Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/6g2AQdydPBbHWiPzOuHWyiHTY2Y.roa
File:                     6g2AQdydPBbHWiPzOuHWyiHTY2Y.roa (raw, json)
Hash identifier:          d6SEoRJOGVTgOnn+LNGsEmC3In2JSYAmDCRMdoB9SP8=
Subject key identifier:   EA:0D:80:41:DC:9D:3C:16:C7:5A:23:F3:3A:E1:D6:CA:21:D3:63:66
Certificate issuer:       /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial:       018612996AC9350423D4A9DF08A04CA2232A
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/6g2AQdydPBbHWiPzOuHWyiHTY2Y.roa
Signing time:             Thu 02 Feb 2023 14:48:09 +0000
ROA not before:           Thu 02 Feb 2023 14:48:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39257
IP address blocks:        89.58.128.0/21 maxlen: 21
                          2a0c:be01::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:99:6a:c9:35:04:23:d4:a9:df:08:a0:4c:a2:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
        Validity
            Not Before: Feb  2 14:48:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea0d8041dc9d3c16c75a23f33ae1d6ca21d36366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:7f:e9:8b:b4:af:9b:7b:5e:6a:ac:69:6c:
                    b2:d9:7e:7c:69:49:84:93:d2:41:39:53:91:83:2a:
                    55:35:da:fc:39:71:bd:d3:e5:70:ac:d4:c0:0d:e3:
                    8f:58:b3:ce:3e:25:1b:aa:60:b3:40:31:7c:e5:e8:
                    f7:e6:ec:0b:66:8e:76:50:37:29:68:48:52:61:03:
                    c9:b5:56:44:53:1d:7b:53:a6:7d:8a:bf:24:e9:53:
                    e7:b3:0d:41:f1:36:40:ed:c3:3c:5c:f8:f2:ed:f7:
                    47:cb:50:e7:bc:16:6f:c1:94:99:89:29:7e:7e:e8:
                    a5:13:f5:42:0e:1c:ff:74:c8:3a:39:c4:53:59:a9:
                    2e:11:06:24:18:f8:10:82:58:13:ec:57:55:4e:b5:
                    30:bf:05:ce:b4:ad:55:9c:ce:3f:50:16:2f:d5:8a:
                    34:65:8c:ab:3b:c5:53:63:9e:ab:aa:fa:d5:e9:44:
                    ab:5f:8a:37:74:e5:17:37:8d:31:c0:5c:5e:80:92:
                    86:66:59:23:a6:f7:e0:9c:9c:3d:4b:37:4d:71:eb:
                    6f:6a:87:c6:2d:42:f0:63:44:6b:70:7d:05:e3:fc:
                    3d:04:05:a8:9e:24:b1:62:d1:fc:cb:31:53:89:33:
                    87:e2:3f:63:e1:79:e3:ac:97:a5:b1:2f:dd:be:48:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:80:41:DC:9D:3C:16:C7:5A:23:F3:3A:E1:D6:CA:21:D3:63:66
            X509v3 Authority Key Identifier:
                keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/6g2AQdydPBbHWiPzOuHWyiHTY2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.58.128.0/21
                IPv6:
                  2a0c:be01::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:7f:02:24:5d:08:4e:83:c9:16:5a:a3:53:70:0a:0d:5e:
         2c:0e:9c:b2:bc:60:d1:21:ea:25:87:93:0e:7f:37:57:b1:14:
         2c:a4:fa:7d:6d:df:b9:3d:2f:87:69:87:ca:4f:bc:d4:cd:84:
         31:b1:71:a3:43:12:34:99:89:e7:a9:d4:25:66:78:43:50:4e:
         4c:b3:8c:a7:a6:99:bb:50:cf:ff:f1:8b:34:62:45:af:fe:88:
         e0:ce:91:48:fa:48:b7:ee:2e:2a:96:d3:38:c3:76:33:fe:1c:
         8a:3f:97:a4:3f:9b:c5:8d:a5:4f:da:69:2a:e7:94:4e:69:f4:
         bf:42:0a:8d:68:6c:65:47:37:a8:7f:fb:9f:86:b4:43:87:77:
         8f:a5:49:2f:82:1d:04:d8:1e:fa:de:6c:b3:00:d3:22:cc:9b:
         d9:72:04:a8:ed:a4:e7:87:cb:db:7a:e0:91:a7:1d:ea:19:df:
         a9:fa:ce:9f:bd:75:6a:39:55:4f:d6:6e:3a:2b:d8:24:83:25:
         b3:4a:fb:79:c0:99:6c:70:08:f0:ff:0f:ee:22:37:38:ea:8b:
         c2:27:68:fe:d1:d6:f7:6a:2c:bd:fe:6c:46:0d:8a:f4:b6:f1:
         95:f6:9a:30:bc:fa:3f:89:35:95:0a:94:c8:c3:17:27:92:ee:
         80:e0:04:6c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYSmWrJNQQj1KnfCKBMoiMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNDZkZThjZWMwMWQwNTI1MzZjMGYwOGRmZTdhOGI1M2Y5
YWFlYzIwHhcNMjMwMjAyMTQ0ODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTBkODA0MWRjOWQzYzE2Yzc1YTIzZjMzYWUxZDZjYTIxZDM2MzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ5/6Yu0r5t7XmqsaWyy2X58aUmE
k9JBOVORgypVNdr8OXG90+VwrNTADeOPWLPOPiUbqmCzQDF85ej35uwLZo52UDcp
aEhSYQPJtVZEUx17U6Z9ir8k6VPnsw1B8TZA7cM8XPjy7fdHy1DnvBZvwZSZiSl+
fuilE/VCDhz/dMg6OcRTWakuEQYkGPgQglgT7FdVTrUwvwXOtK1VnM4/UBYv1Yo0
ZYyrO8VTY56rqvrV6USrX4o3dOUXN40xwFxegJKGZlkjpvfgnJw9SzdNcetvaofG
LULwY0RrcH0F4/w9BAWoniSxYtH8yzFTiTOH4j9j4XnjrJelsS/dvkh+hwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOoNgEHcnTwWx1oj8zrh1soh02NmMB8GA1UdIwQY
MBaAFIFG3ozsAdBSU2wPCN/nqLU/mq7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAt
Y2Q1NzJmZDA0NGVlLzEvNmcyQVFkeWRQQmJIV2lQek91SFd5aUhUWTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjhkOWEtOGRkYi00NGIzLTlhYzAtY2Q1NzJmZDA0NGVl
LzEvZ1ViZWpPd0IwRkpUYkE4STMtZW90VC1hcnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDWTqAMA0E
AgACMAcDBQAqDL4BMA0GCSqGSIb3DQEBCwUAA4IBAQCzG38CJF0IToPJFlqjU3AK
DV4sDpyyvGDRIeolh5MOfzdXsRQspPp9bd+5PS+HaYfKT7zUzYQxsXGjQxI0mYnn
qdQlZnhDUE5Ms4ynppm7UM//8Ys0YkWv/ojgzpFI+ki37i4qltM4w3Yz/hyKP5ek
P5vFjaVP2mkq55ROafS/QgqNaGxlRzeof/ufhrRDh3ePpUkvgh0E2B763myzANMi
zJvZcgSo7aTnh8vbeuCRpx3qGd+p+s6fvXVqOVVP1m46K9gkgyWzSvt5wJlscAjw
/w/uIjc46ovCJ2j+0db3aiy9/mxGDYr0tvGV9powvPo/iTWVCpTIwxcnku6A4ARs
-----END CERTIFICATE-----