Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/pWLbl9NnvkAnT7pqyJ4FVz6DTV0.roa
File:                     pWLbl9NnvkAnT7pqyJ4FVz6DTV0.roa (raw, json)
Hash identifier:          ZLqqKkvVkq93c9kpXrvQbkrkxv6ApTPN8yQGr+CA1pc=
Subject key identifier:   A5:62:DB:97:D3:67:BE:40:27:4F:BA:6A:C8:9E:05:57:3E:83:4D:5D
Certificate issuer:       /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial:       018B8F5E7C3861C83C6D39968F6980F86E4D
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/pWLbl9NnvkAnT7pqyJ4FVz6DTV0.roa
Signing time:             Thu 02 Nov 2023 09:30:15 +0000
ROA not before:           Thu 02 Nov 2023 09:30:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        2a10:8804::/36 maxlen: 36
                          2a10:8802::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:5e:7c:38:61:c8:3c:6d:39:96:8f:69:80:f8:6e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
        Validity
            Not Before: Nov  2 09:30:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a562db97d367be40274fba6ac89e05573e834d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:1a:b6:e0:08:0b:cd:eb:e0:6f:60:0a:53:
                    7e:10:3d:cf:37:bd:4f:ba:e2:22:0a:e0:53:d1:a4:
                    07:26:d8:d9:d5:53:a5:6a:c0:6d:be:ed:36:53:45:
                    6d:93:45:ed:bc:68:c5:76:80:bc:b8:9b:ee:b3:42:
                    ad:b5:72:d9:18:64:3f:3f:02:0d:3d:cf:66:22:7e:
                    54:1d:1e:1f:e3:fa:03:14:d5:77:8e:5b:30:05:a4:
                    97:66:c9:66:c0:d2:fb:e8:14:e6:b5:7c:62:7e:07:
                    f9:66:a3:61:60:26:0f:7d:c8:db:45:cd:2b:89:9c:
                    fb:8b:d1:7e:66:9c:5d:f6:88:e0:57:52:2c:bc:ac:
                    3b:8c:80:0a:d9:0f:20:3f:99:e5:86:6e:41:5c:c2:
                    22:85:4f:35:51:cd:a1:27:fb:ad:9d:d8:5e:6e:9d:
                    36:27:40:4f:ca:b4:dc:e3:2a:88:f3:37:8a:b2:f3:
                    6a:4e:8b:3d:fe:0a:2b:2f:f0:09:64:c8:21:0e:84:
                    d5:b1:61:93:ac:f1:88:70:1c:9e:25:05:45:16:54:
                    4f:d6:e8:34:21:8a:af:f6:cd:a1:1a:6d:7b:84:12:
                    53:10:ec:c1:ce:1c:c7:b0:8a:d7:ed:70:24:ef:6e:
                    97:a6:95:63:aa:ca:d6:6f:57:50:01:62:38:d4:dd:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:DB:97:D3:67:BE:40:27:4F:BA:6A:C8:9E:05:57:3E:83:4D:5D
            X509v3 Authority Key Identifier:
                keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/pWLbl9NnvkAnT7pqyJ4FVz6DTV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:8802::/36
                  2a10:8804::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:90:c6:39:7a:e9:f2:ab:fd:bd:85:ea:c2:91:21:2b:e0:
         b8:a3:ba:3a:d2:1c:8a:99:38:db:95:83:2b:e3:88:de:fa:bd:
         ba:98:a0:83:ca:b2:d5:46:21:11:3d:b3:c0:a0:c3:a6:15:77:
         e0:75:e9:cf:7c:c5:ee:f8:18:58:cf:c5:b9:ba:02:d6:36:0c:
         1b:a2:63:d3:a3:5a:1b:c8:ab:59:9b:6a:73:cb:7b:4b:75:d8:
         42:11:ef:13:e5:0c:01:ee:48:66:f7:1a:62:d3:c6:1f:de:3f:
         9f:29:a3:3d:d1:12:6e:0a:fb:b6:39:b1:26:96:9c:1d:9b:b1:
         37:fd:78:0a:54:12:77:1f:18:be:fc:c1:73:0b:dc:14:6b:01:
         d9:94:f6:51:ec:48:5d:b4:3b:55:48:d5:e1:59:17:2f:0a:a3:
         1b:79:27:bc:96:5e:0f:f1:3c:71:c1:95:aa:91:67:45:2d:6c:
         36:72:19:cf:3c:02:42:c8:fb:11:22:00:5e:b3:1d:a9:39:78:
         52:68:b8:51:96:3f:cc:19:70:b3:c9:2a:4a:a2:49:70:ca:a6:
         24:25:0d:81:85:dc:47:14:c0:2b:08:4f:e3:a2:bc:69:b8:7c:
         b2:71:a0:8e:14:ab:f0:33:75:7f:f0:3f:2f:1c:54:ef:87:d4:
         8c:4e:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----