Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/vBBbBGNp_U892zo9VS8FkTyvWpA.roa
File:                     vBBbBGNp_U892zo9VS8FkTyvWpA.roa (raw, json)
Hash identifier:          rwuFq2TCOGQ1RQeiUCCjsKji40JdS4Iqgt5WnF+oMJ4=
Subject key identifier:   BC:10:5B:04:63:69:FD:4F:3D:DB:3A:3D:55:2F:05:91:3C:AF:5A:90
Certificate issuer:       /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial:       0187945883031AD633DDD969B87E24307D56
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/vBBbBGNp_U892zo9VS8FkTyvWpA.roa
Signing time:             Tue 18 Apr 2023 12:30:41 +0000
ROA not before:           Tue 18 Apr 2023 12:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31169
IP address blocks:        2001:67c:2d68::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:58:83:03:1a:d6:33:dd:d9:69:b8:7e:24:30:7d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
        Validity
            Not Before: Apr 18 12:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc105b046369fd4f3ddb3a3d552f05913caf5a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:36:63:ef:3a:49:9e:52:b9:58:d9:b9:96:
                    34:a3:d5:cb:41:c6:54:15:b8:20:6f:be:31:e3:8e:
                    bd:22:d5:32:a7:f4:48:0c:79:c8:23:81:38:b2:4b:
                    ef:69:97:93:99:21:5c:f9:00:d9:44:6a:5f:71:5b:
                    f5:99:bf:4f:47:2d:4f:0e:47:cf:40:78:91:40:4c:
                    bf:8d:2b:04:06:7c:dc:13:f1:94:0b:80:95:be:34:
                    9e:cb:a7:e5:39:b9:87:32:2c:9c:1c:2d:be:8c:86:
                    04:6a:49:08:1f:af:12:08:82:9f:a7:c8:ad:9d:78:
                    14:d9:d2:e3:35:f3:6c:f0:73:cd:c9:3c:5a:7a:9e:
                    f2:2e:a7:e3:ae:dc:92:5a:a3:11:40:bf:6e:5b:ff:
                    9f:f1:30:54:26:cd:9e:b8:a2:12:8f:34:bd:24:d0:
                    0d:b9:a5:78:b4:31:c7:60:2a:65:a1:77:43:c8:55:
                    dd:e9:d6:f7:86:67:c3:f6:dd:5a:55:b8:cb:1c:f6:
                    c6:e8:6e:c6:18:8c:58:4b:de:91:5c:e9:74:66:28:
                    45:22:86:ae:41:2a:ce:5d:29:3a:43:a4:07:5f:27:
                    38:a4:c8:b7:22:8c:25:7a:67:e5:99:cd:9b:42:e0:
                    51:ba:15:53:bc:c3:ef:15:c5:e5:78:49:5c:ea:17:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:10:5B:04:63:69:FD:4F:3D:DB:3A:3D:55:2F:05:91:3C:AF:5A:90
            X509v3 Authority Key Identifier:
                keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/vBBbBGNp_U892zo9VS8FkTyvWpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2d68::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:58:fd:42:c6:07:6e:1d:4b:3a:2d:f0:30:dc:a0:92:37:05:
         05:d1:31:33:b5:b2:4c:29:61:e2:20:59:59:b6:77:dd:59:d8:
         7d:0a:b7:19:20:11:b1:7c:39:16:99:c3:e9:7b:b3:aa:8d:29:
         a7:85:2c:e6:41:a1:4d:01:19:26:56:02:da:78:e7:55:46:60:
         93:0c:c5:2e:6b:b4:65:13:fe:fc:4c:7c:9d:3c:fe:b3:07:6e:
         6f:39:71:54:dc:cc:27:44:33:4c:27:97:9d:96:5d:81:67:65:
         a3:1a:5d:57:c0:27:73:da:2d:c4:5b:fc:78:e7:3d:c6:7f:d6:
         1a:bd:8f:f3:85:bc:af:41:8e:c9:40:44:0a:23:ac:6e:17:63:
         47:59:fb:99:63:70:7f:57:c4:50:4b:2e:a1:73:c6:3c:1e:0a:
         fe:6b:9f:a7:6b:1c:a2:14:d7:f0:9b:1b:42:b5:6a:aa:ad:54:
         6f:5b:cc:fe:25:f7:39:17:a6:5a:ba:8a:49:0d:d3:bd:1b:5b:
         12:93:1b:51:17:83:c8:6a:40:80:bd:2c:f9:d8:88:91:25:15:
         6d:03:3b:4c:30:06:20:87:4d:87:f5:06:25:3b:f2:9e:2e:3b:
         10:dd:f6:f4:3c:d6:de:d9:2a:33:31:d1:7a:9d:59:7b:0a:02:
         02:60:13:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYeUWIMDGtYz3dlpuH4kMH1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmFkZmUyOTFkZWZjNTZmOTQ3OWUyZTdkMjFiNTM5N2Nm
YTJiNjQwHhcNMjMwNDE4MTIzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzEwNWIwNDYzNjlmZDRmM2RkYjNhM2Q1NTJmMDU5MTNjYWY1YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK02Y+86SZ5SuVjZuZY0o9XLQcZU
Fbggb74x4469ItUyp/RIDHnII4E4skvvaZeTmSFc+QDZRGpfcVv1mb9PRy1PDkfP
QHiRQEy/jSsEBnzcE/GUC4CVvjSey6flObmHMiycHC2+jIYEakkIH68SCIKfp8it
nXgU2dLjNfNs8HPNyTxaep7yLqfjrtySWqMRQL9uW/+f8TBUJs2euKISjzS9JNAN
uaV4tDHHYCploXdDyFXd6db3hmfD9t1aVbjLHPbG6G7GGIxYS96RXOl0ZihFIoau
QSrOXSk6Q6QHXyc4pMi3Iowlemflmc2bQuBRuhVTvMPvFcXleElc6hcm0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLwQWwRjaf1PPds6PVUvBZE8r1qQMB8GA1UdIwQY
MBaAFBL63+KR3vxW+UeeLn0htTl8+itkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTkt
YTM0NzE3NzQxNTdiLzEvdkJCYkJHTnBfVTg5MnpvOVZTOEZrVHl2V3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTktYTM0NzE3NzQxNTdi
LzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC1o
MA0GCSqGSIb3DQEBCwUAA4IBAQAFWP1CxgduHUs6LfAw3KCSNwUF0TEztbJMKWHi
IFlZtnfdWdh9CrcZIBGxfDkWmcPpe7OqjSmnhSzmQaFNARkmVgLaeOdVRmCTDMUu
a7RlE/78THydPP6zB25vOXFU3MwnRDNMJ5edll2BZ2WjGl1XwCdz2i3EW/x45z3G
f9YavY/zhbyvQY7JQEQKI6xuF2NHWfuZY3B/V8RQSy6hc8Y8Hgr+a5+naxyiFNfw
mxtCtWqqrVRvW8z+Jfc5F6ZauopJDdO9G1sSkxtRF4PIakCAvSz52IiRJRVtAztM
MAYgh02H9QYlO/KeLjsQ3fb0PNbe2SozMdF6nVl7CgICYBPK
-----END CERTIFICATE-----