Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6mII1me2QP02hv23pa4FbjlHwGM.roa
File:                     6mII1me2QP02hv23pa4FbjlHwGM.roa (raw, json)
Hash identifier:          wZMfjpx6sfFMULt16JTJTEC+AhyHEw8gH3z/4SRqUlw=
Subject key identifier:   EA:62:08:D6:67:B6:40:FD:36:86:FD:B7:A5:AE:05:6E:39:47:C0:63
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C31D082DDD36ED538788FB22DB7595
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6mII1me2QP02hv23pa4FbjlHwGM.roa
Signing time:             Mon 02 Jan 2023 09:14:50 +0000
ROA not before:           Mon 02 Jan 2023 09:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204909
IP address blocks:        2a06:e881:3700::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:1d:08:2d:dd:36:ed:53:87:88:fb:22:db:75:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea6208d667b640fd3686fdb7a5ae056e3947c063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:a1:02:ae:10:6c:8b:84:1b:f6:13:65:73:
                    37:51:1f:00:bf:20:69:01:40:c9:e3:7c:1e:8f:8e:
                    0d:62:32:2e:57:20:fd:e5:a2:05:31:05:56:35:e9:
                    b9:67:6b:79:46:fd:b8:56:4f:1f:1f:67:df:96:02:
                    07:92:92:17:7a:9b:46:c9:c2:f9:91:16:3d:66:37:
                    a4:02:ca:e1:a3:79:a2:f7:87:3a:bd:3c:4e:a3:2e:
                    31:53:93:39:6d:1f:02:5f:ba:b1:8a:ba:50:b9:ba:
                    43:8e:b2:bf:49:7c:76:0e:4b:28:06:5a:e5:b2:d9:
                    29:f9:28:b8:84:73:ac:a0:a5:af:04:93:ef:91:d0:
                    a2:76:ad:40:d6:bf:18:0e:13:3d:85:17:c1:f1:91:
                    08:a0:fd:2d:09:ff:4a:55:7d:9f:f0:af:e3:f4:ee:
                    b8:45:0b:e5:db:07:51:bf:c8:af:fb:b1:af:2b:d8:
                    69:1b:5a:9f:92:ad:8a:7d:c5:dc:b8:eb:a0:5f:99:
                    99:bd:09:12:4c:b5:76:c1:d1:f4:e6:8e:ef:1f:a3:
                    92:99:9a:de:51:d3:53:c4:8f:34:84:fb:6d:d1:0c:
                    29:d1:58:b5:d5:a3:bc:43:85:bc:54:3c:48:b0:9c:
                    8c:57:97:12:10:e3:02:3a:4d:d7:a1:39:b7:6a:9e:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:08:D6:67:B6:40:FD:36:86:FD:B7:A5:AE:05:6E:39:47:C0:63
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/6mII1me2QP02hv23pa4FbjlHwGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:3700::/44

    Signature Algorithm: sha256WithRSAEncryption
         d4:aa:4b:29:fd:38:f6:ad:18:31:ed:8e:da:42:db:9b:45:d0:
         0a:d3:7b:a9:82:bb:cc:48:58:2c:86:07:28:a1:4a:ab:f6:54:
         f6:12:37:6d:aa:a0:17:54:26:68:75:0f:b0:36:dd:91:cf:98:
         b8:cb:9a:91:52:36:a7:d6:6b:a6:63:3e:4b:e6:f9:8a:3d:89:
         37:55:82:fc:11:8a:02:e6:55:51:60:4a:d7:99:82:66:69:2b:
         0f:34:08:3d:34:08:7c:15:ef:55:a9:cb:ac:5b:2c:6d:f7:da:
         53:9b:cd:02:5b:86:fa:a8:d0:fd:1d:54:47:b9:63:fa:11:14:
         d9:b4:26:89:d2:28:6e:7c:62:79:38:30:0a:56:3c:2b:ce:ff:
         20:27:82:2b:3a:db:5a:7f:de:11:77:1c:f5:40:0c:c8:20:d9:
         7e:33:b9:14:f0:8b:92:15:91:e1:8b:61:ea:5a:77:bb:8e:af:
         2b:9c:33:c1:85:44:5d:d0:6f:01:de:39:0f:a7:5b:59:cc:2b:
         c8:15:d3:a5:69:20:36:36:2c:92:da:83:60:04:82:12:91:d7:
         a0:87:77:93:a4:c8:73:d4:85:3c:8e:37:e8:77:32:64:e2:ca:
         2c:5d:42:19:26:29:89:2a:35:70:24:ad:7c:08:47:a6:d7:af:
         86:a1:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----