Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa
File:                     5nzHP__Ni0x8WPfu-LMkId2LddY.roa (raw, json)
Hash identifier:          ZBis7HJdUIYoGB4k+D4oxbeqh2ZE4kb6RNgxTsBy7qc=
Subject key identifier:   E6:7C:C7:3F:FF:CD:8B:4C:7C:58:F7:EE:F8:B3:24:21:DD:8B:75:D6
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0185DF596C59FDB61AA11C8B831B74849189
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa
Signing time:             Mon 23 Jan 2023 15:57:37 +0000
ROA not before:           Mon 23 Jan 2023 15:57:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44437
IP address blocks:        2a05:1080::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:59:6c:59:fd:b6:1a:a1:1c:8b:83:1b:74:84:91:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan 23 15:57:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e67cc73fffcd8b4c7c58f7eef8b32421dd8b75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:96:ca:d0:bf:88:ad:59:76:ff:b4:5d:24:
                    ef:ff:e2:ee:25:bb:14:a3:e7:1b:57:cd:99:de:8f:
                    43:cf:9f:9d:63:58:95:18:99:4d:46:22:42:26:40:
                    e7:e0:75:bc:e4:ec:5c:e6:13:59:e4:0a:ef:64:81:
                    ca:d8:63:8e:b1:91:a6:c8:7a:cc:fe:a8:63:20:da:
                    55:cb:1c:02:f6:9b:91:bf:ad:ee:36:0c:f8:0e:7e:
                    ef:6a:8b:70:9a:00:35:49:7a:9d:06:48:c0:da:12:
                    32:f4:1d:c1:6a:d9:69:4e:14:c9:a8:05:87:a1:67:
                    9b:e5:5a:c1:f5:e8:2c:fd:d1:92:62:a0:18:f9:c4:
                    1f:11:be:54:d9:d9:93:f4:de:ed:b6:2b:9d:c5:48:
                    12:dc:8b:9f:a1:57:a7:9a:b8:0e:1c:11:d5:9d:b3:
                    7c:f2:51:71:c5:b3:43:d9:21:57:2a:a6:61:9e:d5:
                    3d:9f:9e:6c:97:88:28:c4:82:af:ff:42:5e:58:6e:
                    fc:6f:07:99:f8:b6:24:9e:a7:64:48:41:1b:e2:9d:
                    bf:8a:9d:ec:81:38:f4:88:13:50:f1:ef:55:52:11:
                    d2:2b:9c:22:81:b4:d3:f7:2a:76:ed:1a:1c:b5:d3:
                    e9:69:44:1f:90:e1:34:59:9a:96:00:99:b6:78:24:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:C7:3F:FF:CD:8B:4C:7C:58:F7:EE:F8:B3:24:21:DD:8B:75:D6
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/5nzHP__Ni0x8WPfu-LMkId2LddY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:23:75:d0:23:00:34:4e:46:ba:5b:5b:06:0a:48:b8:a2:df:
         55:52:f1:69:c1:11:bb:ec:fe:7d:f4:8a:2f:25:f1:f0:8e:5d:
         09:98:c8:c3:ee:0b:7c:60:84:b7:f9:06:f9:65:84:6e:79:c2:
         ad:4b:99:b6:d8:4e:f5:97:56:b2:c4:ea:40:52:b8:1e:f0:db:
         ea:45:55:e5:87:e4:25:af:cb:c5:02:a5:5e:28:19:44:f9:df:
         b2:0c:18:ef:fe:c9:d9:74:bf:53:e5:83:aa:ca:39:9f:7b:07:
         34:55:5a:b3:e6:1a:b0:31:e1:f2:fe:ef:ae:19:dc:15:3f:93:
         cb:21:e7:92:04:8e:95:da:b0:3e:90:cf:6d:e8:6b:ef:18:3f:
         57:04:4e:e7:3a:45:64:e5:89:aa:83:be:52:d0:7a:6e:6a:8f:
         c7:65:14:7b:50:2e:78:1c:70:9d:82:e5:f2:45:07:e0:54:d6:
         c9:67:25:27:ec:c1:14:0d:b0:ec:1e:d5:8e:61:a1:25:1a:8c:
         cf:d8:f4:e0:33:ed:7d:d0:9c:6f:3e:67:47:85:aa:5a:9a:64:
         d4:a9:d1:57:51:cc:cd:bc:22:f2:d9:cd:8e:00:af:67:cc:f5:
         24:b3:02:c6:ff:a9:a9:10:2c:d1:94:10:ca:5c:70:38:10:e2:
         f4:db:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----