Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/ysXYtbJy-Y4iMBp-Lz7lZ0myPwU.roa
File:                     ysXYtbJy-Y4iMBp-Lz7lZ0myPwU.roa (raw, json)
Hash identifier:          mdqQfFJ/ET0VlXfjj/8pPeSnLM93ryFmciuN7hZcoBU=
Subject key identifier:   CA:C5:D8:B5:B2:72:F9:8E:22:30:1A:7E:2F:3E:E5:67:49:B2:3F:05
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       0185730CCBF3A1D61A1493C5E23C0143998C
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/ysXYtbJy-Y4iMBp-Lz7lZ0myPwU.roa
Signing time:             Mon 02 Jan 2023 15:14:56 +0000
ROA not before:           Mon 02 Jan 2023 15:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212535
IP address blocks:        2001:678:d70::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:0c:cb:f3:a1:d6:1a:14:93:c5:e2:3c:01:43:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Jan  2 15:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cac5d8b5b272f98e22301a7e2f3ee56749b23f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:15:fe:0a:46:e0:d2:58:6a:3d:5c:03:f2:
                    9e:a9:f5:d1:1b:9b:a3:4e:c8:33:f8:f4:21:c9:8e:
                    e8:49:8b:1c:3c:71:d1:73:d5:ce:47:73:60:d8:7e:
                    57:6e:24:d6:86:8e:08:0a:e7:b5:d4:33:be:23:ee:
                    0b:76:98:06:ca:fd:fd:a1:3f:44:d2:3a:ef:53:fa:
                    ae:fe:16:99:44:1a:43:88:bc:df:2a:be:a6:6a:cb:
                    31:31:24:d9:3a:f5:8e:5d:3c:7e:00:5e:a2:fb:a6:
                    d5:ca:a9:2e:47:a2:c4:17:53:ca:47:c0:70:d5:84:
                    da:a1:4c:c5:8a:95:62:a6:aa:75:e3:dd:b8:17:d2:
                    64:da:a6:f7:52:3b:e5:82:22:31:a2:0c:9f:8c:b0:
                    9e:8d:74:77:d9:21:40:7f:b5:88:b0:98:6f:01:b7:
                    83:77:2f:17:76:99:4e:0c:c4:e5:f8:81:35:8a:b2:
                    bf:8e:e5:5e:ad:e0:f5:e2:83:89:41:8f:ec:f6:69:
                    81:ef:06:54:42:d6:aa:c2:42:f7:cc:b5:75:fb:78:
                    e4:a7:d6:01:80:d7:08:fe:a9:1f:cd:1a:c5:ff:f2:
                    b6:88:94:0f:cc:8a:0a:e4:54:d7:8c:40:1d:d6:98:
                    d5:6c:50:9b:66:f7:53:65:0d:42:a7:3c:75:51:69:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C5:D8:B5:B2:72:F9:8E:22:30:1A:7E:2F:3E:E5:67:49:B2:3F:05
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/ysXYtbJy-Y4iMBp-Lz7lZ0myPwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d70::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:39:e7:47:e8:da:25:94:b4:01:b6:19:40:8a:50:8d:c8:
         4a:a0:42:ba:49:b1:10:22:cf:bd:36:64:86:c1:e6:04:a2:5f:
         0a:ba:a7:76:8d:9e:30:2d:7e:b2:d9:e2:3e:45:81:90:ec:86:
         72:03:b9:b7:c0:40:52:15:2f:63:85:ab:8f:62:9d:37:6f:ff:
         69:ab:2c:8c:e8:8c:b6:e2:02:df:3b:87:0f:56:df:d6:69:19:
         32:78:6c:50:89:80:2c:8e:5c:08:0e:c0:b4:74:28:b2:65:11:
         c8:a0:6b:50:67:d5:f0:54:c1:60:9f:30:f5:f5:7c:12:5a:f7:
         c5:0d:23:ac:47:9d:cc:93:19:86:ad:69:c2:38:66:bf:b5:af:
         bf:66:8d:e8:5a:5b:be:bb:39:4b:f0:58:6c:1e:79:ee:72:61:
         34:16:35:43:cb:6a:95:89:5d:72:28:bd:73:ca:f2:58:33:5c:
         91:8f:4e:a7:dd:fe:af:6a:2f:3e:fd:ec:57:d5:bb:28:fd:69:
         7f:91:17:4b:6c:e3:a1:a3:15:d5:24:63:df:a7:0f:7d:2a:20:
         9d:e3:e8:28:ea:97:c9:35:e8:7d:d9:b0:ea:66:f3:69:bd:ee:
         ec:dd:4c:57:73:04:43:4b:1f:77:cd:35:bb:7a:e3:09:4b:e3:
         2f:31:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----