Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa
File:                     1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa (raw, json)
Hash identifier:          1Sr85N+7wtVPa1smdlYIBhs6vBAFwaaKHg0b8zwkRYw=
Subject key identifier:   FA:1C:71:3F:8A:01:8B:C4:AC:11:87:2D:A4:18:1F:1D:07:5F:D8:95
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       0185719553D811206BA00EF26ABF4187A5AE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa
Signing time:             Mon 02 Jan 2023 08:24:49 +0000
ROA not before:           Mon 02 Jan 2023 08:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207459
IP address blocks:        2a10:9f80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:53:d8:11:20:6b:a0:0e:f2:6a:bf:41:87:a5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jan  2 08:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa1c713f8a018bc4ac11872da4181f1d075fd895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:7e:27:6e:9a:ea:c9:80:42:c0:1a:c5:e6:
                    0b:db:2a:4d:5f:97:b8:54:20:8d:c2:83:e4:bd:21:
                    39:d7:63:e7:78:c2:47:1f:9d:ac:37:61:38:7b:12:
                    be:bf:ff:fe:78:4c:33:d5:45:1f:e2:87:46:9a:40:
                    75:cb:c1:eb:23:6d:64:2f:cf:87:7e:85:fc:ca:fc:
                    d2:ae:16:9b:59:ae:74:1b:ed:9d:09:e4:95:1a:cb:
                    bd:02:0a:be:47:73:17:37:ef:2d:37:f4:62:7e:ab:
                    9e:54:0e:b3:37:15:df:20:4b:2b:01:0d:28:c6:eb:
                    a2:f5:f1:55:3f:b0:ec:6f:88:4b:9f:f6:c5:dd:89:
                    4c:38:2f:fc:f8:79:8c:67:8f:78:e2:56:3a:ce:34:
                    8d:01:5c:e4:08:6f:09:3a:bc:2d:cc:f5:99:3d:b7:
                    82:17:10:4f:e6:74:00:0f:23:fb:37:06:3c:e1:40:
                    92:e0:46:19:99:ce:fe:c8:52:8f:88:b3:a5:f4:51:
                    12:eb:15:88:de:e1:ba:c9:61:11:f5:65:f5:e0:de:
                    72:5a:29:94:e1:64:c4:28:12:a8:17:49:5b:30:4e:
                    e6:84:ef:d1:46:a9:55:dd:c7:10:ba:c9:3a:9a:64:
                    eb:9c:d6:39:58:7f:ce:74:68:ab:f6:03:9a:72:ed:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1C:71:3F:8A:01:8B:C4:AC:11:87:2D:A4:18:1F:1D:07:5F:D8:95
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/1-hxxP4oBi8SsEYctpBgfHQdf2JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:b4:5d:70:aa:d5:f5:b8:6d:dc:07:b3:90:84:20:60:42:8f:
         31:49:81:db:6e:45:ba:00:fb:26:22:8f:4b:f7:d6:bb:57:7a:
         11:30:2c:6c:40:47:9a:da:1a:91:42:03:f9:de:9d:26:30:ec:
         7a:f1:c6:6d:c0:7c:c8:db:53:c8:77:4d:e4:60:b2:b9:18:7b:
         8f:a6:aa:fb:68:21:a5:ad:f9:07:9d:34:51:7f:06:6e:81:07:
         2c:53:16:37:11:79:6e:3e:c3:d0:03:7b:0c:ca:6b:74:f3:19:
         7a:a4:ea:dd:1d:47:36:26:9f:f4:10:90:4c:e1:83:40:47:3d:
         5f:74:cc:1f:03:d0:c3:89:25:0f:b6:43:dc:29:0c:e4:68:ce:
         c2:01:70:9c:b7:51:17:d2:1d:19:2e:0b:da:0c:2c:04:15:98:
         67:4e:fa:55:55:a6:4a:38:c8:ea:dd:5d:67:f3:9a:91:0f:42:
         1d:44:be:17:d1:95:78:64:3e:92:89:f6:7b:8d:c7:c4:06:11:
         b6:52:25:e6:95:0b:2a:69:9b:75:2e:69:a8:3b:ae:a0:35:18:
         23:8b:10:ea:6c:b1:3e:6d:11:97:77:9d:df:a3:0d:e4:a6:0b:
         49:50:39:ac:9d:8f:6d:77:94:78:2c:74:6c:4c:42:f2:62:4a:
         fa:11:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----