Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/6OVigsWUKAo6J6jURrE-ERzChQM.roa
File:                     6OVigsWUKAo6J6jURrE-ERzChQM.roa (raw, json)
Hash identifier:          f2XjRRQUenPmnpVbS9UXO8YyswPj5TVKwCqwZ3LjYaM=
Subject key identifier:   E8:E5:62:82:C5:94:28:0A:3A:27:A8:D4:46:B1:3E:11:1C:C2:85:03
Certificate issuer:       /CN=01d075a4e5137f879563c58997ca7576b4059ede
Certificate serial:       0186C095AF7547B9F2E32A07FBC1A6F664DE
Authority key identifier: 01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/6OVigsWUKAo6J6jURrE-ERzChQM.roa
Signing time:             Wed 08 Mar 2023 09:38:00 +0000
ROA not before:           Wed 08 Mar 2023 09:38:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3215
IP address blocks:        193.56.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c0:95:af:75:47:b9:f2:e3:2a:07:fb:c1:a6:f6:64:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d075a4e5137f879563c58997ca7576b4059ede
        Validity
            Not Before: Mar  8 09:38:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8e56282c594280a3a27a8d446b13e111cc28503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:12:02:2c:20:9e:79:75:0d:d1:1b:bc:8f:
                    27:34:73:34:d7:14:77:fc:2e:1a:b6:f0:4e:93:99:
                    5a:31:08:6b:eb:57:d5:74:c0:5c:c7:6b:fe:d6:50:
                    1e:f6:e8:72:a1:c5:c8:9a:9a:c9:16:bf:42:58:ec:
                    16:63:31:ee:42:0c:cc:9f:50:79:a7:56:d9:63:e3:
                    80:b0:62:d6:c9:7f:ef:3b:45:11:6e:20:68:f2:44:
                    bb:f3:44:6e:aa:14:68:dd:be:1e:6d:9b:69:0b:8b:
                    cd:44:6b:44:f3:cf:d6:6a:65:d9:64:80:da:de:dd:
                    19:de:6d:fb:c4:0c:fa:73:44:9a:8b:d2:47:5e:8b:
                    40:c1:87:1f:b2:bc:c6:ce:c6:3b:14:20:20:09:2c:
                    1b:ec:f8:99:8b:27:6c:83:96:93:74:d2:75:f6:5b:
                    9d:46:36:c5:2a:3a:83:1f:8c:94:82:f1:9c:ea:7d:
                    12:19:a6:23:48:0a:24:2e:76:a0:df:4a:bd:1b:4c:
                    56:ec:0d:4e:3a:9e:ff:e2:50:03:2e:91:0f:b5:6a:
                    13:5c:bf:2f:01:c3:fb:68:28:aa:06:1b:e7:f6:a7:
                    bb:0e:af:3a:91:56:39:08:b8:92:69:f4:65:29:58:
                    af:dc:a9:a9:32:7a:6a:ff:cb:1c:28:21:f2:ae:ef:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:62:82:C5:94:28:0A:3A:27:A8:D4:46:B1:3E:11:1C:C2:85:03
            X509v3 Authority Key Identifier:
                keyid:01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/6OVigsWUKAo6J6jURrE-ERzChQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:cc:c8:aa:e3:dd:d2:30:55:ab:e3:32:c5:91:94:ae:a2:
         a1:da:f2:af:fd:ab:69:3d:97:39:be:54:10:e6:2e:de:a7:3b:
         38:4c:ad:86:ff:05:2c:06:cf:94:b5:4a:88:c2:39:1e:ea:ea:
         62:6d:76:a9:4d:1b:5c:59:66:b9:60:2d:9e:73:80:23:27:93:
         e7:b1:e4:4f:0b:95:36:4e:f2:26:c0:80:37:fa:2e:57:2e:44:
         2c:76:77:26:af:ab:88:a8:70:aa:bb:1c:65:4e:0f:4e:18:bc:
         57:bd:69:cf:ab:17:09:9d:ee:77:b1:bf:37:7b:21:0d:78:8d:
         7e:26:3e:38:76:2b:39:d8:a0:7f:31:88:b7:ca:3c:c1:43:85:
         c5:8d:0a:8e:d9:63:ed:b2:b4:d7:90:b8:0f:00:d8:f4:6b:70:
         9a:ca:e1:ca:b0:c9:76:ad:4a:3e:51:72:83:ed:b4:60:22:f4:
         78:38:75:7d:d9:e7:64:16:5e:13:1a:c1:91:08:58:45:79:f6:
         26:b1:59:3f:4c:bc:ce:2d:02:0b:62:4b:80:9c:12:da:45:6c:
         1c:35:a5:23:f7:bf:67:f3:b8:5e:24:0d:6d:96:37:8c:69:3f:
         5b:4e:40:18:f4:09:ba:b3:ae:04:48:27:3d:5f:1a:65:0e:01:
         bd:46:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----