Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa
File:                     Tp57CAFZXN2I3clcnruD1Ct9PH4.roa (raw, json)
Hash identifier:          1mGTyGS73GFlgdYFnHtLpu4fM/Kpjs8iqCmXGWjgKJg=
Subject key identifier:   4E:9E:7B:08:01:59:5C:DD:88:DD:C9:5C:9E:BB:83:D4:2B:7D:3C:7E
Certificate issuer:       /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial:       0185A4FA48FAE77BEE13DADE22C8FE60146A
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa
Signing time:             Thu 12 Jan 2023 07:55:44 +0000
ROA not before:           Thu 12 Jan 2023 07:55:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        2001:67c:2350::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a4:fa:48:fa:e7:7b:ee:13:da:de:22:c8:fe:60:14:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87de085975de6588e07fed135513aa38acedb763
        Validity
            Not Before: Jan 12 07:55:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e9e7b0801595cdd88ddc95c9ebb83d42b7d3c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:93:db:8e:13:61:91:9f:a4:e1:37:2b:8a:
                    92:1d:a1:b9:c6:b0:e2:68:cc:39:47:65:51:6f:ec:
                    6e:53:3e:3c:dc:59:60:f2:54:95:18:b9:a9:68:13:
                    e4:11:c1:71:f3:b5:d6:32:fd:9c:36:01:d7:27:c4:
                    76:f2:53:8f:6d:a0:f8:a5:1f:0a:e7:99:e5:ad:10:
                    46:3c:98:6b:ae:89:a8:3a:10:d1:a8:6d:cb:3b:98:
                    20:e6:79:de:f9:d4:cc:e3:f9:4e:fe:b6:86:6a:d6:
                    fe:80:6d:18:6e:6f:f0:59:0c:57:48:8d:3b:2a:a1:
                    b8:49:29:58:0a:a7:49:f0:69:8e:97:d3:be:b0:d0:
                    75:c9:1c:b1:85:13:6c:ef:fd:f2:76:dd:fe:a7:38:
                    7f:62:12:ee:e1:2c:d7:4d:fc:01:1b:16:2a:aa:e3:
                    92:01:6b:9e:3c:fb:11:d9:03:4a:17:1f:a3:e9:96:
                    03:00:f8:e5:01:3f:a8:69:4a:69:cc:7b:5e:73:26:
                    c8:e4:e6:a5:93:a6:17:5c:6f:7e:ad:04:13:07:52:
                    34:50:de:4f:60:30:d7:97:69:0f:9d:99:b3:8b:a5:
                    3a:96:b0:d0:c9:23:13:4e:b9:01:4b:29:3c:e8:6d:
                    26:0f:dc:32:fa:d6:6e:44:37:8f:01:06:82:06:4d:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9E:7B:08:01:59:5C:DD:88:DD:C9:5C:9E:BB:83:D4:2B:7D:3C:7E
            X509v3 Authority Key Identifier:
                keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/Tp57CAFZXN2I3clcnruD1Ct9PH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2350::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:b2:fe:3e:bb:b3:c7:6b:b4:44:fb:4c:81:bd:ec:e8:cf:
         66:aa:2e:76:4b:8e:b2:e3:4c:99:57:c4:f7:76:31:46:2e:a5:
         52:14:2f:ae:a8:f9:88:2b:07:a1:5a:7a:ff:88:43:ec:df:15:
         05:5d:b6:6e:2d:a3:f4:37:95:59:99:f8:e4:99:f2:ad:42:e9:
         8f:16:7c:7b:d7:6c:f4:da:27:4a:38:31:ab:39:55:a0:3c:aa:
         79:e4:be:3b:79:b8:de:79:04:c0:ca:9a:a8:20:44:48:e4:3f:
         94:ae:c5:0b:38:a6:19:f6:83:21:78:c7:a1:d7:4a:45:50:3b:
         b3:4c:51:5e:56:61:6b:eb:b8:0a:92:0f:77:55:ad:df:88:03:
         f8:e0:51:81:14:88:ae:4e:42:8c:a8:21:77:3e:de:4b:2a:6f:
         db:0d:67:6b:43:6f:3f:4f:fe:72:17:a6:9a:17:8e:b0:fc:b1:
         89:fe:6a:1c:ea:61:c9:93:86:07:c5:b0:26:fc:2a:d1:48:84:
         24:b3:c7:76:18:c3:f9:13:55:44:61:cd:d9:60:4c:18:40:88:
         a4:df:f1:fd:6b:49:7a:2f:32:cb:8b:c7:ce:3c:6e:63:c6:67:
         35:78:f5:43:8f:26:06:93:18:52:98:3a:bc:4d:d5:1b:38:52:
         5b:e1:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----