Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/2tzffAfJoPxYuIfCXuIy0nWhsaI.roa
File:                     2tzffAfJoPxYuIfCXuIy0nWhsaI.roa (raw, json)
Hash identifier:          9YW4qJOnYLBTLtokjlR/5F1zkzY4XLUiLnrNDJROZ2I=
Subject key identifier:   DA:DC:DF:7C:07:C9:A0:FC:58:B8:87:C2:5E:E2:32:D2:75:A1:B1:A2
Certificate issuer:       /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial:       01874906CA12052C9E5943A5ED933791727B
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/2tzffAfJoPxYuIfCXuIy0nWhsaI.roa
Signing time:             Mon 03 Apr 2023 21:29:54 +0000
ROA not before:           Mon 03 Apr 2023 21:29:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60265
IP address blocks:        2a01:bf00::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:49:06:ca:12:05:2c:9e:59:43:a5:ed:93:37:91:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
        Validity
            Not Before: Apr  3 21:29:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dadcdf7c07c9a0fc58b887c25ee232d275a1b1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:d2:52:cf:f2:f7:96:61:f2:ed:8e:e6:bd:
                    86:c9:0e:67:15:09:d8:77:46:d9:6a:f7:f6:9c:68:
                    7f:8a:dc:74:87:51:32:8e:9e:72:4d:33:e8:e6:3f:
                    ce:f1:6e:90:c0:75:47:a5:2a:18:ff:24:9c:1b:0b:
                    29:50:1c:90:e5:00:49:8e:61:72:cd:37:22:2b:3b:
                    9a:5a:ca:c5:5e:b8:88:fd:3e:a8:69:9c:36:d2:31:
                    71:37:8c:57:75:7b:a9:44:63:ce:31:f6:ea:90:22:
                    a6:ac:0e:88:1e:3f:a9:c5:5a:80:0e:1a:45:e2:90:
                    38:e3:d1:ec:5e:db:1c:c0:44:33:d2:c8:e2:f4:45:
                    84:37:bf:7f:f7:61:8a:7e:bd:2b:c6:2e:27:b5:01:
                    27:81:89:73:a9:20:0f:7f:5c:e1:ad:2c:b3:c2:20:
                    bc:4d:b4:37:5b:5a:16:8f:5e:f3:ae:38:22:88:92:
                    51:77:44:66:ed:71:95:71:bd:b7:74:c7:b2:3a:d2:
                    eb:f9:b7:e2:f6:d9:bf:df:e7:97:96:d0:50:b8:f3:
                    3c:72:12:21:74:37:37:fa:fc:69:30:f8:f6:34:f1:
                    7e:fc:98:a8:48:17:9e:75:a3:c1:86:c3:97:a9:7e:
                    7c:33:38:fb:fa:2f:11:43:ee:e6:38:42:84:69:dd:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DC:DF:7C:07:C9:A0:FC:58:B8:87:C2:5E:E2:32:D2:75:A1:B1:A2
            X509v3 Authority Key Identifier:
                keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/2tzffAfJoPxYuIfCXuIy0nWhsaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:3c:ba:ec:a7:f1:fd:87:ca:e7:20:c5:98:b3:5d:56:ab:0c:
         86:1a:6b:9c:8b:1f:e1:5e:1e:71:46:8e:05:f4:74:11:9f:9b:
         9f:01:69:be:65:1c:22:3b:a6:97:7b:06:3a:c8:77:13:01:f3:
         5d:2f:4b:86:83:82:41:cd:65:5f:52:62:0c:59:c2:fd:f7:5c:
         21:f9:d6:39:01:d9:2c:47:8c:9b:3a:57:50:19:ee:77:b6:da:
         ed:33:42:d7:db:1c:93:80:e3:99:71:26:14:07:46:e8:4e:13:
         75:a0:12:b6:2e:ca:90:a6:5e:07:2b:4b:20:60:d3:97:88:31:
         ac:9e:81:01:8a:bc:26:af:2a:40:13:6b:91:d1:37:fb:9c:3f:
         cb:dd:c3:c0:5f:04:a4:5e:b4:5f:41:48:7f:f2:16:e1:2d:60:
         bc:c2:3c:42:c9:d5:f8:4f:4f:71:ce:09:ab:98:2e:1a:05:93:
         23:36:c5:84:67:fc:f5:6f:ae:7e:ed:73:4e:4a:78:7f:fa:95:
         3b:bf:ae:0b:d2:e4:cf:65:fd:8f:a7:19:a3:d8:a5:1c:05:c9:
         f9:32:b8:67:11:bb:6a:9a:9c:e5:1e:9b:f5:cb:1b:2d:ad:07:
         81:51:a7:67:5a:b3:ea:a3:44:45:04:40:18:bd:fb:3d:f3:0a:
         75:a3:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----