Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa
File:                     aEFBMCM598JyzpG9p_aFZPBqqZw.roa (raw, json)
Hash identifier:          md5XZAT/qFxiIyX5Ja9orRVRD5g/Bzp/r9GS77nN+4I=
Subject key identifier:   68:41:41:30:23:39:F7:C2:72:CE:91:BD:A7:F6:85:64:F0:6A:A9:9C
Certificate issuer:       /CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
Certificate serial:       0189F2CF7CC416A7F2E5AAF22A807298B905
Authority key identifier: 9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa
Signing time:             Mon 14 Aug 2023 06:50:31 +0000
ROA not before:           Mon 14 Aug 2023 06:50:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59950
IP address blocks:        212.6.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f2:cf:7c:c4:16:a7:f2:e5:aa:f2:2a:80:72:98:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e18aee8fe70354f75ea6dabf89ed8f94b6a1e58
        Validity
            Not Before: Aug 14 06:50:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=684141302339f7c272ce91bda7f68564f06aa99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:9d:04:28:e9:21:2f:1e:43:80:94:b9:31:
                    d3:ab:4d:6d:95:4c:39:98:f7:96:25:7a:51:53:7d:
                    8b:f3:71:9d:4b:25:75:0c:48:ae:5b:49:e4:3e:32:
                    c8:7b:60:56:89:81:a7:7d:16:3f:70:31:e3:b3:f8:
                    34:f7:d2:e2:16:e3:8e:2c:62:fc:0f:27:7e:80:94:
                    44:aa:5a:2f:97:5f:6f:29:aa:c0:ff:64:ae:7e:b0:
                    b4:1d:7f:ad:f0:00:61:75:73:1a:d3:d9:81:cf:8f:
                    a6:24:88:bb:2f:4b:0f:09:73:74:a6:48:90:0b:ee:
                    4a:ed:a1:b7:cc:a9:af:ed:8a:59:89:50:2a:0a:9f:
                    4e:3b:93:0e:a5:f5:4b:fa:b0:68:89:33:95:ce:5c:
                    11:6d:25:09:d9:b2:f4:15:b4:9f:0d:99:50:a3:4e:
                    fd:1c:2a:ee:e0:5f:55:ec:93:d7:c7:de:cf:ff:85:
                    55:a9:99:8f:c9:c2:e9:9f:c7:1d:85:e2:c4:df:da:
                    d1:53:3b:51:79:fa:41:19:14:95:1d:82:da:7a:38:
                    eb:79:b7:aa:ca:f9:95:da:67:21:e3:8e:59:14:4d:
                    19:a6:fd:1d:d0:b8:2b:8d:39:d9:91:68:84:dc:7a:
                    cc:ca:35:4c:8f:c9:74:95:a0:4d:f8:c6:88:e9:33:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:41:30:23:39:F7:C2:72:CE:91:BD:A7:F6:85:64:F0:6A:A9:9C
            X509v3 Authority Key Identifier:
                keyid:9E:18:AE:E8:FE:70:35:4F:75:EA:6D:AB:F8:9E:D8:F9:4B:6A:1E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhiu6P5wNU916m2r-J7Y-UtqHlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/aEFBMCM598JyzpG9p_aFZPBqqZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2de158-b19a-49eb-a6ec-284ea425e405/1/nhiu6P5wNU916m2r-J7Y-UtqHlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:b1:07:ae:bb:33:94:ff:16:54:74:7b:a6:65:65:44:8e:
         08:e5:7a:56:b5:ba:de:14:ff:4f:1d:5e:ee:61:f6:4b:b3:a4:
         4e:3a:cf:6f:fe:48:91:e5:dd:af:52:e2:31:5d:64:ac:a0:7a:
         d2:f3:0e:25:16:b0:a2:69:98:ae:a5:bc:c8:a8:22:b8:38:8b:
         eb:c3:9b:2d:18:af:88:7b:82:f7:18:f2:c7:14:60:b0:25:e7:
         50:1b:7d:68:f2:97:1c:06:72:9c:45:fb:11:c9:ca:98:36:0d:
         84:7d:eb:88:68:5e:f6:b2:9e:11:5f:d7:fc:c0:9a:bb:df:a5:
         6e:c0:c2:78:9c:40:a5:8d:9a:8b:63:d6:32:af:67:e6:b9:01:
         6a:6d:62:8b:1e:b8:aa:22:c6:b7:07:9d:76:5c:20:1e:99:0d:
         80:91:75:0d:e4:55:64:2f:6b:26:b2:47:4f:83:48:94:5c:39:
         e1:3b:70:28:ff:62:1d:fe:d0:98:9d:22:6c:b9:0e:f0:c9:68:
         1b:d4:86:0a:a6:b8:46:c0:56:c6:09:63:75:0f:c8:7e:6a:0a:
         e8:4e:6d:a6:6d:d0:3e:a4:c0:ec:f1:b4:a4:fd:16:80:e5:7c:
         d7:9a:dd:3f:5d:bf:87:03:d4:b3:6c:11:27:68:8e:1e:66:f2:
         3a:ff:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----