Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa
File:                     _0dszXUEeey8BWNY89dOPXhJWtk.roa (raw, json)
Hash identifier:          ooI3pDpQ5LpQ2//iLaLLk+AeMx09yzSSVDZm8tQO1+U=
Subject key identifier:   FF:47:6C:CD:75:04:79:EC:BC:05:63:58:F3:D7:4E:3D:78:49:5A:D9
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       01857315F7345913F7DC02F0BFC277A59CF2
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa
Signing time:             Mon 02 Jan 2023 15:24:57 +0000
ROA not before:           Mon 02 Jan 2023 15:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60998
IP address blocks:        2a0f:4440:aaaa::/48 maxlen: 48
                          2a0f:4440:abcd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:f7:34:59:13:f7:dc:02:f0:bf:c2:77:a5:9c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jan  2 15:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff476ccd750479ecbc056358f3d74e3d78495ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:a2:7c:eb:8f:31:47:37:c8:c8:13:fd:bb:
                    a6:a8:7b:4c:da:7d:cf:65:f7:44:e8:98:1c:07:a3:
                    5d:12:e0:8a:91:af:fc:aa:cb:31:4c:a7:dd:f4:74:
                    32:50:64:33:1e:7e:a7:78:c4:ac:ce:09:4c:6b:0c:
                    6d:bf:5b:1a:23:a5:a0:b5:2d:af:2a:44:e6:5f:66:
                    fb:c5:f5:aa:83:c5:d1:47:ca:64:db:b3:72:17:70:
                    b9:3a:49:db:e7:06:0c:17:bb:42:34:73:41:df:9f:
                    8a:9f:4d:4d:db:24:6d:fb:79:35:fe:53:37:29:b8:
                    2a:f3:a0:77:3f:02:f9:29:12:00:11:41:e6:de:9a:
                    d6:78:b9:56:27:26:52:ac:c8:13:36:e6:5e:89:bd:
                    c9:1c:42:c3:f3:25:66:5a:5e:33:2b:2e:d6:6f:3e:
                    eb:f4:51:6b:30:3c:7a:7f:c2:96:7d:7b:9b:bf:43:
                    3c:d9:5f:eb:51:96:9f:12:31:34:36:3c:23:76:2a:
                    71:47:82:ee:f9:74:87:8e:f4:36:1f:84:4b:a8:39:
                    8d:62:fa:35:cd:3c:d0:3a:95:36:32:f6:d3:54:20:
                    67:4a:2e:b1:70:00:29:d3:b8:96:71:7a:f8:29:1c:
                    4d:43:50:1a:1f:23:78:7b:cf:07:74:b2:a8:c9:7e:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:6C:CD:75:04:79:EC:BC:05:63:58:F3:D7:4E:3D:78:49:5A:D9
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_0dszXUEeey8BWNY89dOPXhJWtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:4440:aaaa::/48
                  2a0f:4440:abcd::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:a5:f0:fc:25:6a:63:56:ce:85:7c:3f:b8:92:41:bd:11:
         20:4f:13:b5:57:52:53:f3:48:27:d0:fa:4f:bc:0f:ee:37:7f:
         e7:a0:40:47:af:e1:21:f8:76:0c:6c:79:ef:0b:f4:71:31:01:
         e9:4e:34:57:18:22:32:50:c0:a4:b3:e3:22:95:5e:2f:ad:e0:
         ef:1d:60:fd:62:9f:79:0c:fe:63:d5:80:34:f9:fa:79:f0:f3:
         26:e2:3b:4b:4e:8c:84:18:00:01:72:0f:50:ec:1e:77:b1:ed:
         4b:b2:ad:6a:da:b8:e1:9d:23:ee:87:4e:d2:c9:9b:bd:2d:2e:
         37:bd:73:d5:29:01:30:24:44:bd:42:b6:1c:02:e6:82:4d:a6:
         02:fe:15:a0:de:77:27:c1:3b:c2:8a:40:38:0c:91:fc:67:92:
         45:27:d3:ad:51:42:17:cc:e3:57:7f:83:94:42:d0:0f:66:b2:
         9a:db:69:0f:15:a4:56:1a:cc:ce:4c:f2:f5:47:33:e1:13:f1:
         d5:47:32:35:bd:92:ef:1d:ee:f9:84:47:db:dd:ac:c2:53:6c:
         df:e9:8f:be:da:06:37:6f:a8:7e:5f:a6:48:87:96:56:0e:48:
         88:2e:5e:b6:1e:cd:78:a3:74:8f:c9:ac:44:28:c7:d2:a0:94:
         03:d2:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----