Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mK5Qmateugze_qheDYt18UosnSM.roa
File:                     mK5Qmateugze_qheDYt18UosnSM.roa (raw, json)
Hash identifier:          FY6gBzOj+uiB3mNE6jL/90QP/metyZ2LGhAX0tfTnd8=
Subject key identifier:   98:AE:50:99:AB:5E:BA:0C:DE:FE:A8:5E:0D:8B:75:F1:4A:2C:9D:23
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C4168624741984C3A3B7EEB7E7BF8A3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mK5Qmateugze_qheDYt18UosnSM.roa
Signing time:             Sun 01 Jan 2023 07:35:03 +0000
ROA not before:           Sun 01 Jan 2023 07:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     148971
IP address blocks:        2a0d:2583::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:68:62:47:41:98:4c:3a:3b:7e:eb:7e:7b:f8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98ae5099ab5eba0cdefea85e0d8b75f14a2c9d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:27:41:6a:8f:42:d5:59:43:25:01:72:94:
                    19:b8:c6:d6:81:89:85:2b:71:b0:42:41:c1:a5:fb:
                    f7:78:83:c6:f6:75:c4:28:f4:44:4f:96:0e:24:13:
                    d2:24:bb:06:58:79:c0:54:e8:a7:c4:64:e4:9c:dc:
                    43:39:3a:74:87:2f:68:f0:e4:09:83:92:58:b1:4b:
                    cb:11:4e:af:0c:ec:29:dc:72:27:d4:7f:86:c8:17:
                    a8:4c:d8:25:52:7b:71:e6:e8:f6:7d:86:7c:15:3f:
                    28:28:f4:60:6c:ad:9c:72:ca:a4:d9:74:73:77:6f:
                    e2:6a:dc:5d:11:3d:a8:3a:e8:05:8d:6c:9c:34:93:
                    71:ec:88:dd:7b:f9:43:19:9c:53:4a:7e:cf:07:71:
                    aa:8e:28:2b:77:aa:ea:40:c4:54:68:75:0e:6e:17:
                    57:4c:24:0b:7c:3d:23:62:66:ac:f2:d4:98:53:e0:
                    24:d8:9b:ab:a9:e4:b5:2f:26:f7:a7:31:e3:bd:76:
                    30:85:6a:e8:40:ee:d8:6d:49:ec:71:a8:40:83:c3:
                    92:24:a1:ca:a2:88:75:1b:98:2d:0b:ed:f9:90:89:
                    7e:82:36:16:d1:56:15:ff:57:59:45:7d:0e:38:73:
                    3c:09:17:4a:95:eb:63:fd:cb:cd:22:a3:6a:10:5f:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:50:99:AB:5E:BA:0C:DE:FE:A8:5E:0D:8B:75:F1:4A:2C:9D:23
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/mK5Qmateugze_qheDYt18UosnSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2583::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:12:7d:19:b3:36:74:0b:ee:e5:89:c1:ec:4f:3d:30:cb:72:
         55:5a:a6:51:82:ed:c8:72:72:7f:9b:de:48:30:38:f6:49:c1:
         35:34:f7:fa:89:0f:fb:c4:7a:69:e0:ee:bd:94:7b:90:17:53:
         2d:4b:a6:d1:56:d7:cf:d2:1f:96:3c:14:ba:34:1a:c5:78:1c:
         30:41:27:7d:38:1c:d0:38:22:a4:b4:03:45:ce:62:a3:0b:6b:
         02:68:fe:87:1c:4a:fb:09:7e:85:84:bb:46:f2:10:bc:62:81:
         31:0e:a8:49:1a:8c:ae:1f:f0:8a:b5:65:76:17:c4:84:35:eb:
         0b:0a:b5:23:ba:2f:12:7d:e8:67:6c:ec:e5:f3:31:fc:d7:1e:
         e1:f3:4e:a4:99:92:56:e5:84:09:62:2f:90:1c:4d:1a:ba:f5:
         12:84:6a:85:45:c1:e8:89:44:5e:88:ac:86:4b:c6:03:a2:10:
         8f:8a:cd:17:bf:f4:1d:a9:f9:11:f3:f7:95:92:b2:de:a1:26:
         d2:9a:da:76:43:e1:75:17:9e:d0:c7:81:78:da:75:9f:96:1a:
         9d:a3:b6:e0:e9:88:ea:01:49:57:6c:49:9c:84:02:87:1a:35:
         41:e9:1b:e9:8f:de:e4:3d:61:5b:53:1d:67:b2:fa:ee:50:0e:
         84:88:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----