Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/rveAr-kMz1nbMKzmp9QDua7wNgA.roa
File:                     rveAr-kMz1nbMKzmp9QDua7wNgA.roa (raw, json)
Hash identifier:          boVlHZ3T0OiBWtkPSNlINKx3u/x/FG202ie3k6vIp+E=
Subject key identifier:   AE:F7:80:AF:E9:0C:CF:59:DB:30:AC:E6:A7:D4:03:B9:AE:F0:36:00
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       01856CAEF3CD2EB49871E9371833D774EEAB
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/rveAr-kMz1nbMKzmp9QDua7wNgA.roa
Signing time:             Sun 01 Jan 2023 09:34:43 +0000
ROA not before:           Sun 01 Jan 2023 09:34:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8280
IP address blocks:        2a03:f80:30::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ae:f3:cd:2e:b4:98:71:e9:37:18:33:d7:74:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 09:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aef780afe90ccf59db30ace6a7d403b9aef03600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:3f:29:0c:fd:2a:55:5c:af:97:1c:b6:54:
                    af:f7:a1:0d:5a:19:7a:d7:57:e9:3c:a1:d4:aa:ac:
                    72:2a:7e:ee:6c:7b:a4:c2:af:78:93:ab:5a:af:4c:
                    dc:b5:bd:1c:e7:b4:03:ef:8c:0d:d8:c3:a9:fd:a8:
                    a2:60:a8:8d:f3:b0:c8:1d:6b:94:cd:4b:49:29:45:
                    61:70:1b:28:e5:d7:e4:46:f4:47:f7:4b:ee:a2:49:
                    83:90:6d:f2:75:ab:10:4f:83:2c:fa:a4:8e:53:6e:
                    96:3d:74:ea:74:19:51:46:a5:3a:ed:ed:93:05:76:
                    37:8b:56:5a:c7:94:b0:75:10:b8:70:16:20:5e:b7:
                    8f:1d:dd:47:bc:2b:a8:ee:c3:ea:ed:27:23:ee:91:
                    5f:64:df:86:7f:60:d2:93:b5:22:c4:45:f5:0b:5b:
                    03:6f:b8:d0:59:49:9d:aa:68:78:85:02:dc:32:f5:
                    1f:63:76:ec:74:5b:0a:5a:14:2c:fc:e3:7b:db:7b:
                    e7:11:e5:4c:4f:6e:a3:57:25:36:eb:d2:5e:ec:f8:
                    be:bd:04:d9:3f:00:26:32:ad:79:75:b0:b4:91:be:
                    e8:cd:df:67:3c:70:1b:13:7f:4f:c1:73:cb:41:ab:
                    4b:37:f6:3e:6d:aa:2a:bf:0c:61:ae:66:6c:79:f1:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F7:80:AF:E9:0C:CF:59:DB:30:AC:E6:A7:D4:03:B9:AE:F0:36:00
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/rveAr-kMz1nbMKzmp9QDua7wNgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f80:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:54:3c:76:a6:26:54:f3:dc:a6:c3:a4:3b:8c:59:38:49:c8:
         1c:1a:4a:d5:1f:09:e5:3c:54:f5:e9:b2:e3:0f:62:14:9b:72:
         c9:ff:a1:7e:55:c2:63:ec:10:b7:10:58:92:cc:85:34:97:9a:
         63:84:6d:a6:66:08:26:52:36:e9:8b:8d:37:6e:17:b1:6b:06:
         8b:40:c3:de:79:06:4f:8e:85:07:67:90:a6:9f:a4:a8:4a:f0:
         c3:f7:a4:8e:6a:6a:ec:5b:ae:d0:b0:21:c6:95:a0:8b:8a:5b:
         e1:65:84:c7:86:40:cd:e7:ca:93:1d:58:13:cb:fa:92:11:85:
         ff:35:ab:b8:65:33:b3:91:6b:50:7c:0f:78:e4:eb:82:97:f3:
         43:40:e6:61:9b:72:50:31:a2:f0:f8:bf:2a:9e:c6:51:20:22:
         ed:2e:f2:6c:bd:ac:26:4b:12:14:dc:5f:48:8f:f4:33:42:74:
         be:97:ed:e2:e1:ab:35:c1:c0:c7:ce:91:00:16:30:5b:51:15:
         f2:4f:db:6a:a6:12:05:8a:d8:3d:e2:35:62:c4:e0:ca:29:f0:
         66:05:a6:b4:c9:a4:64:3a:29:55:ac:74:e4:9b:9e:f8:30:ab:
         40:b6:50:26:68:1b:b2:c0:00:ad:e8:32:0c:9f:75:9b:0f:a9:
         f6:eb:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----