Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa
File:                     Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa (raw, json)
Hash identifier:          LW1nP8ZSNMsIY7QqEcjz4kSaSSbFtCe5qDkNgXI6ba4=
Subject key identifier:   56:2E:1A:F9:76:58:FF:C3:C2:62:EC:66:CF:8C:33:DD:76:0E:41:31
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       018872986CB6E7FEB8DA7D8D4F1A25115866
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa
Signing time:             Wed 31 May 2023 16:16:11 +0000
ROA not before:           Wed 31 May 2023 16:16:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26073
IP address blocks:        2a0d:1a40:edef::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:72:98:6c:b6:e7:fe:b8:da:7d:8d:4f:1a:25:11:58:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: May 31 16:16:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=562e1af97658ffc3c262ec66cf8c33dd760e4131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:3d:84:d1:18:be:7f:7f:35:7c:e3:34:ea:
                    4e:b3:26:90:97:c1:2e:29:c1:00:20:15:23:18:27:
                    89:9f:1f:f7:ff:75:91:63:ec:ce:13:45:fa:bc:85:
                    2f:01:6a:27:9d:fe:cb:f7:af:e1:c3:61:d1:29:85:
                    f1:56:26:88:41:42:52:a7:da:d2:4d:f4:fa:e6:9e:
                    fb:13:d7:62:93:4e:39:22:9e:b8:2d:42:c0:25:60:
                    43:4d:af:1d:fc:ef:6c:64:b7:36:d1:66:e6:e0:15:
                    32:e1:eb:54:f5:69:34:5c:b9:7e:0c:dc:94:25:2b:
                    b6:92:db:64:85:92:09:ed:d6:07:95:4c:1d:47:6e:
                    6c:aa:a6:e6:a1:ed:00:1a:2d:c1:a1:57:14:29:86:
                    26:c2:a6:e8:f1:20:e2:88:52:e1:7e:ff:da:f2:00:
                    09:8c:68:c8:fc:66:ce:ac:e9:24:39:a6:13:5a:c6:
                    7c:a1:f2:50:44:56:88:43:ff:5a:c7:28:29:d4:af:
                    b3:b5:95:4a:6b:1b:6a:fd:97:cf:1a:6e:18:85:a0:
                    20:bb:1e:f8:93:f0:66:0e:42:2b:b7:f0:c1:7f:7c:
                    42:dd:94:f1:6a:03:ce:79:77:8a:c8:6e:2a:73:ee:
                    30:4b:ec:1d:49:22:f2:ff:63:4a:9d:8b:4c:63:dd:
                    32:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2E:1A:F9:76:58:FF:C3:C2:62:EC:66:CF:8C:33:DD:76:0E:41:31
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:1a40:edef::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:29:2d:c0:c2:cb:ba:36:da:17:0e:43:e1:5d:86:ca:9c:
         a2:76:3d:75:c2:9a:65:b3:7f:6d:bd:97:82:80:6f:e6:0f:00:
         ad:4d:19:f2:19:21:de:cd:00:ec:2f:67:37:98:81:8a:4f:28:
         a1:61:84:0a:c6:ed:33:2d:78:5e:cf:b3:c4:70:11:0a:a8:f4:
         2b:d0:d5:fb:b0:8f:9b:31:c3:9d:d2:d6:a7:95:bf:7a:86:87:
         c8:b5:49:d0:50:5e:d2:b7:4f:20:d0:00:75:96:4d:58:33:ee:
         dd:9d:2b:59:e5:5e:fd:7a:90:0e:32:74:61:64:33:c3:80:65:
         ee:51:d6:6a:25:72:18:d9:84:36:18:7e:1f:71:0e:70:60:49:
         0e:b3:a4:c6:9c:31:51:a1:f6:c2:b4:8a:f5:02:3f:8f:29:75:
         72:5c:fe:b2:cc:04:90:e6:c4:d4:03:5d:1c:c4:80:58:61:1b:
         10:98:7e:e8:39:08:27:a6:8b:50:ca:8c:9e:44:06:1c:91:39:
         33:3e:80:4d:93:82:17:52:78:38:69:2e:9b:e7:0a:a3:76:7c:
         bc:1c:67:1b:f1:ae:d2:1d:c4:09:e4:43:dc:28:07:3d:3b:a1:
         53:43:fa:eb:02:5a:50:f5:ea:e4:b2:e7:3f:eb:fb:9b:94:99:
         00:38:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----