Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/DnBVbKPbQs0SPQFMavia1qcP4eA.roa
File:                     DnBVbKPbQs0SPQFMavia1qcP4eA.roa (raw, json)
Hash identifier:          hgJk5Hjj2Rpsipr83hf+9faYTdjIylYjLj46u0/jQ5k=
Subject key identifier:   0E:70:55:6C:A3:DB:42:CD:12:3D:01:4C:6A:F8:9A:D6:A7:0F:E1:E0
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       01856FF01CED3E916E3D96C9FC5A92FB7682
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/DnBVbKPbQs0SPQFMavia1qcP4eA.roa
Signing time:             Mon 02 Jan 2023 00:44:45 +0000
ROA not before:           Mon 02 Jan 2023 00:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208886
IP address blocks:        2a09:b280:beef::/48 maxlen: 48
                          2a09:b280:cccf::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:1c:ed:3e:91:6e:3d:96:c9:fc:5a:92:fb:76:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: Jan  2 00:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e70556ca3db42cd123d014c6af89ad6a70fe1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:43:ea:52:a8:44:ae:18:58:12:41:06:10:
                    28:6c:be:c5:b6:b6:27:54:de:b7:ed:fa:2c:07:ac:
                    e7:8d:24:1f:58:7d:fc:f1:8f:75:fa:5b:aa:51:13:
                    6a:fa:59:b5:4a:f3:88:32:bb:f4:20:cb:f2:7f:85:
                    05:51:b3:df:29:f1:75:f0:79:df:7b:51:4a:ab:01:
                    2e:e9:77:fd:a7:fe:90:5f:a2:4d:72:b9:8b:b8:82:
                    a4:ae:56:68:69:c4:91:c8:08:17:8e:af:ae:38:41:
                    19:9e:e1:bc:32:10:76:ee:52:82:df:72:2c:7b:f9:
                    2a:87:de:49:0e:4d:db:3c:ea:64:66:22:df:d1:4b:
                    65:e6:d7:1c:70:d6:9a:fc:86:49:3c:7a:79:62:d8:
                    de:5d:e9:b7:c0:19:85:23:2b:d8:57:f3:75:81:82:
                    86:2c:08:1a:ec:d1:83:44:f4:24:e3:45:5f:14:0c:
                    5b:7f:5a:97:c0:76:5a:20:a5:6e:4a:9b:d6:09:69:
                    01:32:c0:16:b3:cb:43:6e:ae:3f:2b:d8:fa:53:56:
                    a6:45:c1:fa:fe:7e:b8:35:06:70:19:46:50:2d:66:
                    28:1f:29:1d:2e:90:94:c2:c2:d3:2f:d0:13:59:77:
                    a7:4b:d9:4f:04:93:93:89:99:9b:29:52:5b:8c:f3:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:55:6C:A3:DB:42:CD:12:3D:01:4C:6A:F8:9A:D6:A7:0F:E1:E0
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/DnBVbKPbQs0SPQFMavia1qcP4eA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:b280:beef::/48
                  2a09:b280:cccf::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:c3:26:a3:0c:8f:82:67:ab:73:f1:20:7e:83:bd:77:b3:
         83:7c:ae:69:89:85:24:d5:3d:eb:27:3d:85:ac:40:f8:16:f2:
         5e:0d:6b:28:ca:1c:f7:bd:49:59:4d:0a:56:c8:20:37:1e:74:
         26:01:57:c8:ad:8a:fe:fa:cc:d9:a7:c8:84:97:24:cf:46:f4:
         a7:54:32:f0:26:79:a6:fb:d5:fa:cd:b4:1c:49:80:ee:f0:8a:
         fd:a4:89:fc:a6:37:27:2f:ab:4d:85:45:e6:af:ec:96:05:a0:
         30:6e:8f:e7:93:c6:fc:ba:f3:7e:02:19:7d:e0:6a:d5:cb:64:
         9f:6b:b0:90:b9:8b:d5:72:51:0f:ec:03:3b:79:8c:50:49:e0:
         92:02:92:93:15:62:3e:dc:90:ac:1a:39:42:f3:51:73:a5:32:
         c2:a4:5e:d3:e0:bf:d6:70:af:5d:22:01:eb:ab:04:18:de:67:
         83:f3:ab:13:b6:a3:46:93:26:41:ba:e0:9a:f4:a9:50:27:85:
         a5:d0:e9:00:6a:e7:db:db:0f:42:84:af:10:06:e9:f3:b9:a4:
         38:7b:af:b4:16:db:a0:c1:e4:db:6e:05:53:d8:09:99:d5:54:
         c7:a6:83:ad:b7:19:d3:ac:0d:0c:5e:0f:7f:e3:2a:3a:47:03:
         99:0c:22:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----