Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/ltB6-ROS3SmO6xz1i5TIX1TXdno.roa
File:                     ltB6-ROS3SmO6xz1i5TIX1TXdno.roa (raw, json)
Hash identifier:          tjbFJkVEA28deAEHbjebzLfyhm044WSZol/v50KzmN4=
Subject key identifier:   96:D0:7A:F9:13:92:DD:29:8E:EB:1C:F5:8B:94:C8:5F:54:D7:76:7A
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       01856F823EFD6593C653CB86E221F4DDE41D
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/ltB6-ROS3SmO6xz1i5TIX1TXdno.roa
Signing time:             Sun 01 Jan 2023 22:44:44 +0000
ROA not before:           Sun 01 Jan 2023 22:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1299
IP address blocks:        164.138.248.0/21 maxlen: 24
                          2a0a:7d40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:3e:fd:65:93:c6:53:cb:86:e2:21:f4:dd:e4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Jan  1 22:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96d07af91392dd298eeb1cf58b94c85f54d7767a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:01:75:71:42:05:11:c5:65:3b:01:b4:c8:
                    65:d6:bd:61:09:e7:75:5a:8a:0c:ac:0a:23:9b:b2:
                    b0:78:6f:ce:af:1d:64:39:51:01:c4:8b:32:79:f3:
                    23:b5:2d:44:68:80:6d:a1:9c:1f:4d:a4:6a:96:7f:
                    87:58:53:cc:c5:39:d0:4e:04:ad:a7:4d:b7:84:c6:
                    90:20:37:38:8a:a7:16:77:97:c1:d4:0c:4f:89:e2:
                    2c:2e:f3:ba:58:0a:bd:d9:af:59:9f:fd:24:b0:cd:
                    21:ab:e4:d1:f5:de:78:aa:98:22:71:d8:97:3c:a0:
                    94:c6:17:9f:58:ef:52:29:99:71:94:0b:50:26:93:
                    56:7c:9d:ca:fd:63:5f:59:32:25:44:b2:4a:20:79:
                    81:2d:8b:e5:ed:ca:27:1b:2a:bd:f0:cf:07:c0:b0:
                    7b:ac:4e:a3:3e:d3:99:d4:17:89:4b:aa:20:30:ad:
                    43:cc:9d:1b:65:c1:68:a4:94:30:58:8a:a5:af:e1:
                    91:66:3f:8c:57:99:24:f4:9d:ca:c7:28:1a:08:34:
                    01:8e:a0:d2:1d:82:a6:3a:70:0b:e7:88:be:0e:48:
                    ca:98:39:80:b0:db:36:8d:d7:d3:d8:5a:12:b4:41:
                    12:72:94:e2:8b:95:32:c5:4e:da:ca:ab:69:5e:9d:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:7A:F9:13:92:DD:29:8E:EB:1C:F5:8B:94:C8:5F:54:D7:76:7A
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/ltB6-ROS3SmO6xz1i5TIX1TXdno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.138.248.0/21
                IPv6:
                  2a0a:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:84:c1:72:47:78:f8:4f:b4:cb:db:80:8a:32:c7:a4:c6:
         16:c5:a2:62:97:73:86:52:43:62:f9:d6:52:76:56:25:6d:fe:
         b1:e3:b5:69:e2:54:7c:d7:79:c6:fe:81:2c:fa:c7:ea:d6:d6:
         d3:0b:0c:4e:4e:10:99:ad:e6:5c:44:0c:d4:30:82:24:df:2c:
         64:e1:9e:a4:e3:13:7c:0a:48:35:cb:3a:07:e0:5b:c0:b1:12:
         69:15:c1:ac:4f:5b:36:b8:09:a7:2c:19:85:1a:f5:90:44:11:
         59:a3:df:cf:33:fa:47:45:ab:59:05:52:20:ba:87:84:ee:12:
         30:81:44:21:68:05:f0:56:70:78:09:dc:01:2f:75:ea:18:f6:
         cb:60:51:3e:58:e4:23:23:13:da:c0:c7:3c:13:45:63:45:a9:
         01:8b:76:d6:e0:3c:69:00:0c:b4:98:60:a9:8e:5f:1f:f4:4d:
         a6:72:e1:0a:f2:ac:12:ae:42:0d:d8:c9:bf:ed:ea:bf:20:ac:
         3a:9d:59:3e:d4:62:a8:b4:5e:89:29:d4:c2:78:5c:a7:6b:92:
         b9:63:02:f2:b4:e6:7d:96:b6:5a:55:5d:74:43:66:2e:6a:06:
         9d:00:c0:b2:54:6b:44:56:22:a8:2e:5e:f9:88:d7:f6:65:c4:
         33:9a:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----