Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/qOah5XOheERGQDPZLSNWMu6ohDY.roa
File:                     qOah5XOheERGQDPZLSNWMu6ohDY.roa (raw, json)
Hash identifier:          kYDymdw/YLOQEWjrdqIIovaXDVIwz80BHh1ZAURkzPA=
Subject key identifier:   A8:E6:A1:E5:73:A1:78:44:46:40:33:D9:2D:23:56:32:EE:A8:84:36
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       018A13D0CA2DBA9D1F5C591C13802C60E0BC
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/qOah5XOheERGQDPZLSNWMu6ohDY.roa
Signing time:             Sun 20 Aug 2023 16:39:24 +0000
ROA not before:           Sun 20 Aug 2023 16:39:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23470
IP address blocks:        2a12:3fc2:3001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:13:d0:ca:2d:ba:9d:1f:5c:59:1c:13:80:2c:60:e0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Aug 20 16:39:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8e6a1e573a17844464033d92d235632eea88436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:6d:15:2d:33:bb:7a:60:55:a7:ce:0e:fd:
                    a4:a1:bb:4a:9e:4c:d0:54:a0:50:a8:be:1d:53:49:
                    c1:a8:f7:ae:91:5f:f3:f1:a5:66:8a:7d:7a:da:13:
                    b1:00:c7:40:18:ab:47:16:f6:93:06:72:8b:9f:55:
                    2d:0e:b4:d1:a5:6f:39:8e:5b:08:82:00:b4:e4:6e:
                    44:90:dd:b7:2e:a5:7f:d2:7f:6f:f3:5e:b9:8b:26:
                    78:d8:f9:0c:ff:a3:6c:58:6c:67:7f:4b:72:4e:53:
                    be:29:7a:3a:b9:c6:ae:6c:81:4a:59:b4:ed:42:bf:
                    4c:61:0c:c9:a0:b1:ff:5f:d3:c0:a1:f1:c6:b9:55:
                    d9:82:ed:d1:bf:27:b3:8b:bc:7d:e7:49:10:62:dd:
                    20:f6:f9:81:f1:5d:9b:f3:d0:bc:65:40:55:f9:72:
                    bb:c5:d1:d2:13:0b:de:89:bf:a2:78:a0:ac:3b:57:
                    2c:0c:3f:cf:a2:2b:e4:6d:a1:8f:2a:6b:b5:0f:49:
                    cb:03:fe:fd:db:7a:76:52:0c:e3:d3:6a:cf:84:15:
                    fd:b5:11:73:77:91:ea:b8:2f:51:f4:00:a9:b2:66:
                    91:b0:73:63:21:6a:b6:9e:10:24:f2:5b:4f:86:0c:
                    af:7d:de:bb:d8:5e:3a:e5:f6:e5:2e:ee:4e:02:50:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:A1:E5:73:A1:78:44:46:40:33:D9:2D:23:56:32:EE:A8:84:36
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/qOah5XOheERGQDPZLSNWMu6ohDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:3fc2:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:60:38:99:cb:06:42:ae:f6:65:aa:d3:2c:22:03:5c:a1:
         4c:a5:e5:0c:2c:84:33:8e:82:5a:b1:c8:99:56:1e:df:1b:50:
         8e:83:6a:ca:c2:a8:36:22:62:c4:11:22:9b:3f:b1:b6:80:5d:
         cb:78:12:af:4b:e0:ea:2b:a8:62:c7:b3:c9:e7:68:91:9a:cb:
         c1:97:86:ae:b5:73:91:30:1c:42:d6:8c:94:d0:92:9c:3d:96:
         0b:47:81:b9:be:fe:36:1f:24:61:2c:92:ac:ea:12:13:0d:51:
         07:1c:47:4c:12:e0:82:e8:98:b3:eb:fa:00:df:a5:1f:3f:08:
         6b:30:42:23:b5:39:b9:f4:d1:02:a9:2a:45:d3:a3:be:52:02:
         a9:02:e0:d5:db:4c:a7:e0:db:81:1d:e5:3b:e5:4b:07:d7:67:
         b3:f9:07:d7:d3:3d:3d:79:e3:13:4d:ba:86:0e:a2:36:da:8b:
         ab:83:78:c3:91:5c:a4:8b:e4:a5:97:e9:b3:84:08:34:91:92:
         12:66:64:d3:ee:8d:25:42:df:79:3c:83:9f:64:56:9d:35:50:
         96:2d:f8:b9:b5:66:64:f1:5a:ee:13:8c:dd:4b:89:01:59:91:
         5a:74:71:8f:25:a0:e1:1f:47:b4:c9:6e:83:5d:08:01:9a:21:
         95:0a:07:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYoT0Motup0fXFkcE4AsYOC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwODIwMTYzOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGU2YTFlNTczYTE3ODQ0NDY0MDMzZDkyZDIzNTYzMmVlYTg4NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv9tFS0zu3pgVafODv2kobtKnkzQ
VKBQqL4dU0nBqPeukV/z8aVmin162hOxAMdAGKtHFvaTBnKLn1UtDrTRpW85jlsI
ggC05G5EkN23LqV/0n9v8165iyZ42PkM/6NsWGxnf0tyTlO+KXo6ucaubIFKWbTt
Qr9MYQzJoLH/X9PAofHGuVXZgu3Rvyezi7x950kQYt0g9vmB8V2b89C8ZUBV+XK7
xdHSEwveib+ieKCsO1csDD/PoivkbaGPKmu1D0nLA/7923p2Ugzj02rPhBX9tRFz
d5HquC9R9ACpsmaRsHNjIWq2nhAk8ltPhgyvfd672F465fblLu5OAlDyFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKjmoeVzoXhERkAz2S0jVjLuqIQ2MB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvcU9haDVYT2hlRVJHUURQWkxTTldNdTZvaERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhI/wjAB
MA0GCSqGSIb3DQEBCwUAA4IBAQAY52A4mcsGQq72ZarTLCIDXKFMpeUMLIQzjoJa
sciZVh7fG1COg2rKwqg2ImLEESKbP7G2gF3LeBKvS+DqK6hix7PJ52iRmsvBl4au
tXORMBxC1oyU0JKcPZYLR4G5vv42HyRhLJKs6hITDVEHHEdMEuCC6Jiz6/oA36Uf
PwhrMEIjtTm59NECqSpF06O+UgKpAuDV20yn4NuBHeU75UsH12ez+QfX0z09eeMT
TbqGDqI22ourg3jDkVyki+Sll+mzhAg0kZISZmTT7o0lQt95PIOfZFadNVCWLfi5
tWZk8VruE4zdS4kBWZFadHGPJaDhH0e0yW6DXQgBmiGVCgfF
-----END CERTIFICATE-----