Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tY6Z-JDzCe60onALXjSBElC1yAo.roa
File:                     tY6Z-JDzCe60onALXjSBElC1yAo.roa (raw, json)
Hash identifier:          ktr6rjN1f03rguz0UZiQi5auYlRLCCEY3+24L9XD9Kg=
Subject key identifier:   B5:8E:99:F8:90:F3:09:EE:B4:A2:70:0B:5E:34:81:12:50:B5:C8:0A
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C41618E3609BCE7E119B504ABA4FD6D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tY6Z-JDzCe60onALXjSBElC1yAo.roa
Signing time:             Sun 01 Jan 2023 07:35:02 +0000
ROA not before:           Sun 01 Jan 2023 07:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136918
IP address blocks:        2a05:1082:5::/48 maxlen: 48
                          2a05:1082:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:61:8e:36:09:bc:e7:e1:19:b5:04:ab:a4:fd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b58e99f890f309eeb4a2700b5e34811250b5c80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:37:88:80:a8:4b:c3:49:a1:7d:0c:f7:00:
                    21:a5:96:b1:7c:8b:d2:a5:99:f0:f4:eb:16:05:1c:
                    af:15:f3:2c:13:9c:ef:e1:b6:dd:49:3c:cd:bb:ec:
                    c1:41:58:ed:ba:71:40:fa:15:45:1c:aa:91:1b:17:
                    53:03:0f:ac:9f:45:02:61:b6:e9:ae:34:65:36:0a:
                    a6:1c:a2:e2:8d:3a:79:c7:ef:e6:02:28:75:96:b7:
                    bf:64:38:f2:7d:cd:01:f7:04:9f:0a:7f:8e:3b:c6:
                    6d:54:b5:54:9b:ef:d9:97:d6:20:de:41:92:4e:37:
                    2a:e1:4b:42:40:2f:0c:15:32:54:af:f1:a0:a1:ce:
                    8e:2a:86:73:9c:20:89:83:62:dc:af:d0:30:b4:4e:
                    7d:58:b3:28:38:17:bc:2d:ef:de:a9:09:31:23:9e:
                    84:67:8b:c2:3b:9c:00:b2:09:00:25:3b:0d:4a:14:
                    bf:92:66:8e:20:01:6c:ee:6f:16:4a:f4:5d:f1:26:
                    3c:d2:b1:e0:7b:43:d8:bb:20:9e:86:a5:87:29:d3:
                    18:55:0a:bf:d2:cf:73:6f:de:95:0c:51:b6:d0:cc:
                    7d:4d:35:39:3c:d5:0d:70:89:51:f3:a3:7c:21:6b:
                    0d:81:53:fe:97:9a:87:8f:40:43:63:e1:a7:f5:0e:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:99:F8:90:F3:09:EE:B4:A2:70:0B:5E:34:81:12:50:B5:C8:0A
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tY6Z-JDzCe60onALXjSBElC1yAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1082:1::/48
                  2a05:1082:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:ce:03:42:09:62:38:77:d2:2c:61:9e:26:7d:7e:0c:49:
         c2:02:7c:76:ec:d1:55:f0:fc:60:78:f7:c7:5c:62:c5:89:5b:
         9d:b1:c3:5b:79:1e:f2:d1:a1:de:95:25:ff:a9:92:cf:96:8f:
         a2:ef:dd:64:de:ec:82:8a:14:f7:ee:60:2f:e9:1f:95:72:77:
         d5:b0:3d:89:28:0e:48:dd:2f:04:7f:d1:68:97:85:5a:7a:a5:
         d6:bf:d5:e7:e7:88:3e:7d:69:f1:45:7b:3b:fc:27:c1:7b:d2:
         b2:1d:8d:a2:f4:c5:58:c1:8a:dd:19:65:71:d7:c2:42:88:0f:
         cb:c4:cc:d9:6e:49:36:dc:22:83:37:20:fa:3d:85:29:5c:ad:
         aa:2f:34:bf:b1:c4:d5:e4:b9:73:85:02:51:41:7e:6e:c4:31:
         0c:a4:d1:d7:8d:76:a3:69:d5:7d:1f:69:a8:63:f2:7c:4d:1e:
         e6:f2:82:30:33:b9:21:4e:22:1b:4f:0e:ee:24:7d:fc:10:27:
         0b:bb:74:7d:ac:00:a2:0e:a6:da:ad:09:ca:22:94:0a:4a:ed:
         ea:09:3f:1c:fe:92:6e:94:f5:47:ff:e4:4a:d4:ff:ce:eb:5e:
         80:95:6e:a2:b1:71:88:58:3c:02:ec:26:fc:97:c7:00:b3:8c:
         c9:4f:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----