Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa
File:                     EXZDE6wfS9upeJX47JHF1ZtNLic.roa (raw, json)
Hash identifier:          Oda2UKZYRKerBjG8FnE2nWTrLkKwy3Kx5wgrfqnWtSo=
Subject key identifier:   11:76:43:13:AC:1F:4B:DB:A9:78:95:F8:EC:91:C5:D5:9B:4D:2E:27
Certificate issuer:       /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial:       01862B611B09E198177167A3E284F5EBE06B
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa
Signing time:             Tue 07 Feb 2023 10:17:09 +0000
ROA not before:           Tue 07 Feb 2023 10:17:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206216
IP address blocks:        2a12:de40:8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2b:61:1b:09:e1:98:17:71:67:a3:e2:84:f5:eb:e0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
        Validity
            Not Before: Feb  7 10:17:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11764313ac1f4bdba97895f8ec91c5d59b4d2e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:4b:d8:9e:fe:bf:1c:d4:a7:3e:0d:6c:10:
                    f9:b2:1b:3f:8b:01:6c:0c:d6:16:81:9a:37:f4:2a:
                    8e:ea:56:58:74:75:72:0d:0c:9d:de:04:98:e2:6d:
                    cb:b3:89:2f:40:4e:b6:bd:13:91:4e:f8:00:a3:90:
                    8a:d5:5e:e9:57:04:e2:67:d0:d5:ef:29:8e:46:60:
                    37:2a:fb:ec:a2:95:0f:51:d2:3b:1b:ec:f2:1e:6a:
                    9b:92:fb:bf:2d:50:27:fa:09:57:65:13:94:5b:b8:
                    c9:48:c7:b1:45:7d:79:3d:f1:a5:f0:8c:50:f5:98:
                    09:96:e9:20:ba:08:7b:6f:2c:32:79:40:62:52:3d:
                    9f:37:0a:5f:d1:f5:60:0f:31:5a:ba:bc:05:9a:eb:
                    c5:17:ad:d2:1a:95:53:e3:44:74:7d:d5:36:66:b5:
                    30:c1:9a:76:4f:16:d3:bb:07:89:0a:88:ec:d4:73:
                    41:42:f7:46:c4:31:46:ed:a5:50:61:07:de:97:e5:
                    ef:43:8d:8f:c0:68:18:d7:1e:d0:cf:2c:b1:78:8b:
                    3b:87:eb:f6:a4:bd:58:0f:31:02:a4:de:50:3d:eb:
                    df:d9:15:f6:f7:89:7e:2b:3a:3d:58:f6:d1:59:88:
                    1b:0e:e0:73:81:7c:b0:ee:30:35:37:de:db:e9:bd:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:43:13:AC:1F:4B:DB:A9:78:95:F8:EC:91:C5:D5:9B:4D:2E:27
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:de40:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:3c:20:94:75:f2:71:59:41:94:17:b3:ab:b5:45:31:86:3a:
         eb:ad:79:bf:6f:91:4c:27:cc:b3:7d:11:4c:51:d6:ba:61:ca:
         a6:49:2e:fc:8c:67:46:a6:0b:16:9e:e5:54:60:59:81:d8:d7:
         b4:07:89:88:5e:30:e8:05:4c:0a:b6:83:71:f3:60:29:d0:c7:
         04:08:3d:ee:2c:f5:af:d9:e1:97:22:fb:31:e1:93:3f:5b:94:
         91:f2:d9:3f:7c:a7:90:a2:1b:16:f3:3f:ba:7a:b6:28:ec:c0:
         17:5d:f3:82:d3:90:ac:44:db:11:04:9e:02:58:ac:89:a3:a8:
         e9:2e:f3:7a:5e:fc:c6:77:01:ce:e0:0d:0f:c7:66:4b:23:92:
         0e:7b:a2:cb:e9:4d:67:50:86:29:27:4b:ee:a5:3b:5a:d6:bc:
         01:52:6f:17:4d:e8:d9:8e:44:ba:b9:ec:78:b3:64:9b:3d:3c:
         fe:e4:b3:e1:4d:26:1e:4a:aa:41:1e:bf:fe:e4:a3:dd:95:51:
         11:83:39:a8:e6:f1:12:03:69:2e:08:63:17:f0:14:9c:8f:c1:
         c8:83:a6:49:bd:94:89:bf:43:5f:cf:15:e1:fa:91:95:00:6a:
         64:1d:a4:ce:a4:8c:12:aa:0b:c8:d9:92:bb:68:12:43:0c:34:
         fe:96:4f:e6
-----BEGIN CERTIFICATE-----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