Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gwOOTXqgkM6oC3N2FESmlYuNY2c.roa
File:                     gwOOTXqgkM6oC3N2FESmlYuNY2c.roa (raw, json)
Hash identifier:          NCxSxKyhUlbCGKT5UyyENc4QLRAFRVMfkOLof2XixDw=
Subject key identifier:   83:03:8E:4D:7A:A0:90:CE:A8:0B:73:76:14:44:A6:95:8B:8D:63:67
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018A832A26A53E7A97D3FE4CC0371F8FAF8D
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gwOOTXqgkM6oC3N2FESmlYuNY2c.roa
Signing time:             Mon 11 Sep 2023 07:34:52 +0000
ROA not before:           Mon 11 Sep 2023 07:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        2a09:4a40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:2a:26:a5:3e:7a:97:d3:fe:4c:c0:37:1f:8f:af:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Sep 11 07:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83038e4d7aa090cea80b73761444a6958b8d6367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:ba:aa:c2:d1:67:ba:f7:38:f1:37:0b:dc:
                    f0:8e:e5:04:21:69:28:29:24:41:2a:9e:30:93:df:
                    af:79:73:67:4c:34:8f:cd:74:4c:5e:fc:87:7c:cc:
                    25:21:6c:15:fb:17:5b:90:6a:36:84:ff:2e:6a:77:
                    90:c9:60:9b:ad:5f:89:4a:bc:d7:3f:81:70:41:a2:
                    f5:5a:97:4e:65:1a:d2:af:c2:6b:1b:8a:35:68:00:
                    ce:62:f6:0b:56:63:f6:d6:d4:98:93:97:b0:12:da:
                    2c:35:9d:4a:e0:21:6c:1f:10:3f:5e:07:32:62:98:
                    73:76:88:e5:6f:86:25:46:1b:5e:16:68:d5:8e:64:
                    41:ba:23:4d:43:e0:6b:15:69:a0:fa:c2:34:ba:b0:
                    8f:98:90:f0:ef:82:90:00:76:fa:3f:fa:7d:6f:65:
                    f3:c0:7c:9b:f5:1a:b1:18:b9:cd:ec:3d:bf:18:b2:
                    a9:08:8c:d0:07:4e:88:5a:05:7f:7a:fd:27:54:e9:
                    e8:d9:c8:11:0f:f7:0d:85:99:2a:c1:c9:09:9e:57:
                    be:c5:c1:1d:24:d1:fb:3b:94:26:9d:53:50:0b:0c:
                    5e:08:d9:61:ae:ea:ee:91:b2:9e:e7:27:79:2c:7a:
                    f2:f3:e3:8a:a5:cc:76:58:7b:51:43:43:ab:38:0d:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:8E:4D:7A:A0:90:CE:A8:0B:73:76:14:44:A6:95:8B:8D:63:67
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gwOOTXqgkM6oC3N2FESmlYuNY2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:4a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:2d:3a:2a:21:6c:62:34:0c:ec:d3:b0:ca:3e:65:ee:4f:
         37:f6:c7:f6:7d:26:40:0f:91:77:41:7c:3d:05:26:2e:7c:e3:
         6c:9d:fe:4e:9d:62:b1:84:eb:8c:84:3e:ce:e0:cc:4f:41:12:
         3c:f6:63:b6:b7:1c:8f:90:29:2f:c5:62:9c:80:89:91:5f:f7:
         30:7f:d9:cf:9d:70:b9:52:e4:2c:cd:55:f4:22:13:7b:82:7c:
         11:bd:59:ca:53:d8:66:03:c5:3a:f7:f5:30:52:ef:da:ed:13:
         52:9a:30:a1:aa:64:d2:bc:49:5c:b2:00:83:e7:54:01:f3:b5:
         32:ed:e8:02:e3:da:76:2d:c3:62:f3:99:5a:60:08:5a:01:a3:
         4d:eb:ef:70:4e:a1:ca:9f:64:83:1b:2a:8c:16:11:f0:9e:bf:
         43:5e:46:1f:cc:dd:b9:79:ab:42:2b:44:fa:a7:c8:8f:e2:ed:
         ab:ea:2e:26:ad:8a:a7:ae:0d:c9:3c:60:c4:2c:1c:56:60:2e:
         f9:b0:14:f4:dd:61:43:0c:5d:84:1e:02:e4:91:e8:79:0b:27:
         9d:95:56:03:56:2b:12:f7:73:84:a0:1e:12:74:73:ce:9a:b3:
         6d:4b:74:9e:89:2c:18:7d:b6:05:1f:dc:2c:d3:04:11:fc:ca:
         83:c9:8c:25
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYqDKialPnqX0/5MwDcfj6+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjMwOTExMDczNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzAzOGU0ZDdhYTA5MGNlYTgwYjczNzYxNDQ0YTY5NThiOGQ2MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMm6qsLRZ7r3OPE3C9zwjuUEIWko
KSRBKp4wk9+veXNnTDSPzXRMXvyHfMwlIWwV+xdbkGo2hP8uaneQyWCbrV+JSrzX
P4FwQaL1WpdOZRrSr8JrG4o1aADOYvYLVmP21tSYk5ewEtosNZ1K4CFsHxA/Xgcy
Yphzdojlb4YlRhteFmjVjmRBuiNNQ+BrFWmg+sI0urCPmJDw74KQAHb6P/p9b2Xz
wHyb9RqxGLnN7D2/GLKpCIzQB06IWgV/ev0nVOno2cgRD/cNhZkqwckJnle+xcEd
JNH7O5QmnVNQCwxeCNlhrurukbKe5yd5LHry8+OKpcx2WHtRQ0OrOA02RQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIMDjk16oJDOqAtzdhREppWLjWNnMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvZ3dPT1RYcWdrTTZvQzNOMkZFU21sWXVOWTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKglKQDAN
BgkqhkiG9w0BAQsFAAOCAQEAQA4tOiohbGI0DOzTsMo+Ze5PN/bH9n0mQA+Rd0F8
PQUmLnzjbJ3+Tp1isYTrjIQ+zuDMT0ESPPZjtrccj5ApL8VinICJkV/3MH/Zz51w
uVLkLM1V9CITe4J8Eb1ZylPYZgPFOvf1MFLv2u0TUpowoapk0rxJXLIAg+dUAfO1
Mu3oAuPadi3DYvOZWmAIWgGjTevvcE6hyp9kgxsqjBYR8J6/Q15GH8zduXmrQitE
+qfIj+Ltq+ouJq2Kp64NyTxgxCwcVmAu+bAU9N1hQwxdhB4C5JHoeQsnnZVWA1Yr
EvdzhKAeEnRzzpqzbUt0noksGH22BR/cLNMEEfzKg8mMJQ==
-----END CERTIFICATE-----