Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa
File:                     p_v5sN-EJLBTn9dr_EfREJc6C5s.roa (raw, json)
Hash identifier:          eaJeQAntW8PC/PwPQwGrR1TciuwOoamiC2PX3fxmFFg=
Subject key identifier:   A7:FB:F9:B0:DF:84:24:B0:53:9F:D7:6B:FC:47:D1:10:97:3A:0B:9B
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       01856CEF1F55B85FD01380D57DDF288D6B28
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa
Signing time:             Sun 01 Jan 2023 10:44:48 +0000
ROA not before:           Sun 01 Jan 2023 10:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57602
IP address blocks:        2001:67c:240c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ef:1f:55:b8:5f:d0:13:80:d5:7d:df:28:8d:6b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: Jan  1 10:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7fbf9b0df8424b0539fd76bfc47d110973a0b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3b:17:19:95:5f:7f:e3:82:3d:5c:81:7a:1b:
                    9f:9e:32:39:64:97:bf:ce:47:52:8e:a3:6a:79:fa:
                    f6:52:24:ec:a5:2a:fd:9b:b3:eb:ae:95:9b:a2:94:
                    6f:3a:c8:e0:b9:de:a7:01:d5:0e:d4:f2:26:d2:43:
                    ab:df:88:7f:3c:df:26:32:63:d8:a5:01:91:69:6a:
                    82:ee:f8:74:e8:7c:60:c8:e8:f1:61:aa:6a:d8:b9:
                    8d:6f:bd:b3:c2:c5:2b:fc:98:9a:0f:fb:18:58:64:
                    2e:2b:75:a1:15:32:2c:c4:d7:a2:53:cd:98:f5:70:
                    de:45:e3:e6:40:41:65:a1:1b:09:f6:e9:85:16:ab:
                    de:49:e8:a4:ab:16:bc:e3:20:7d:4e:eb:86:e3:da:
                    f8:75:42:19:da:a6:48:05:02:8f:16:6e:87:33:eb:
                    05:34:ad:8e:62:67:87:ba:74:f2:18:8d:a3:4f:76:
                    12:3a:0d:83:29:e3:6c:37:b5:47:4e:d4:e2:2c:02:
                    dd:ad:52:2b:8e:e0:8a:e7:97:01:5b:52:23:1b:ba:
                    ae:d1:78:e8:ea:e1:d2:77:59:85:ab:aa:f5:4e:7d:
                    33:e0:da:69:4d:92:e5:44:07:55:d7:fe:14:47:4e:
                    11:32:3e:6e:8b:d2:d6:fc:2f:b2:50:d9:67:b4:57:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:F9:B0:DF:84:24:B0:53:9F:D7:6B:FC:47:D1:10:97:3A:0B:9B
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/p_v5sN-EJLBTn9dr_EfREJc6C5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:240c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:c7:24:1f:15:85:85:96:49:85:e3:8c:9c:b1:ce:34:20:57:
         53:c6:cd:08:74:c9:0b:9b:27:b5:b5:a6:06:a1:45:05:8a:24:
         75:bc:7b:71:fc:09:7b:3a:9b:25:cb:3a:05:15:38:af:42:d1:
         24:36:17:61:f5:37:9d:42:f8:b4:f4:e0:b6:94:31:51:84:79:
         01:a3:4c:1a:14:cb:7b:d4:22:9d:a6:7e:0b:4c:d5:d7:90:ca:
         7b:6f:fb:57:d6:6c:c8:d0:3c:e4:53:91:4b:4e:0c:01:1f:ff:
         a7:b2:cb:9b:12:91:ea:5e:e8:fc:3e:6a:b9:b6:b3:99:d4:ae:
         c2:d1:fc:6d:4f:1e:fc:cb:5d:e1:a4:c1:3a:a6:8d:92:5d:a8:
         3b:ad:2b:63:22:74:3d:98:c4:f8:34:1b:10:27:4d:a3:d3:65:
         ff:05:cf:d6:8e:74:26:3e:af:e2:a5:c7:f6:34:20:df:fd:ad:
         c8:49:09:f3:8e:22:ba:bc:dd:80:53:a6:ff:e4:a0:75:72:2a:
         40:af:76:e9:2c:29:06:b6:c2:5e:d4:83:bf:b9:29:7b:08:c1:
         5c:eb:2b:62:ac:04:1d:8f:ff:b7:2b:c2:22:0a:13:a3:1c:c4:
         14:2f:d7:13:a5:56:a3:62:7c:6f:76:3f:dd:2a:ac:23:5d:f8:
         fd:58:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----