Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4Q6NZzxaSCQMlqRLa-APzdbWzL8.roa
File:                     4Q6NZzxaSCQMlqRLa-APzdbWzL8.roa (raw, json)
Hash identifier:          mQNCayw7FlUd3Uclo+NJiWl7mV2ybu++HcF4el6A7gw=
Subject key identifier:   E1:0E:8D:67:3C:5A:48:24:0C:96:A4:4B:6B:E0:0F:CD:D6:D6:CC:BF
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018573900FFCBCBB6BF5EBAE8B7D7C5E847C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4Q6NZzxaSCQMlqRLa-APzdbWzL8.roa
Signing time:             Mon 02 Jan 2023 17:38:19 +0000
ROA not before:           Mon 02 Jan 2023 17:38:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212332
IP address blocks:        2a0b:b87:ffa4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:90:0f:fc:bc:bb:6b:f5:eb:ae:8b:7d:7c:5e:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 17:38:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e10e8d673c5a48240c96a44b6be00fcdd6d6ccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6d:08:c9:c4:3b:b7:ad:97:38:f5:d5:59:5c:
                    af:2d:1b:b2:5f:68:51:0b:a0:a8:00:03:fa:ca:7c:
                    61:9d:a0:c1:cf:06:a5:d6:73:2b:ba:52:6f:46:7d:
                    75:7b:9b:b0:c7:66:c0:55:da:6a:be:b6:fb:3f:05:
                    63:91:4f:24:2f:5d:07:5f:f3:85:03:04:12:65:7b:
                    cf:65:db:d1:dd:62:1b:46:ed:92:3d:44:31:5c:5e:
                    e0:82:f9:7c:07:37:6f:c9:57:ad:59:87:55:5d:01:
                    2b:3e:46:e3:06:08:f5:0a:20:c3:28:b7:5b:dd:1d:
                    fd:3b:05:79:74:61:b4:45:56:3e:0e:89:7f:f6:91:
                    76:4a:27:7a:0e:6e:cc:7a:0d:ca:3a:e5:f4:3e:a7:
                    ea:1f:4b:04:1c:95:5e:01:78:83:e9:e3:b8:a7:44:
                    2e:36:5f:d2:cb:b8:29:ce:50:54:9b:2e:80:33:cf:
                    74:0d:ba:8e:8a:ca:78:18:ee:fc:46:02:55:6d:4e:
                    57:29:03:a5:57:05:6d:de:17:2a:31:9b:6f:54:19:
                    40:2f:de:a4:ca:63:9c:27:c3:dc:bb:68:bc:21:8f:
                    23:59:4b:4c:fb:78:8c:55:c1:1e:b9:b2:ed:74:c1:
                    5a:91:28:d9:bc:0f:45:44:2d:e1:09:a8:d4:50:a6:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0E:8D:67:3C:5A:48:24:0C:96:A4:4B:6B:E0:0F:CD:D6:D6:CC:BF
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4Q6NZzxaSCQMlqRLa-APzdbWzL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffa4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:ac:55:79:1b:5b:44:d3:25:10:d5:3a:10:4c:d1:15:0c:
         d8:f1:28:fd:47:b1:e7:9c:fb:2c:72:47:3a:fc:69:e9:85:23:
         bc:a8:00:20:7c:a0:18:1c:2a:a4:e2:57:f0:39:cd:1f:ee:f4:
         2f:08:73:0b:47:94:fa:42:8b:d1:56:37:a2:81:6f:c4:c7:79:
         6a:7a:72:2c:bf:f9:41:f0:dd:96:ad:09:8b:7e:22:10:93:d2:
         b6:2c:c1:97:10:68:c0:04:05:e1:55:c6:eb:bf:ac:fd:15:f1:
         aa:b0:ae:d5:6f:a4:3f:22:cd:68:9a:a2:63:7e:c3:83:5d:ce:
         44:a3:c8:ab:db:58:d0:fb:86:76:03:79:67:35:0a:23:ef:21:
         0b:a8:bb:7d:60:3a:0d:4a:c8:1f:62:15:b9:0b:52:a1:cd:81:
         3b:ab:7f:38:0a:0e:19:84:e5:7c:82:65:d7:d3:44:d4:bd:ce:
         6e:a0:2b:4e:da:9c:21:c2:99:bb:4b:58:64:ca:3c:fd:2e:19:
         21:27:01:ab:63:24:18:20:12:ea:64:6b:44:67:00:98:c1:21:
         48:b5:73:bd:b8:76:e7:da:85:b7:b3:be:5c:51:e9:39:b3:b5:
         6a:bc:eb:75:7a:d5:d4:3d:58:a6:d5:58:bf:24:a4:d5:e9:d4:
         ef:1c:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----