Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c0yLdhdi4AfHXS9seMJrCcBd_DI.roa
File:                     c0yLdhdi4AfHXS9seMJrCcBd_DI.roa (raw, json)
Hash identifier:          qlF0SDW2GQl3V2FI8u69AaxA9tXkW0IrD/regYIKe9s=
Subject key identifier:   73:4C:8B:76:17:62:E0:07:C7:5D:2F:6C:78:C2:6B:09:C0:5D:FC:32
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4160CF73B8B09EDEE39B44BECEC9CA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c0yLdhdi4AfHXS9seMJrCcBd_DI.roa
Signing time:             Sun 01 Jan 2023 07:35:01 +0000
ROA not before:           Sun 01 Jan 2023 07:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60326
IP address blocks:        2a0c:e642::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:60:cf:73:b8:b0:9e:de:e3:9b:44:be:ce:c9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=734c8b761762e007c75d2f6c78c26b09c05dfc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:75:8d:83:0c:8a:77:54:64:b3:b3:e4:40:
                    d9:17:f3:cb:2a:af:71:1f:7b:90:6d:8a:40:af:3b:
                    e9:17:7e:08:1f:a3:ff:61:01:53:27:d6:e5:16:46:
                    1a:61:c5:92:dd:e5:6e:bd:d2:29:fc:27:70:87:f9:
                    f6:ba:cd:74:f0:1a:9a:8f:2d:29:50:a9:23:c0:87:
                    bd:77:5d:0d:e3:49:04:d7:6f:c3:bb:6a:c6:0a:dd:
                    b6:58:76:20:18:a8:08:42:d3:9f:9a:d0:8a:0f:32:
                    20:ba:73:a6:00:15:77:19:d6:7c:3c:17:09:05:d2:
                    94:fe:9a:60:c5:0a:a3:6b:9f:bd:ce:d0:99:27:fb:
                    a9:87:ad:b1:51:00:16:e9:ca:4b:e7:55:85:94:e8:
                    1b:f6:2e:98:a6:41:d2:c4:cf:9d:f8:ca:10:0a:b5:
                    d1:f7:96:55:f8:5c:09:40:12:94:d7:84:60:b6:01:
                    f9:ad:ee:50:87:aa:75:ba:87:95:08:6c:15:4f:c8:
                    4a:b0:34:cb:db:96:c7:59:fb:2d:72:4b:19:23:8d:
                    f2:0e:f4:d7:6c:29:6a:7c:6e:47:96:5a:ec:0d:f1:
                    a7:9a:97:41:cb:8d:5a:c7:b6:2c:54:5e:d9:ec:bd:
                    01:ab:1e:90:19:72:ec:ff:54:54:40:73:82:84:1e:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:8B:76:17:62:E0:07:C7:5D:2F:6C:78:C2:6B:09:C0:5D:FC:32
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c0yLdhdi4AfHXS9seMJrCcBd_DI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e642::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:63:15:ab:c4:7b:5c:de:18:b1:32:36:9f:69:cd:4a:f6:fe:
         19:dc:b2:8c:f5:4b:a9:4e:96:4a:8b:32:bd:86:cf:ae:07:40:
         2d:5b:d0:fc:9d:05:3f:e2:2b:5e:1f:03:03:b7:ad:a9:17:c2:
         c4:f6:9c:5c:30:98:ae:1e:a4:cc:df:28:85:08:19:da:43:7f:
         94:ba:b5:b4:75:b7:25:e8:f7:10:1d:86:f4:02:c6:d8:9c:ea:
         dd:00:ee:49:c4:4c:73:29:f0:c7:8e:57:2f:08:1c:b6:31:07:
         f5:8b:4e:35:aa:af:68:6e:43:9a:e9:4a:d4:e5:d4:b4:eb:70:
         4f:ff:bb:63:1d:e3:b1:6a:2c:4f:f0:83:aa:6d:01:a9:b1:d3:
         ff:db:b9:e8:e8:51:50:60:92:dd:33:17:54:32:cd:08:90:d8:
         08:01:6f:fb:aa:d5:31:3c:82:e8:03:ce:2e:18:22:81:32:a0:
         b3:b4:ac:c5:e6:b9:95:17:2e:62:31:58:6e:6c:d7:c3:9a:ca:
         e2:47:37:35:9c:4a:dd:0c:d8:73:c1:34:94:6b:77:5a:8f:c4:
         b1:00:af:e1:6e:0a:69:09:bf:9c:cf:d1:0d:98:9e:5f:55:30:
         cf:f3:79:43:5e:65:17:66:3e:12:89:c7:37:45:cd:65:d2:79:
         43:ff:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----