Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa
File:                     Ft7q856nylvOrDv8OOdDp7g6KPU.roa (raw, json)
Hash identifier:          9fh5VyTbyxCqDfajV8jSepQVeQk17/kueRioWv4as8s=
Subject key identifier:   16:DE:EA:F3:9E:A7:CA:5B:CE:AC:3B:FC:38:E7:43:A7:B8:3A:28:F5
Certificate issuer:       /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial:       01856D53CD61C9BB70441CBEA9DA22183899
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa
Signing time:             Sun 01 Jan 2023 12:34:46 +0000
ROA not before:           Sun 01 Jan 2023 12:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12843
IP address blocks:        2001:67c:1928::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:cd:61:c9:bb:70:44:1c:be:a9:da:22:18:38:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
        Validity
            Not Before: Jan  1 12:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16deeaf39ea7ca5bceac3bfc38e743a7b83a28f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:bd:0f:ad:6b:3e:94:fa:0d:f2:1c:5e:6a:
                    47:ed:9f:16:d6:b8:25:3f:53:e5:ea:cb:7a:49:b9:
                    a6:a1:6e:67:6e:1a:46:56:78:93:58:a6:ca:03:69:
                    64:b4:1a:b4:e5:5d:e2:5e:a0:00:1d:f9:48:ac:47:
                    c8:0b:ce:a6:bf:0f:5e:fe:be:05:d1:78:fc:9f:e8:
                    50:5a:4c:b3:1f:5e:ea:20:ef:e1:28:49:c6:bd:af:
                    8e:56:99:38:84:d1:ba:15:98:3b:a4:ff:87:7c:43:
                    29:39:b5:64:bc:89:03:6b:1a:e5:a4:06:aa:cf:03:
                    8c:ca:e2:6c:92:90:3f:8a:a9:e2:1b:df:84:59:ad:
                    4a:38:eb:83:c5:6c:90:5f:32:a9:4a:7c:11:5a:1a:
                    74:18:d3:90:59:8c:8d:a2:78:bd:40:91:b8:59:0c:
                    a9:9a:00:a4:ed:8b:d6:62:73:00:e7:1e:1c:04:96:
                    f8:be:c5:aa:d1:83:69:ea:01:a6:59:eb:d3:94:14:
                    0a:67:48:8d:04:90:dd:95:22:62:ca:68:5f:15:2b:
                    e1:c2:a0:c7:63:15:7a:db:11:79:bb:54:8b:80:72:
                    12:4b:83:f2:42:c5:53:81:ae:5e:5b:05:45:2d:d6:
                    9b:ab:27:d2:87:75:6a:8a:ab:dd:d0:78:ec:fe:9f:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:EA:F3:9E:A7:CA:5B:CE:AC:3B:FC:38:E7:43:A7:B8:3A:28:F5
            X509v3 Authority Key Identifier:
                keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1928::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:f8:02:c0:72:50:34:96:73:7a:94:fe:9f:cb:6d:b1:ae:
         fa:b6:2a:fd:f4:63:b4:2d:f0:ab:2b:22:95:86:c8:5a:9e:ed:
         36:1c:db:21:c9:6b:e2:45:04:bb:fc:a8:ef:37:9e:ec:80:1e:
         a9:dd:da:d2:ea:1c:0c:9b:02:ac:39:33:12:2a:fc:72:1d:1b:
         91:3a:7f:53:46:cb:c7:12:6e:c6:ad:60:1e:88:a5:52:c2:87:
         f5:99:8b:d2:18:41:7a:cc:d3:93:d6:ae:de:f4:c6:a0:31:e8:
         19:ba:8e:de:4c:97:36:92:10:23:9f:cb:9e:9b:35:49:4e:4c:
         bd:38:6e:63:df:00:55:d6:4d:90:5a:ee:f2:33:6b:0e:30:4a:
         17:b1:6c:66:7a:06:27:15:c9:50:ad:8f:a3:22:ab:52:bb:19:
         0c:6d:58:ba:74:95:c9:fe:47:5e:50:24:b9:4b:04:5a:7c:44:
         6e:2a:91:38:8b:30:b5:16:fb:2d:08:79:cc:71:ab:75:fc:cb:
         21:de:ee:f2:19:66:fe:2e:57:13:b2:a6:9d:35:3f:6c:0f:4c:
         e3:b7:f8:0e:87:26:0a:a4:83:8b:01:6f:03:27:73:fb:62:59:
         66:2f:13:32:9c:18:9b:21:c1:75:01:e6:bd:49:65:d3:a1:55:
         f7:d4:73:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtU81hybtwRBy+qdoiGDiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy
ZTQ3ZGYwHhcNMjMwMTAxMTIzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRlZWFmMzllYTdjYTViY2VhYzNiZmMzOGU3NDNhN2I4M2EyOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnW9D61rPpT6DfIcXmpH7Z8W1rgl
P1Pl6st6SbmmoW5nbhpGVniTWKbKA2lktBq05V3iXqAAHflIrEfIC86mvw9e/r4F
0Xj8n+hQWkyzH17qIO/hKEnGva+OVpk4hNG6FZg7pP+HfEMpObVkvIkDaxrlpAaq
zwOMyuJskpA/iqniG9+EWa1KOOuDxWyQXzKpSnwRWhp0GNOQWYyNoni9QJG4WQyp
mgCk7YvWYnMA5x4cBJb4vsWq0YNp6gGmWevTlBQKZ0iNBJDdlSJiymhfFSvhwqDH
YxV62xF5u1SLgHISS4PyQsVTga5eWwVFLdabqyfSh3Vqiqvd0Hjs/p+i7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBbe6vOep8pbzqw7/DjnQ6e4Oij1MB8GA1UdIwQY
MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct
ZWY1MThiNGI0NjNmLzEvRnQ3cTg1Nm55bHZPckR2OE9PZERwN2c2S1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm
LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBko
MA0GCSqGSIb3DQEBCwUAA4IBAQAgbfgCwHJQNJZzepT+n8ttsa76tir99GO0LfCr
KyKVhshanu02HNshyWviRQS7/KjvN57sgB6p3drS6hwMmwKsOTMSKvxyHRuROn9T
RsvHEm7GrWAeiKVSwof1mYvSGEF6zNOT1q7e9MagMegZuo7eTJc2khAjn8uemzVJ
Tky9OG5j3wBV1k2QWu7yM2sOMEoXsWxmegYnFclQrY+jIqtSuxkMbVi6dJXJ/kde
UCS5SwRafERuKpE4izC1FvstCHnMcat1/Msh3u7yGWb+LlcTsqadNT9sD0zjt/gO
hyYKpIOLAW8DJ3P7YllmLxMynBibIcF1Aea9SWXToVX31HP4
-----END CERTIFICATE-----