Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/4SJJpoCUWxrW8Duz0-Nm7ZuYENU.roa
File:                     4SJJpoCUWxrW8Duz0-Nm7ZuYENU.roa (raw, json)
Hash identifier:          LrP4B4HjQnFL1ANAYbPP8w8MnxtNJ/4Gg98212wWWDI=
Subject key identifier:   E1:22:49:A6:80:94:5B:1A:D6:F0:3B:B3:D3:E3:66:ED:9B:98:10:D5
Certificate issuer:       /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial:       01856BF7E4B0B7ECB5436787E79DFDBBBAF1
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/4SJJpoCUWxrW8Duz0-Nm7ZuYENU.roa
Signing time:             Sun 01 Jan 2023 06:14:46 +0000
ROA not before:           Sun 01 Jan 2023 06:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50994
IP address blocks:        2a02:4a40:108::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:f7:e4:b0:b7:ec:b5:43:67:87:e7:9d:fd:bb:ba:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
        Validity
            Not Before: Jan  1 06:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e12249a680945b1ad6f03bb3d3e366ed9b9810d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:dd:65:5e:81:4a:01:cb:46:97:2a:50:4f:
                    f7:90:54:4a:04:33:22:ae:ce:7e:fe:df:58:d4:1a:
                    90:8a:17:c7:c1:ba:2b:c3:8f:3b:e5:d7:3d:8f:26:
                    6a:e0:2a:03:1d:c7:08:ff:be:6f:a1:f5:51:1d:fc:
                    a3:01:71:82:6e:ef:d7:d3:54:f0:95:2a:f5:40:62:
                    4e:73:e1:01:a5:9b:65:82:2d:00:f6:ad:23:81:40:
                    88:bf:22:48:c8:ed:92:dc:d0:42:26:11:cf:88:d2:
                    ed:d2:c2:5a:33:49:7a:dd:49:26:39:4c:7b:76:03:
                    9a:fa:d4:8a:06:e4:88:9f:6f:0d:3f:11:2b:e5:cc:
                    52:2b:7c:40:28:31:ff:1b:94:dd:d8:c5:36:fb:a6:
                    1a:a8:88:c7:ef:5a:6a:6b:ae:89:b5:df:d9:7f:f7:
                    ae:2b:8d:78:4e:a1:28:5f:e1:ef:b0:21:b7:2e:e2:
                    90:33:07:47:d0:68:3a:07:ae:a2:26:f3:0d:24:4a:
                    a5:5a:74:02:f5:62:49:27:d7:eb:8f:16:ac:72:a4:
                    87:8e:9d:b0:e6:3d:e0:54:eb:58:1d:19:e0:b7:1b:
                    59:3e:a6:8b:a6:95:a2:1f:0c:ff:42:52:ff:da:03:
                    fe:38:fa:e1:fa:1c:42:94:d7:46:32:79:39:17:14:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:49:A6:80:94:5B:1A:D6:F0:3B:B3:D3:E3:66:ED:9B:98:10:D5
            X509v3 Authority Key Identifier:
                keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/4SJJpoCUWxrW8Duz0-Nm7ZuYENU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:4a40:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:36:7c:86:59:91:80:6c:34:a0:cf:eb:95:c7:70:4f:0b:1e:
         4b:1a:88:c4:ba:a7:1d:76:6e:94:3c:cb:7b:96:0d:a5:93:4f:
         3f:2e:45:b2:38:9d:63:ed:dd:2b:6d:99:cd:a1:14:43:ff:df:
         b7:f0:64:dc:e1:25:b2:55:ce:0e:5c:22:54:90:f9:00:8e:6d:
         07:17:0f:8a:c1:4d:d3:f2:0c:09:4d:6d:9f:9b:d0:51:2f:5b:
         26:7e:5e:f3:cd:e1:ea:3e:b2:7f:34:b0:21:0a:96:c9:9a:06:
         51:59:b5:8f:df:3c:f6:f5:09:4d:f5:5b:9e:43:19:22:9b:82:
         08:61:b1:e7:54:f2:19:3f:f0:c0:ff:fa:5f:1b:ff:23:70:9f:
         03:ed:12:1f:45:ac:c3:38:42:ee:3e:e9:62:8b:83:e3:e4:85:
         97:7e:43:7e:0e:b6:33:93:be:52:25:6c:42:04:36:03:b2:98:
         1e:db:f6:66:7d:e8:82:47:5e:82:a6:ea:8a:0f:4d:69:97:9b:
         a9:c0:8d:23:52:95:3f:a9:65:4a:91:85:a1:e2:3a:14:0a:b4:
         3a:96:71:ae:28:e1:d5:70:a3:aa:37:7d:56:d1:a9:4c:49:89:
         1c:47:26:17:ea:46:cb:77:61:e3:b7:12:c8:f2:98:82:aa:3c:
         10:fe:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----