Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa
File:                     v2eCk4JqJVTrnvvurYPnYFpg2tg.roa (raw, json)
Hash identifier:          vwx63Dt6T0B+vv+cGfna/cRKzuRprPTIdkuyupwpxWg=
Subject key identifier:   BF:67:82:93:82:6A:25:54:EB:9E:FB:EE:AD:83:E7:60:5A:60:DA:D8
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       018770073588A49F3B36B4DFC5F40F50FD19
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa
Signing time:             Tue 11 Apr 2023 11:15:33 +0000
ROA not before:           Tue 11 Apr 2023 11:15:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42861
IP address blocks:        2a00:1e68:112::/48 maxlen: 128
                          2a00:1e68:100::/48 maxlen: 128
                          2a00:1e68:100::/47 maxlen: 128
                          2a00:1e68:101::/48 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:70:07:35:88:a4:9f:3b:36:b4:df:c5:f4:0f:50:fd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Apr 11 11:15:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf678293826a2554eb9efbeead83e7605a60dad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:15:4f:2e:ca:7a:67:6c:81:e6:3d:73:b1:
                    8e:b8:a7:46:4c:72:8f:59:14:77:59:97:75:c9:72:
                    07:a9:1b:0a:b9:77:96:07:ff:91:a0:03:f2:7d:01:
                    6e:89:28:35:0d:9a:5f:9f:3d:fa:84:ba:6d:24:db:
                    61:fa:ce:96:3f:97:ce:0a:1b:76:17:a3:e5:ae:7b:
                    01:03:44:ad:17:72:c9:7c:bd:9e:03:f1:e3:c6:ca:
                    23:58:3c:87:20:31:3b:93:29:c1:d6:85:ed:1e:cd:
                    c6:25:d0:57:59:0f:0f:1e:ae:f5:c4:ac:9b:0c:9c:
                    91:1f:1a:90:7c:cc:28:3e:b2:ab:bf:d5:59:58:d6:
                    4f:b6:c3:f9:d2:bf:04:d9:dd:82:59:3b:e9:d2:9d:
                    bb:9b:b0:c5:67:ea:f7:0b:e2:63:d7:ab:00:c6:2c:
                    65:2b:9e:98:d8:d5:cc:71:61:a9:88:db:11:c7:0d:
                    cc:16:bd:90:80:d3:f1:23:7a:8b:b3:42:a4:41:0c:
                    03:f6:f5:a1:dc:be:32:57:a2:52:ae:15:bf:d1:a8:
                    17:13:c6:36:09:9d:34:bf:7a:3d:04:0c:f3:85:23:
                    1c:96:75:34:2c:f2:17:de:97:ba:ff:02:c2:38:6e:
                    50:29:c1:89:67:33:9a:1b:a3:62:96:87:c7:eb:0c:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:67:82:93:82:6A:25:54:EB:9E:FB:EE:AD:83:E7:60:5A:60:DA:D8
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1e68:100::/47
                  2a00:1e68:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:8a:0a:4d:bf:4e:9c:f5:d1:e3:bd:2a:a1:9f:69:48:f7:96:
         6e:b3:3e:37:c2:1e:c5:1c:99:4a:fd:58:8a:4c:e2:f3:08:a4:
         41:3c:fb:7a:57:ef:a9:f4:70:58:be:1b:01:52:f1:46:90:1c:
         c7:f8:9f:34:44:8c:2b:2b:82:c5:78:1a:12:16:91:31:ec:c4:
         0d:7f:0f:3f:8f:e2:b6:e5:c4:65:dc:49:e0:63:88:0d:b0:58:
         76:b2:e9:89:33:30:16:08:06:19:09:ca:f8:3e:bd:13:e4:8e:
         b1:cd:68:bf:6b:f0:35:92:59:a9:ec:98:3a:0b:8d:9d:06:37:
         7d:73:27:46:38:0d:37:c7:b9:fe:52:bf:8b:d4:2b:8a:71:b0:
         d1:43:f2:5d:67:94:3a:e3:79:58:e4:45:85:94:23:c6:01:78:
         a7:6d:de:57:60:04:93:6a:4c:e1:7c:f3:31:82:3b:58:3d:1b:
         b9:3b:8a:c7:5d:56:9a:6a:b5:dc:77:cd:75:7e:81:cb:1b:9e:
         2c:62:49:91:8e:96:0f:4e:f0:e8:b3:1b:4b:0b:73:7f:67:64:
         bf:a3:df:6c:46:1d:e2:1b:98:df:da:3e:87:3c:2b:97:f1:18:
         1b:c8:06:0c:48:67:47:df:0a:c9:e9:dd:22:05:5e:0f:40:b6:
         8e:44:49:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----