12:02:11 +0000
ROA not before:           Thu 22 Jun 2023 12:02:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202402
IP address blocks:        2a0f:7803:ff90::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:fb:c7:65:39:99:9d:37:4b:da:06:76:c7:fa:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jun 22 12:02:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8306fc043c8f1c52b808bb5038c83e328e0c1d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:23:a4:5a:e7:32:88:9a:c9:6c:b3:02:fb:51:
                    4e:6b:8a:c2:b0:59:0a:e5:e0:20:eb:18:d0:9b:1c:
                    e2:58:fc:7e:5d:1c:8b:1e:72:b1:0d:90:d8:77:7d:
                    8a:57:ac:22:f4:8f:0c:bb:01:89:e6:5f:a2:22:69:
                    69:e8:a4:98:b8:d7:f0:a8:26:ca:00:ee:f2:f1:2a:
                    21:33:30:af:e2:59:d2:9c:32:ed:6e:12:a4:9c:73:
                    c0:34:ad:0c:43:50:29:30:00:4a:b2:7c:26:6b:e2:
                    97:a4:14:81:2b:be:e8:0e:39:ad:4c:5c:b1:74:0f:
                    29:cc:e7:35:57:3b:8a:72:fc:9c:94:cf:24:e1:f1:
                    ea:20:8a:ff:c8:8d:0e:ef:09:f2:f8:46:9c:99:2b:
                    36:bf:48:3c:8b:f9:cd:07:90:f3:29:a1:1f:87:88:
                    29:f3:ff:ec:f9:fd:8f:6f:25:33:be:60:93:e1:16:
                    7a:64:5d:cd:b4:a8:5d:9a:d7:17:d1:0e:20:4d:e3:
                    c6:88:4e:8c:73:a5:bb:6a:fb:33:91:45:fd:47:8e:
                    56:5e:54:12:74:84:1a:8f:a8:8c:32:db:21:87:08:
                    15:fd:39:82:64:d6:61:db:cf:39:ee:f4:99:1b:cf:
                    98:d7:76:f5:35:f2:38:af:b2:5e:f1:10:3a:87:4d:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:FC:04:3C:8F:1C:52:B8:08:BB:50:38:C8:3E:32:8E:0C:1D:00
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gwb8BDyPHFK4CLtQOMg-Mo4MHQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:ff90::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:f1:8c:da:aa:50:4c:c1:81:8f:a7:15:29:ac:2d:d5:6a:
         7c:ef:5b:33:6c:45:55:c5:34:ca:22:ce:9c:45:a3:bb:37:09:
         f0:27:b9:f1:96:c2:c2:56:17:b5:a3:9c:8f:99:ec:d6:91:69:
         fb:3a:c7:18:89:96:ce:0f:55:9f:53:2a:c0:d6:c4:a6:2c:08:
         82:9c:32:0a:73:c4:7a:8b:57:e8:be:6c:3d:fe:9c:ea:fb:c0:
         31:4c:bc:3e:ee:2c:0a:da:66:7d:bd:fa:18:e6:f2:ca:db:6e:
         33:95:f9:f5:bb:e2:d9:9e:1e:7e:f6:20:7b:5b:46:4d:f6:c4:
         f5:e8:df:da:89:0f:c0:0a:06:e1:be:d0:3b:4d:52:83:67:95:
         65:11:4b:e5:d3:b7:b9:79:b5:48:be:ef:9b:70:d3:75:f7:9f:
         94:9a:00:31:0f:ab:16:c3:26:06:20:dd:7c:57:ae:24:20:ad:
         39:34:ef:8e:a8:e5:d1:a3:83:0a:4e:19:85:5a:be:4d:df:b2:
         2c:13:40:9d:a8:3d:45:b5:1d:d2:0e:e5:44:e9:94:69:98:3f:
         a9:2c:e7:43:5a:fa:0b:67:8a:8a:1c:8c:ff:43:5b:7d:d6:c0:
         dd:a7:71:35:fd:a1:ab:d5:44:25:b8:d5:6d:af:6e:58:21:31:
         04:89:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----