Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H4LSRLGyx85co8bM9Fk5W2cEj6o.roa
File:                     H4LSRLGyx85co8bM9Fk5W2cEj6o.roa (raw, json)
Hash identifier:          E1KTvmf4M/QAnC8Xbs1N0xB7xrbF+MFdMJBS4Zw7r+I=
Subject key identifier:   1F:82:D2:44:B1:B2:C7:CE:5C:A3:C6:CC:F4:59:39:5B:67:04:8F:AA
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       01856CAEFFE30B95E2835CC0E9684EE1FD88
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H4LSRLGyx85co8bM9Fk5W2cEj6o.roa
Signing time:             Sun 01 Jan 2023 09:34:46 +0000
ROA not before:           Sun 01 Jan 2023 09:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48894
IP address blocks:        2a03:f80:386::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ae:ff:e3:0b:95:e2:83:5c:c0:e9:68:4e:e1:fd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 09:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f82d244b1b2c7ce5ca3c6ccf459395b67048faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:b2:d0:33:b4:46:35:e6:84:8f:0b:62:d3:
                    0f:6a:82:20:b1:2b:02:bb:7d:31:32:67:9f:48:10:
                    53:2c:1f:b7:57:8f:a7:d1:a0:bd:04:0e:41:55:36:
                    7e:3b:1c:fd:25:12:df:4e:b0:bb:5b:22:c1:1a:49:
                    65:87:7b:c0:bd:72:3d:54:89:6a:94:83:96:d2:e8:
                    07:42:52:a0:52:4a:d2:50:5d:bb:0e:3b:d7:a3:98:
                    ff:29:71:69:ef:51:3a:e6:a1:2d:e3:ab:30:d7:cb:
                    1a:1b:9f:00:7d:6a:94:b7:02:cb:08:13:89:c2:14:
                    71:78:8c:b5:ca:1a:9a:21:79:e4:ff:fb:6c:66:0c:
                    eb:e9:15:24:6a:3e:64:c5:5a:a7:67:70:04:0e:61:
                    18:02:79:c6:c6:56:0e:b4:48:b9:b9:8e:71:98:39:
                    5f:f5:ba:86:9f:d9:72:bd:9e:cd:0a:61:92:ae:b9:
                    f1:50:d0:55:80:04:3f:28:13:41:01:6f:26:f7:3d:
                    9b:57:c9:f4:33:69:7c:c8:e6:fa:e7:cb:c3:1f:e6:
                    12:2a:cd:9a:58:6a:77:cc:32:ce:65:64:20:c3:9a:
                    69:e8:f1:38:74:09:6e:18:d3:01:a7:93:76:c4:c1:
                    24:f2:a1:db:e1:9f:e7:78:63:c0:ab:16:b9:2c:32:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:D2:44:B1:B2:C7:CE:5C:A3:C6:CC:F4:59:39:5B:67:04:8F:AA
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/H4LSRLGyx85co8bM9Fk5W2cEj6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f80:386::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:66:1b:7c:2f:3f:79:97:67:e1:88:15:36:fc:0b:85:8a:2b:
         f3:61:3b:aa:89:ea:59:f9:0d:86:28:f5:23:c2:a4:92:47:00:
         40:b8:56:92:d2:f4:05:9d:45:09:cf:9f:f9:1f:40:40:a8:92:
         ff:f5:a1:70:e0:20:89:5a:90:83:42:8f:7d:72:e0:82:97:5e:
         2e:b2:46:38:d4:fd:a4:37:be:b2:0f:1d:72:89:ec:4f:13:67:
         3c:03:f8:bb:5d:33:3f:51:6b:13:ce:d3:0a:d5:08:3e:00:d9:
         ea:df:a9:6c:2a:3d:28:ac:a3:c9:ba:ed:dd:31:97:dc:3f:46:
         d8:22:93:a4:19:01:2b:0b:15:c0:5b:81:8b:36:9d:b3:f0:17:
         d3:83:3d:f3:9e:a4:02:14:f2:20:68:34:f2:28:62:ae:77:94:
         c4:7a:35:c1:0b:7b:1c:b0:34:09:bf:65:37:47:46:4a:b3:50:
         d9:3b:d3:e1:8b:f4:6d:37:da:df:7b:94:f4:18:21:84:05:f6:
         37:5e:e5:b0:f8:82:d5:73:7e:9e:75:4e:8f:d7:9a:74:4e:9a:
         e5:f4:5a:70:0b:03:bf:96:df:7c:4a:8b:a5:1b:24:83:bf:a3:
         70:fe:96:30:ad:6f:d0:30:ed:cf:37:3a:6e:bf:6c:63:fc:82:
         1d:f4:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----