Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/ZRqhoKWgpAFIUEEQbaSoMZBgjxg.roa
File:                     ZRqhoKWgpAFIUEEQbaSoMZBgjxg.roa (raw, json)
Hash identifier:          5sDj/s/9MNr+aCpJ+hf+9NDrzLN6M9qir97CfYt+N7k=
Subject key identifier:   65:1A:A1:A0:A5:A0:A4:01:48:50:41:10:6D:A4:A8:31:90:60:8F:18
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       018AFBB5EB29FD7D226B9B9018D26CC02916
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/ZRqhoKWgpAFIUEEQbaSoMZBgjxg.roa
Signing time:             Wed 04 Oct 2023 17:21:57 +0000
ROA not before:           Wed 04 Oct 2023 17:21:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212786
IP address blocks:        2a05:e600::/29 maxlen: 29
                          2a09:cac0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fb:b5:eb:29:fd:7d:22:6b:9b:90:18:d2:6c:c0:29:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Oct  4 17:21:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=651aa1a0a5a0a401485041106da4a83190608f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:ce:e9:80:d8:84:b5:4e:8d:d4:ce:65:a5:
                    93:70:83:9d:9d:d9:e7:f9:32:d7:16:dc:69:f3:f8:
                    13:6b:05:a4:2c:a0:7a:94:52:38:7d:be:ba:21:7c:
                    26:fc:00:fb:00:df:bd:35:39:b6:a1:8e:13:a5:4c:
                    d8:7f:54:55:db:51:0b:68:57:59:3f:b4:a1:02:b4:
                    cd:be:6c:1a:d0:f7:d6:f0:9c:f5:ac:88:65:dd:62:
                    c5:cd:4c:ce:37:5a:52:ff:8d:fe:5e:f8:48:bc:4c:
                    35:90:a6:62:7f:e2:6a:6d:d3:b7:b2:33:2b:d7:2d:
                    04:11:02:d9:8c:db:3b:0e:84:88:13:f4:3c:cf:f5:
                    57:51:a0:23:7c:b0:fd:2d:17:12:28:93:d9:70:d6:
                    37:fd:50:5a:7e:09:2b:22:b8:f2:26:ad:5e:5a:0b:
                    ee:c4:40:ca:10:61:da:94:d1:a7:fe:6a:1c:d5:d8:
                    10:b1:2d:b4:a2:38:00:97:55:f3:08:25:d7:27:f1:
                    20:e9:5b:95:01:6d:45:dd:a4:46:74:7a:24:4a:a6:
                    ca:df:42:f8:38:85:fe:c5:81:66:24:f3:14:f8:28:
                    9b:d1:00:93:34:5b:d6:80:db:a5:00:48:74:ca:a2:
                    85:11:ec:db:af:11:f2:f2:e2:4b:3d:36:0f:dd:53:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:A1:A0:A5:A0:A4:01:48:50:41:10:6D:A4:A8:31:90:60:8F:18
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/ZRqhoKWgpAFIUEEQbaSoMZBgjxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:e600::/29
                  2a09:cac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:6a:29:83:db:c3:6a:ac:e6:72:7f:17:04:27:8c:e9:f0:
         db:51:c2:a8:3b:90:2a:a6:30:6e:73:d0:db:48:5f:06:ff:39:
         22:0e:06:ae:cb:48:c2:d8:ba:af:bb:66:e9:51:b0:3f:d6:78:
         03:1d:4b:11:cf:1a:eb:31:ab:75:2f:c2:98:72:52:96:f2:e4:
         e4:11:cc:82:d1:63:30:3a:ed:0e:95:f8:4b:f5:b2:6b:6e:e6:
         79:46:38:3a:50:b2:5f:10:48:af:19:15:58:d8:5c:a3:6f:d5:
         df:31:97:c3:2c:0f:b6:23:62:c2:b8:c7:81:ea:75:4d:42:82:
         2c:08:ed:c1:dd:a7:48:77:00:ca:fa:d8:83:f4:96:b3:b4:aa:
         58:0e:d1:47:c7:29:0c:22:28:8f:f6:35:83:6a:72:18:e5:af:
         22:47:04:ac:28:9f:7d:91:4e:72:96:7c:16:2b:d1:23:32:49:
         76:94:2f:66:88:3b:29:7e:d7:64:60:db:a8:9f:d4:3d:45:92:
         a8:4f:40:68:03:3a:a3:73:3a:11:c2:57:48:11:08:ec:42:16:
         74:0c:63:84:78:de:16:5b:61:47:23:c2:73:6a:73:28:ce:b4:
         95:3f:a6:3c:09:d6:c4:a5:54:09:da:29:25:b8:06:6b:21:93:
         6d:d8:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----