Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2mRQnWxoANyi6QoQ6ygmhCd_Y0Y.roa
File:                     2mRQnWxoANyi6QoQ6ygmhCd_Y0Y.roa (raw, json)
Hash identifier:          1oqorOsgkKWcPDIrY+YWVXU7JgvPh/XQZBrReDuOzU4=
Subject key identifier:   DA:64:50:9D:6C:68:00:DC:A2:E9:0A:10:EB:28:26:84:27:7F:63:46
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C41630BB1253809A6CB3CD0B3D9A708
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2mRQnWxoANyi6QoQ6ygmhCd_Y0Y.roa
Signing time:             Sun 01 Jan 2023 07:35:02 +0000
ROA not before:           Sun 01 Jan 2023 07:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139328
IP address blocks:        2a0d:2587:8500::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:63:0b:b1:25:38:09:a6:cb:3c:d0:b3:d9:a7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=da64509d6c6800dca2e90a10eb282684277f6346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:c4:77:cd:c5:0b:47:fe:6e:13:4c:83:3f:
                    47:e1:81:1e:b4:53:1a:1d:e5:ad:ec:7e:8c:b6:ad:
                    3e:20:f1:b0:72:02:cf:ed:51:0c:72:95:39:8f:92:
                    4f:69:d7:fc:a2:29:81:5e:2e:bf:fb:33:c7:b3:7d:
                    0e:48:3c:f6:f0:ff:40:95:4c:83:04:05:77:e1:01:
                    21:e1:23:82:75:b4:88:8d:ac:72:6c:ca:c0:cb:e7:
                    7b:79:58:bb:7f:e5:8e:12:99:9e:c2:b6:3b:f7:6f:
                    95:ea:c5:8d:a9:14:f9:90:ac:32:50:db:8c:61:a8:
                    3f:06:ac:d1:35:15:3c:dd:4c:4d:23:b5:38:ae:cb:
                    ad:88:f5:df:32:cd:e7:99:ce:cd:1c:ae:7b:81:7d:
                    7d:5e:1a:c9:95:ee:19:5c:dc:5e:d5:e4:8b:a1:0a:
                    8c:1d:9f:85:94:eb:69:18:bb:31:93:7f:3b:1f:ea:
                    86:d5:99:bc:c7:a7:64:6c:bc:36:33:4b:81:65:ca:
                    ae:6b:7b:20:85:55:45:bb:06:63:43:a5:cf:a5:ac:
                    c7:15:01:2f:32:1c:1e:ee:98:9d:59:ec:11:31:1b:
                    4f:18:14:05:c1:1a:17:28:5a:de:0b:fd:42:e2:38:
                    64:94:c3:70:11:44:c4:69:9b:42:5d:de:37:8c:8a:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:50:9D:6C:68:00:DC:A2:E9:0A:10:EB:28:26:84:27:7F:63:46
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2mRQnWxoANyi6QoQ6ygmhCd_Y0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2587:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:0b:ce:03:c1:06:e6:90:37:0e:da:b4:47:34:03:35:82:
         06:cd:0a:76:f5:86:7b:f9:6e:fc:f7:e3:03:83:80:13:6f:09:
         71:af:b8:3a:2e:9d:10:7f:79:20:c9:d8:17:ff:26:96:5f:82:
         c2:14:6a:fd:45:75:0a:b1:7a:51:8c:f0:00:42:58:e7:7b:2c:
         34:b6:c1:18:71:4f:bc:43:d5:a8:2a:68:5a:c5:64:c4:b2:61:
         35:c2:61:11:7c:a5:32:6f:5f:ec:84:3d:a1:93:f9:18:a9:13:
         24:b7:36:8d:2d:ce:7a:d6:f3:5c:bb:60:2a:d4:f0:31:de:82:
         91:45:d3:12:16:b5:06:1a:f8:d5:42:e7:bb:82:fb:17:6c:40:
         41:31:b5:65:f9:dc:6d:d6:02:d0:ec:87:67:dd:0b:59:03:71:
         6a:5f:8f:e2:c9:10:73:f8:90:ea:a2:a8:79:d5:9e:6a:34:1c:
         e3:70:bf:9d:5c:66:52:01:b9:10:37:de:f2:60:63:6a:d9:cc:
         e9:ca:fe:2d:f3:ef:27:f3:63:2e:86:8b:41:0d:a2:d3:4a:de:
         4e:0f:20:21:e7:3a:6b:15:7b:ee:79:b7:24:a1:57:ab:54:0a:
         ae:94:d9:53:e2:de:38:22:0e:06:39:7d:1c:7a:10:81:c3:05:
         3c:ef:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----