Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/khFK-ez9pOFSDxnQQn4Ov1D_zT4.roa
File:                     khFK-ez9pOFSDxnQQn4Ov1D_zT4.roa (raw, json)
Hash identifier:          YEmNjQMJBDlZcB6VrAknmLPpjsUsjViiGUJClHSlWTA=
Subject key identifier:   92:11:4A:F9:EC:FD:A4:E1:52:0F:19:D0:42:7E:0E:BF:50:FF:CD:3E
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       01892293AC401E166ADA4E4321D06CAB8D73
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/khFK-ez9pOFSDxnQQn4Ov1D_zT4.roa
Signing time:             Tue 04 Jul 2023 20:24:10 +0000
ROA not before:           Tue 04 Jul 2023 20:24:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49434
IP address blocks:        2a0a:2f82::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:22:93:ac:40:1e:16:6a:da:4e:43:21:d0:6c:ab:8d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Jul  4 20:24:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92114af9ecfda4e1520f19d0427e0ebf50ffcd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:d9:d1:ca:a4:f5:39:09:a2:77:dd:9e:8a:
                    cc:ae:e8:ce:fe:69:d5:b9:98:81:ed:1e:81:b1:9a:
                    73:98:fb:1f:05:3b:d3:89:d3:04:49:89:2d:c8:73:
                    5e:38:d1:4a:41:95:eb:42:2b:37:b3:16:d4:e8:d6:
                    9f:d4:e5:55:0d:7c:07:cd:ee:9e:df:ad:8d:ff:48:
                    be:ef:cc:3d:35:2f:3c:88:7b:b1:d0:59:f8:af:4f:
                    00:13:e3:e3:1f:30:0f:80:4c:6b:bb:c6:a0:bd:08:
                    28:6c:09:7e:04:d3:07:7f:14:98:24:01:9a:53:46:
                    ec:6e:4a:03:93:c7:d5:cb:92:20:d4:c2:fc:e2:b7:
                    65:88:83:cb:fa:ca:db:30:29:67:b0:40:66:8a:f0:
                    90:fa:d6:6b:1f:8b:b3:4f:50:0a:7a:b9:66:86:4f:
                    a5:ef:d9:9b:11:1d:ec:88:d3:1e:4b:16:ae:4a:15:
                    17:ba:91:11:ce:5d:90:03:c5:ca:6d:8f:70:a1:7d:
                    df:61:56:0a:41:32:3b:df:a8:60:b6:dd:05:43:2a:
                    d4:be:da:25:bb:71:12:ad:a8:df:13:30:86:77:e8:
                    28:fa:39:5a:2e:4f:ab:bc:12:de:c5:9d:d6:a8:80:
                    aa:dc:ff:cc:56:c3:53:1f:6d:e6:fa:f1:d3:b6:6a:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:4A:F9:EC:FD:A4:E1:52:0F:19:D0:42:7E:0E:BF:50:FF:CD:3E
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/khFK-ez9pOFSDxnQQn4Ov1D_zT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2f82::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:4e:76:d1:2c:55:5c:da:c7:20:58:5b:fb:35:fc:23:41:
         ca:af:e5:f9:fe:11:18:bf:fc:9b:6e:f9:21:6e:09:fc:4c:e6:
         2f:5a:c5:26:c3:9d:c8:a0:bd:12:b1:22:32:ad:b4:32:c0:d0:
         7f:58:3a:f2:cb:e6:0f:53:72:8e:ff:4c:a1:c2:a7:35:c8:be:
         02:d5:f6:ec:06:33:7d:8e:23:40:41:b7:f5:f1:33:fc:dc:fa:
         50:d7:c5:27:d9:06:4a:8c:32:17:9d:df:58:76:37:66:6d:3c:
         96:d8:a8:cc:69:91:37:4c:3b:09:eb:76:32:5d:b4:bc:05:9d:
         b1:e6:34:78:e4:b1:83:da:6b:6b:c2:c6:89:2e:50:d2:14:a1:
         c8:5f:38:9d:db:7d:65:96:19:a5:7c:2c:6c:e2:66:41:fe:af:
         b2:1e:0d:5d:c2:9a:c3:8c:dd:b9:10:d9:66:13:63:7c:a6:21:
         05:13:af:a0:01:8e:90:5d:4a:9f:e1:08:50:7e:6b:a2:a6:77:
         f6:1f:99:a5:ea:9f:c6:b1:97:86:fa:07:a8:8a:82:05:54:be:
         bd:06:30:05:11:fb:b6:1a:5d:2d:da:ad:82:e5:ac:32:50:d3:
         b7:f2:11:a9:11:3e:4c:11:25:98:8a:a6:63:4a:a1:ec:b3:1c:
         6a:19:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----