Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa
File:                     YdlTqVqUtTWHfYag_DQLtVsg0_M.roa (raw, json)
Hash identifier:          tp4EFoou/p48v15ltw9HS3slIuxK+g2aDIic2jgOyMQ=
Subject key identifier:   61:D9:53:A9:5A:94:B5:35:87:7D:86:A0:FC:34:0B:B5:5B:20:D3:F3
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4163657DC87AFBB2B94CA6141FC1ED
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa
Signing time:             Sun 01 Jan 2023 07:35:02 +0000
ROA not before:           Sun 01 Jan 2023 07:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141011
IP address blocks:        2a0c:e640:1010::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:63:65:7d:c8:7a:fb:b2:b9:4c:a6:14:1f:c1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61d953a95a94b535877d86a0fc340bb55b20d3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:dd:73:28:ed:df:b3:5e:bd:be:7a:01:8b:
                    f8:4d:ef:09:cc:70:04:95:fc:24:ca:00:f9:65:00:
                    ec:34:77:d7:a9:44:0e:84:57:5a:12:0e:5b:cf:83:
                    3d:ae:e0:43:3e:11:30:87:85:5f:98:e0:57:f6:24:
                    9d:23:34:1f:b4:ec:d6:19:98:77:1e:a3:e0:9f:6b:
                    cb:ab:3b:b2:81:fa:8a:ca:c8:2b:54:89:03:12:e0:
                    e8:2e:8c:4c:b0:2b:f8:25:c3:84:9c:51:d3:58:fd:
                    cc:ff:b4:f5:3a:3b:7a:d0:f2:54:06:2d:3f:85:79:
                    52:61:5d:e4:a6:c2:d7:98:ad:43:00:10:06:06:8a:
                    23:b0:ea:4c:82:90:b0:37:1c:09:1d:9c:d3:23:42:
                    56:83:a5:e3:35:48:66:51:dd:24:b7:37:61:d0:1b:
                    e0:de:b6:bc:50:1f:a8:8b:55:23:71:dd:ec:a4:b6:
                    2b:cc:b9:d6:75:de:f7:e4:c6:19:70:de:eb:5c:04:
                    5d:f4:98:33:33:b3:99:9d:7a:13:eb:ee:08:9d:4e:
                    aa:ab:17:25:84:2b:05:0c:11:42:50:59:ca:2f:cf:
                    71:1b:99:cc:e0:52:21:f9:e1:0f:63:61:84:38:c1:
                    a4:7f:1c:60:a6:03:85:ea:cb:80:94:fe:b3:ab:ef:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:53:A9:5A:94:B5:35:87:7D:86:A0:FC:34:0B:B5:5B:20:D3:F3
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YdlTqVqUtTWHfYag_DQLtVsg0_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e640:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:66:d2:1a:18:15:2d:8d:9b:16:50:62:1b:be:8f:3c:e0:cc:
         4c:8f:7b:b7:0c:73:b3:c0:63:93:9e:0d:b4:4d:76:f7:b5:99:
         13:00:1b:c8:a9:be:c4:41:07:40:a5:b7:c0:18:ba:3e:7e:34:
         c8:d6:c6:57:c4:ba:ed:d4:f1:77:60:78:c3:ba:f6:d1:c9:1c:
         b0:4c:f5:ad:86:e8:a7:18:22:de:fd:91:6c:28:d3:57:3e:9b:
         cd:94:b5:c9:4d:9e:66:e2:92:cd:ec:a0:d6:88:a8:c5:c6:7a:
         8f:37:79:75:f1:1a:2e:50:cb:3f:66:3a:83:81:bd:1a:8f:de:
         7f:0c:c5:3c:7c:1b:01:f0:cb:c7:ac:2c:2e:5e:a2:ce:ff:f4:
         43:ee:7e:c5:27:2c:56:be:be:9f:04:5e:9d:1a:d2:57:13:c9:
         8a:f3:6e:ae:49:73:35:9c:29:8e:8c:37:16:cf:7c:5f:e0:41:
         65:f9:4f:37:b9:01:74:34:5a:23:2a:f0:7f:4c:2e:f5:6c:01:
         a1:71:b8:82:14:f5:66:49:ab:48:7e:45:4e:be:5a:5d:73:41:
         04:01:0f:a9:7e:7e:8b:71:4a:73:ad:91:1e:44:69:df:36:ba:
         a7:05:d3:65:d9:2b:52:dd:83:3d:55:60:06:ff:92:d0:c1:cb:
         b6:30:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----