Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pfleBVesBiTlBme0setVGcCdPDE.roa
File:                     pfleBVesBiTlBme0setVGcCdPDE.roa (raw, json)
Hash identifier:          5LpI8i79vdP1MCQQ2pgk07tou/q0ZyGR5jEJAQziJ6g=
Subject key identifier:   A5:F9:5E:05:57:AC:06:24:E5:06:67:B4:B1:EB:55:19:C0:9D:3C:31
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01866A9E7F770271BAA3B55978590D55CBAB
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pfleBVesBiTlBme0setVGcCdPDE.roa
Signing time:             Sun 19 Feb 2023 17:00:17 +0000
ROA not before:           Sun 19 Feb 2023 17:00:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        2a11:a780::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6a:9e:7f:77:02:71:ba:a3:b5:59:78:59:0d:55:cb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Feb 19 17:00:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a5f95e0557ac0624e50667b4b1eb5519c09d3c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:53:d4:8c:0f:31:77:77:e2:1b:4f:f4:41:
                    1c:89:d9:4c:66:cd:bd:ef:43:c6:4e:47:b2:8e:76:
                    a3:4a:b8:3e:c1:ed:ab:97:1f:65:b3:15:d4:7a:f0:
                    2a:2b:dd:ba:cb:39:75:3a:03:d1:40:ef:72:d5:ba:
                    17:a6:12:90:26:16:d6:b5:b0:3e:06:da:67:d2:4a:
                    31:4a:94:95:96:21:cc:c6:b5:8f:b5:36:a8:27:9a:
                    e6:c0:99:48:ca:da:61:c1:a6:3f:d6:2e:71:69:c0:
                    f0:7a:ba:5d:76:79:aa:70:d4:b0:df:be:89:5b:92:
                    c1:09:65:3e:d2:c5:04:8c:9b:a5:1a:ca:91:c7:2c:
                    de:57:3f:6b:5c:fa:ee:c5:63:ed:bc:8b:31:e4:c3:
                    81:dd:c2:f0:59:6b:48:4b:9d:68:d3:ed:c0:d8:95:
                    43:2d:17:b8:26:9c:7b:cd:93:0a:22:d1:11:74:b7:
                    c2:a3:9e:f1:6f:f6:e1:02:0c:0e:5c:4a:18:20:dd:
                    85:3b:96:d6:1d:4e:31:cb:22:9f:45:d4:d7:9e:e2:
                    fb:aa:41:bb:dd:33:e4:c1:f9:2c:92:1b:9e:96:ff:
                    bc:2e:6a:d2:d2:a8:91:20:92:75:01:74:7f:6b:1d:
                    c0:d2:d4:69:51:30:29:46:23:1c:75:d4:58:64:17:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:5E:05:57:AC:06:24:E5:06:67:B4:B1:EB:55:19:C0:9D:3C:31
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/pfleBVesBiTlBme0setVGcCdPDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:a780::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:9c:3d:06:3a:fd:42:ba:4c:c6:d7:d7:5a:b5:49:9c:26:
         f5:bd:d1:42:7b:ca:21:a3:59:5c:1d:cf:a5:64:6e:76:5d:f7:
         9a:0e:be:91:51:2d:fc:5e:53:e2:1d:0c:39:f9:be:f5:ab:27:
         d8:54:ed:bf:35:ed:ab:56:5c:54:74:29:c0:a1:57:bc:48:f2:
         cb:e5:ab:3f:7b:0f:57:a2:69:67:cb:11:a0:f9:87:3b:b8:bb:
         9f:eb:ad:7b:f4:b5:41:0b:7b:2d:2b:87:e6:d5:97:bb:4d:7d:
         98:f1:11:ac:20:e0:2a:41:87:7f:0b:1c:c9:6f:90:f2:40:c5:
         b3:4c:50:f6:55:2e:c1:61:8c:82:8a:bc:93:bd:53:4d:d4:31:
         aa:c5:94:3b:f1:53:a0:d1:18:b1:dc:68:fa:37:e2:6c:60:e7:
         81:06:14:34:c2:6f:c6:c5:69:f7:1b:c9:57:63:66:30:76:18:
         90:bc:f2:4c:ff:74:ea:15:4f:67:99:01:8c:cb:3a:bb:9b:86:
         25:9d:ff:ba:f7:d4:d4:8e:0b:39:43:cd:d8:9a:19:16:ca:fc:
         bc:85:9f:68:46:4a:a2:1f:ca:88:52:dd:98:8a:cb:c2:85:b5:
         8b:60:af:c7:f6:db:e7:05:10:2e:e1:d5:56:a9:e7:2d:34:9b:
         1f:bb:06:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----