Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/nD4FzFNAwNlGgOkIPgGvfdlpkDk.roa
File:                     nD4FzFNAwNlGgOkIPgGvfdlpkDk.roa (raw, json)
Hash identifier:          kWXrdD/LLi7jEykv8owFjbYJlRYnjIEHLMY4R++w41Q=
Subject key identifier:   9C:3E:05:CC:53:40:C0:D9:46:80:E9:08:3E:01:AF:7D:D9:69:90:39
Certificate issuer:       /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial:       018CBC5297A2333BB3BDA7BEED80882C31B7
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/nD4FzFNAwNlGgOkIPgGvfdlpkDk.roa
Signing time:             Sat 30 Dec 2023 20:02:58 +0000
ROA not before:           Sat 30 Dec 2023 20:02:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57027
IP address blocks:        2a09:2b80:2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:bc:52:97:a2:33:3b:b3:bd:a7:be:ed:80:88:2c:31:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
        Validity
            Not Before: Dec 30 20:02:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c3e05cc5340c0d94680e9083e01af7dd9699039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:00:79:4d:8c:d0:7d:7f:fc:c3:c6:93:23:
                    c1:24:6a:d4:19:76:19:e3:f0:05:2e:59:f6:fd:63:
                    29:f3:e2:a5:68:82:ef:45:3b:09:a6:1a:18:da:ce:
                    71:94:c5:65:ea:3d:94:49:e9:49:d6:83:2f:c5:f8:
                    26:f9:78:fe:0b:ce:3b:b5:e0:97:f0:a5:9e:0c:04:
                    61:6c:a4:76:89:d0:40:01:00:d7:ee:b6:d1:4c:8c:
                    9d:49:4b:86:19:be:d0:05:2c:50:3e:72:01:6d:3d:
                    e0:83:d2:7e:47:14:fa:75:16:0d:ec:2c:59:f7:ef:
                    82:74:4a:27:6b:83:6f:aa:a7:67:cf:fd:10:06:f2:
                    6b:45:3e:e3:e1:04:8c:5f:2c:61:ed:75:b2:ef:a4:
                    84:5b:4b:a6:97:32:52:ae:15:69:03:ac:1a:2a:c8:
                    a7:b7:bc:1d:3d:62:12:d6:66:e1:69:8e:dc:86:4d:
                    1d:ab:fa:1f:f4:a9:07:e6:53:7c:8a:de:ae:a5:d9:
                    c9:cb:6b:62:dd:7a:c0:74:b6:cb:5d:1f:03:75:39:
                    52:da:da:9c:73:a7:90:c8:fa:bd:b4:ad:87:9d:29:
                    cf:85:c1:36:92:16:48:8f:59:af:21:68:c3:09:21:
                    f3:1d:ed:0b:d0:36:29:15:7c:56:7d:8e:64:a2:04:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:05:CC:53:40:C0:D9:46:80:E9:08:3E:01:AF:7D:D9:69:90:39
            X509v3 Authority Key Identifier:
                keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/nD4FzFNAwNlGgOkIPgGvfdlpkDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:2b80:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:01:24:c4:69:c4:d8:39:17:2f:ea:37:29:74:24:3c:53:d6:
         95:60:31:7d:8a:3a:bf:37:f2:cf:30:2c:81:41:e1:ff:47:7a:
         0c:73:90:cc:7b:83:5f:5b:a4:47:3c:dd:a2:19:f5:18:01:92:
         93:d1:c4:37:c6:c1:81:ba:41:fa:92:ce:ee:ba:4f:a8:65:f6:
         bb:00:42:a8:78:2d:3a:0b:91:22:f5:ae:7d:49:90:f8:5d:d8:
         0f:0b:f5:7a:cf:ac:2a:7e:bc:b2:5b:a3:67:59:6d:1a:d1:3a:
         c2:98:d2:30:da:b9:07:74:9c:9d:01:f8:74:4e:77:8d:e7:a6:
         97:63:00:0b:5f:4f:01:78:81:14:02:88:2e:08:4a:0d:ea:17:
         7f:9a:42:86:9c:9f:89:f3:6b:1c:ef:cb:70:7c:7d:9f:01:40:
         4a:78:6a:9c:ca:02:1c:8f:95:56:63:88:5c:9b:9d:01:a8:07:
         2a:62:e7:e6:8c:5b:05:3a:0e:7c:32:5c:29:8d:45:f8:7b:2a:
         89:48:67:c7:f2:46:47:7c:f9:8e:52:c6:99:e5:42:3e:05:d5:
         6c:58:cb:59:e8:55:77:5a:81:eb:62:4f:45:8d:36:b2:66:88:
         06:d0:d5:59:38:e5:cb:d5:34:1b:51:cf:bf:42:dc:ae:f2:1d:
         a9:ae:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----