Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/7Kw_RF5YHCfdNwAcwAXkf7B62sw.roa
File:                     7Kw_RF5YHCfdNwAcwAXkf7B62sw.roa (raw, json)
Hash identifier:          lYNUzfA6b/aETq2fKcBZGMQRlWQmRryPpK5tl6UKRag=
Subject key identifier:   EC:AC:3F:44:5E:58:1C:27:DD:37:00:1C:C0:05:E4:7F:B0:7A:DA:CC
Certificate issuer:       /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial:       0185723A05C6F3EDD52109D4274954E9567C
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/7Kw_RF5YHCfdNwAcwAXkf7B62sw.roa
Signing time:             Mon 02 Jan 2023 11:24:43 +0000
ROA not before:           Mon 02 Jan 2023 11:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        2a10:8802::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:05:c6:f3:ed:d5:21:09:d4:27:49:54:e9:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
        Validity
            Not Before: Jan  2 11:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecac3f445e581c27dd37001cc005e47fb07adacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:51:f9:7f:16:ba:f4:48:b0:71:d3:c0:ae:
                    c5:c7:77:85:64:8f:48:c6:22:9c:12:95:40:8b:cb:
                    04:9e:3f:d9:b6:e9:2a:f8:23:6f:3e:89:b5:0a:fd:
                    df:41:d1:bc:f4:ff:ac:6b:c8:88:0c:43:54:bf:1f:
                    4e:ee:03:6c:fc:08:27:c1:8f:1b:71:54:f1:b6:01:
                    66:15:5e:76:33:50:26:86:1c:4e:95:b4:71:57:c6:
                    5c:bb:55:87:fa:c2:16:b1:c8:f8:db:2a:a6:c4:0f:
                    cd:3d:20:cb:e8:81:77:7f:0d:56:78:8c:b2:24:9d:
                    fe:43:72:1a:f3:6d:ea:4f:e7:fa:96:07:f1:6a:14:
                    22:7f:9e:02:21:1a:37:36:46:55:df:ed:cf:43:e9:
                    99:40:14:d6:d3:54:ad:ae:6f:11:42:4b:7c:9f:0c:
                    ef:45:e3:f1:93:50:0d:67:10:90:a1:de:75:ca:1d:
                    94:02:e2:e6:88:3d:0e:e5:0d:de:7d:99:09:83:6a:
                    94:2f:5d:65:fa:cb:3f:6c:74:46:c3:4f:dd:a3:61:
                    c0:b3:ef:84:2a:c6:bc:4f:b2:cb:73:56:28:a0:9a:
                    5d:31:3e:02:5e:3d:48:23:14:be:60:4a:0d:d5:f5:
                    45:76:cb:91:8f:bb:2b:60:7f:9d:fe:d9:41:e8:86:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:3F:44:5E:58:1C:27:DD:37:00:1C:C0:05:E4:7F:B0:7A:DA:CC
            X509v3 Authority Key Identifier:
                keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/7Kw_RF5YHCfdNwAcwAXkf7B62sw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:8802::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:a8:d7:c5:7b:41:f0:23:17:ee:aa:42:0f:7f:c4:b5:8d:
         d0:e7:3f:ac:e0:08:69:77:38:e9:6f:79:92:17:f8:f6:7b:06:
         c7:ce:c6:6b:76:5f:aa:94:40:3c:07:14:e7:ba:b8:bf:14:bf:
         ec:08:d6:4f:8a:5f:3f:80:3d:1a:8e:85:66:ac:73:76:2b:7a:
         8a:51:cb:14:a4:c0:92:4e:dc:54:85:57:11:4c:d6:14:ca:ff:
         ba:12:5a:0b:7e:56:39:78:60:ea:d7:71:72:dc:b2:6c:f4:a3:
         6f:2f:cf:02:72:d6:f5:9c:07:cf:bd:ae:20:36:5d:e0:15:5c:
         3f:60:56:8e:06:ee:37:6c:59:8e:df:a7:26:b8:70:23:a3:65:
         ce:ab:e9:ba:4b:3a:04:63:32:58:2c:90:52:d0:a7:be:11:e1:
         d7:90:39:38:e9:32:de:5b:df:bd:48:5e:4f:a0:08:82:dc:3c:
         96:f9:c6:86:34:5c:d5:dc:9b:07:95:f6:fa:84:83:9b:05:eb:
         53:dc:7d:5d:eb:db:76:c8:1a:21:bc:7e:d7:4d:d2:4d:94:d5:
         c4:de:e0:f7:55:5b:88:3d:50:10:f8:7f:ce:fc:86:07:95:7b:
         5a:9e:5b:bc:0f:28:10:85:6f:79:00:0d:d7:0a:29:15:d4:f5:
         63:dd:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----