Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/6lbnM6VleLQBrDTtQIqJtI4c0G4.roa
File:                     6lbnM6VleLQBrDTtQIqJtI4c0G4.roa (raw, json)
Hash identifier:          wBT4MVNZD7QcqQLbTSLydNu2rVfIIAN5LmTrYAWxYnM=
Subject key identifier:   EA:56:E7:33:A5:65:78:B4:01:AC:34:ED:40:8A:89:B4:8E:1C:D0:6E
Certificate issuer:       /CN=0bdaba873ee18be547bd935943c0798ddcf70935
Certificate serial:       01856D6F4EC4B84EFF52220F8B7CBC02F3CB
Authority key identifier: 0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/6lbnM6VleLQBrDTtQIqJtI4c0G4.roa
Signing time:             Sun 01 Jan 2023 13:04:49 +0000
ROA not before:           Sun 01 Jan 2023 13:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210298
IP address blocks:        2a12:e683::/32 maxlen: 32
                          2a12:e682::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:6f:4e:c4:b8:4e:ff:52:22:0f:8b:7c:bc:02:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdaba873ee18be547bd935943c0798ddcf70935
        Validity
            Not Before: Jan  1 13:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea56e733a56578b401ac34ed408a89b48e1cd06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:78:d7:62:a9:2e:4f:b7:97:8e:31:e7:e6:
                    43:4b:8c:41:ec:4a:4a:42:f3:e4:06:78:c2:f4:01:
                    b9:52:80:6c:06:de:31:f1:e8:80:fd:53:74:92:96:
                    ac:f1:c2:96:a2:59:f9:86:11:95:47:29:27:98:4d:
                    4f:6f:7e:93:1a:98:61:fe:b0:71:64:2b:10:a4:41:
                    62:3a:5c:b7:ce:80:7f:b6:9a:0d:46:be:95:46:69:
                    70:b4:55:51:78:b0:34:29:6d:26:74:d9:b3:63:36:
                    cb:4b:dd:db:e6:4a:06:ad:7f:fb:00:63:51:57:7c:
                    fe:12:56:86:15:a8:fd:91:68:8c:9f:64:7e:12:c6:
                    41:6e:4e:4e:4e:03:63:78:cc:28:cc:41:47:24:96:
                    af:a0:a7:4b:08:9e:e7:8e:32:1a:4d:81:57:17:67:
                    6f:a4:d3:10:af:e9:ac:ea:de:4b:d9:e7:1b:18:c2:
                    e5:be:ef:ff:12:09:d1:02:16:7a:2b:2e:2b:a0:a6:
                    59:f5:68:7f:a8:c8:5a:63:c9:75:b1:99:58:3b:e1:
                    19:66:be:b3:94:64:ae:0b:bf:9e:c2:14:04:ef:8f:
                    c8:ed:11:9b:18:b0:4c:a5:c1:41:c2:12:81:e7:9f:
                    5b:7c:c9:6c:d3:9e:e3:a3:fe:2c:5a:e5:df:c2:82:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:E7:33:A5:65:78:B4:01:AC:34:ED:40:8A:89:B4:8E:1C:D0:6E
            X509v3 Authority Key Identifier:
                keyid:0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/6lbnM6VleLQBrDTtQIqJtI4c0G4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:e682::/31

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:ab:c0:6d:cd:2d:78:ed:8b:a4:ad:19:f3:2b:b1:b9:f6:
         79:46:d8:60:22:b5:27:35:b2:45:bf:f3:70:8e:d4:c9:32:78:
         94:e6:1d:36:e7:63:99:70:f2:97:d6:58:44:9d:bd:98:ed:7c:
         30:02:ce:5c:5a:c0:fa:d2:ce:f1:f7:3b:62:a5:32:42:27:d2:
         f4:3c:3e:8a:96:a1:97:f9:91:d6:7c:20:28:f0:2e:8c:bd:dd:
         ac:c6:cc:94:f2:38:7d:f1:26:73:4c:15:e7:3e:a7:fd:85:9b:
         57:a4:23:e0:23:64:01:92:70:ed:0d:61:44:eb:64:b9:2f:54:
         04:77:3c:15:d9:4f:7b:71:e9:a8:9c:b7:0a:21:0d:23:51:5b:
         4b:b9:e5:24:84:ef:18:9b:0a:00:bf:22:97:56:11:13:59:fb:
         9f:01:a9:42:f3:8d:e9:0b:10:a9:9e:56:c7:05:2a:8e:39:e1:
         25:9a:c7:f2:26:e4:9f:87:00:b9:98:7d:5d:fd:25:08:d6:c6:
         36:7f:e5:85:23:1d:b3:09:24:1d:f6:7b:4e:97:1a:6a:63:b8:
         be:1d:14:14:a4:d8:4d:d6:57:0b:da:c5:cc:f1:4b:a0:57:ae:
         30:10:66:1e:f5:90:03:d3:42:d9:4b:fa:4f:53:a7:87:80:2e:
         28:80:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----