Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1-pu0tTDBKVjfW3Jdd61u68_M6os.roa
File:                     1-pu0tTDBKVjfW3Jdd61u68_M6os.roa (raw, json)
Hash identifier:          dfH8Wx8wrxFKIPxnZ3UI9BPUdMgM2kFGMEskXOWW4pM=
Subject key identifier:   FA:9B:B4:B5:30:C1:29:58:DF:5B:72:5D:77:AD:6E:EB:CF:CC:EA:8B
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       0188250EF61BCE1C30572CDE9491C0430CCC
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1-pu0tTDBKVjfW3Jdd61u68_M6os.roa
Signing time:             Tue 16 May 2023 14:55:17 +0000
ROA not before:           Tue 16 May 2023 14:55:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a06:5901:8000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:25:0e:f6:1b:ce:1c:30:57:2c:de:94:91:c0:43:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: May 16 14:55:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa9bb4b530c12958df5b725d77ad6eebcfccea8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:9a:56:31:4f:50:b1:b2:ea:8a:e6:6c:af:
                    e9:32:22:da:e5:9a:26:83:d6:e9:8f:76:88:cb:03:
                    3a:37:cb:43:8b:9a:ca:3d:61:bf:bf:ce:dc:7a:be:
                    1c:1b:71:1b:b5:28:59:e1:59:43:c5:4f:6e:e6:c5:
                    ec:1f:cd:67:74:3f:55:76:7d:15:24:de:fb:01:58:
                    92:0c:3c:1b:93:d9:97:b1:79:c5:02:b8:10:f1:71:
                    04:53:5b:e9:eb:b2:45:8a:fd:52:39:7f:77:86:eb:
                    29:ab:ec:a3:18:98:53:a0:05:36:79:a3:4a:55:de:
                    ee:87:18:6d:a5:d6:fe:2d:ba:ca:f6:a1:e2:1e:75:
                    b9:59:8c:3d:51:c2:bb:00:68:fd:a9:3e:b6:88:4d:
                    3f:12:b3:06:24:0e:bb:ac:e1:ba:45:03:c1:43:80:
                    13:98:55:71:8a:b9:82:b2:ef:9f:86:40:ed:1d:7f:
                    98:a9:03:d7:6f:86:2b:7d:fd:52:1b:a5:3d:2d:0e:
                    da:91:46:a2:8a:71:b7:3e:fa:3a:c6:53:b3:ee:4a:
                    03:7e:26:63:d0:bf:70:01:20:94:6b:bb:a4:23:a2:
                    06:07:23:95:6c:b1:a8:f5:6c:f2:07:aa:12:36:8f:
                    fd:38:c8:d1:97:a8:36:9d:a2:19:cf:9f:78:1a:92:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:B4:B5:30:C1:29:58:DF:5B:72:5D:77:AD:6E:EB:CF:CC:EA:8B
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/1-pu0tTDBKVjfW3Jdd61u68_M6os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:5901:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:00:97:86:1b:c0:55:1e:87:8c:6c:bd:de:b9:90:2a:3d:
         0e:6b:59:8e:e9:33:4d:a8:fd:39:7a:38:24:f6:85:c1:ee:c6:
         3f:ba:38:e6:67:95:01:45:43:5d:22:0e:70:3a:9d:c7:ae:7d:
         e0:1e:c9:79:1a:ef:a3:35:cd:25:87:df:43:98:98:8b:a8:97:
         e3:46:6f:c6:bf:34:7e:a2:cf:0b:40:70:88:1c:98:42:77:58:
         8e:bc:d5:34:71:2f:5f:aa:84:85:c5:dd:e0:0c:fc:76:f2:ca:
         e3:b5:ac:74:c3:44:07:ae:13:e6:ef:ea:05:98:93:c9:e8:82:
         43:e1:ce:62:d5:48:71:a6:02:23:9c:24:c4:82:c5:a1:c9:be:
         a5:28:77:fc:c3:5d:82:ff:c6:02:ab:8c:cd:93:21:2d:18:5f:
         7c:77:f0:5d:09:f6:1f:15:19:5c:65:d1:e8:53:c5:ce:42:37:
         1f:94:db:4a:76:10:ce:e7:01:fb:b1:9b:e1:39:07:d6:84:83:
         af:fe:7f:aa:60:8f:21:f6:e6:25:ec:44:15:fc:ca:13:84:4c:
         95:bc:93:48:d1:ae:0d:fe:47:1e:ea:c8:71:e3:29:f1:d4:6d:
         d2:01:90:39:78:30:40:8b:bc:c0:db:35:ea:c0:69:2b:d6:6c:
         48:fe:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----