Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/e_hG7SaF-CD4AmVwIw42LETpmW0.roa
File:                     e_hG7SaF-CD4AmVwIw42LETpmW0.roa (raw, json)
Hash identifier:          Rus6KocPsAhiNduQuZRl6tHTzQCRW28HZJbCko3T1Zc=
Subject key identifier:   7B:F8:46:ED:26:85:F8:20:F8:02:65:70:23:0E:36:2C:44:E9:99:6D
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       01856F4B5E29031D7B2F3D6A640193F7272C
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/e_hG7SaF-CD4AmVwIw42LETpmW0.roa
Signing time:             Sun 01 Jan 2023 21:44:48 +0000
ROA not before:           Sun 01 Jan 2023 21:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6697
IP address blocks:        2a10:641::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:5e:29:03:1d:7b:2f:3d:6a:64:01:93:f7:27:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Jan  1 21:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bf846ed2685f820f8026570230e362c44e9996d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:a3:b2:82:3d:ab:3f:84:1b:41:ad:a3:50:
                    4f:a7:9d:e9:83:7c:e1:d5:68:98:3b:41:a9:45:c8:
                    d4:0b:d2:da:01:a0:e1:e2:c0:ab:7c:5b:94:81:2d:
                    d5:04:8a:7f:dd:69:00:a4:30:0c:28:f2:eb:22:de:
                    c8:9e:bb:e0:8e:a6:6e:c1:5e:94:9e:c6:cf:d7:f6:
                    7d:ba:83:af:2c:de:63:43:fa:f5:fa:89:bc:d8:4e:
                    61:ff:ea:af:93:ae:20:a8:7d:47:23:1f:ef:b2:3b:
                    b3:86:a1:15:da:23:75:bd:92:91:38:29:09:39:2a:
                    8e:ec:c0:29:eb:6e:a1:84:0d:e9:65:2d:6d:d3:26:
                    4d:6d:d5:c1:aa:53:e6:01:4c:74:b3:33:9e:6b:4e:
                    f3:de:f6:35:7f:49:db:ff:07:86:a0:8f:03:9e:47:
                    07:ef:aa:dc:2f:34:61:3a:b5:d7:41:4f:f7:7f:ac:
                    3d:20:d1:7e:52:96:db:fc:bf:db:23:d4:4b:81:20:
                    c6:a1:74:fc:47:b0:b8:d2:1a:17:71:2b:69:35:58:
                    f2:d2:d6:c5:90:33:e8:aa:10:15:5f:02:2c:86:c6:
                    a4:6c:cf:33:3b:bb:dc:b6:14:ef:65:bf:d8:9d:f4:
                    ec:91:2e:dd:de:58:02:bf:32:3a:f5:1d:b0:f9:9c:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:46:ED:26:85:F8:20:F8:02:65:70:23:0E:36:2C:44:E9:99:6D
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/e_hG7SaF-CD4AmVwIw42LETpmW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:641::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:16:2d:b9:00:b5:54:63:8a:16:a5:70:91:98:c8:1d:c1:4f:
         88:4b:5d:f6:76:af:ad:60:fa:eb:6d:c5:cc:26:ea:2b:59:a8:
         a8:56:8e:b1:85:7d:12:90:66:a3:77:56:ff:3f:27:73:35:e6:
         2c:95:8d:9b:58:3e:9e:eb:d0:c7:7e:01:6e:8b:3a:4f:32:20:
         d8:6a:34:72:90:51:a1:e5:90:0d:f4:d6:bd:e0:9d:e5:8d:6f:
         2b:f3:9f:34:67:13:2c:4a:ce:17:41:aa:23:e9:d3:f6:29:b6:
         b4:90:da:bd:89:75:70:74:7e:06:ab:22:1c:b4:8e:5e:ae:c4:
         da:3d:9a:b6:59:f5:81:cd:f4:e5:51:4f:7a:aa:48:3c:0b:ad:
         29:f9:0f:6f:9f:d3:e8:86:f6:06:24:32:d3:e3:32:f2:11:d0:
         de:05:3e:12:f4:4d:e2:92:e5:6a:55:3f:2f:42:05:e7:fc:f6:
         e0:2c:c5:0f:dd:d3:b3:db:ce:a6:f5:69:e3:b4:b8:8c:78:8c:
         01:94:6d:65:a3:a5:a0:a5:0e:73:91:d4:0b:51:86:92:f4:d2:
         6d:dc:35:e4:e8:d7:de:87:11:b2:4e:25:df:47:38:43:4a:1c:
         7c:c7:94:89:f0:c2:ab:91:6c:3b:99:13:e4:2c:2f:fa:61:d4:
         bb:da:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----