Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RMe66kitC5wbI8NuqIjYuyrfVXY.roa
File:                     RMe66kitC5wbI8NuqIjYuyrfVXY.roa (raw, json)
Hash identifier:          8bLIWlnkK07FHPa+MxmR1Qve83tqom9sbhg6xiac7nY=
Subject key identifier:   44:C7:BA:EA:48:AD:0B:9C:1B:23:C3:6E:A8:88:D8:BB:2A:DF:55:76
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018992B562C4B6FBC8CB7B0267E8B8FFE098
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RMe66kitC5wbI8NuqIjYuyrfVXY.roa
Signing time:             Wed 26 Jul 2023 14:58:28 +0000
ROA not before:           Wed 26 Jul 2023 14:58:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199018
IP address blocks:        2a05:4140:25::/48 maxlen: 48
                          2a05:4140:200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:92:b5:62:c4:b6:fb:c8:cb:7b:02:67:e8:b8:ff:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jul 26 14:58:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44c7baea48ad0b9c1b23c36ea888d8bb2adf5576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:5b:8f:c7:81:e9:56:7f:0d:2c:6d:a9:15:
                    75:15:39:c4:e6:ed:ff:dd:83:5d:48:24:8c:bd:38:
                    90:53:1c:c4:9f:b8:94:27:f7:19:3a:09:c9:d3:5b:
                    d4:96:07:6d:33:ea:03:39:a2:16:2a:06:35:b9:41:
                    0a:5e:1d:4d:3b:5e:a5:bf:a6:df:cd:f4:6a:12:34:
                    ff:ed:ea:e2:60:8b:a0:12:1c:e0:d7:af:41:5c:60:
                    f4:62:cd:8f:fe:17:8d:b1:0c:a8:d4:aa:50:c4:00:
                    d6:e9:0a:5e:f5:c2:19:15:60:d6:6a:27:9e:29:af:
                    62:41:c6:c8:36:d3:47:c0:b5:7d:38:10:3b:e3:e0:
                    84:24:82:f5:4d:6b:af:43:2d:d5:c6:1a:11:27:71:
                    3b:2e:a0:0d:bb:17:f6:0a:b4:64:ee:fa:d7:71:f5:
                    0a:a7:a7:8f:ff:1c:c0:d9:06:35:d0:53:5f:f4:c1:
                    46:a7:49:ac:8a:ff:01:4e:15:3d:ea:14:bc:83:fb:
                    2f:dd:52:76:45:d6:04:2b:9f:0d:a3:e1:e1:f0:cd:
                    f1:00:18:c1:a7:38:5b:95:26:cc:65:9a:78:95:90:
                    04:a6:c5:f1:b1:79:53:b0:e3:56:ae:f7:3b:d9:22:
                    35:71:3f:25:8b:8e:de:86:9e:01:ba:ec:07:c5:6f:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:BA:EA:48:AD:0B:9C:1B:23:C3:6E:A8:88:D8:BB:2A:DF:55:76
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RMe66kitC5wbI8NuqIjYuyrfVXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:25::/48
                  2a05:4140:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:fb:ec:d6:36:80:c8:85:8e:33:de:2e:c1:b7:89:a1:6b:
         05:f9:24:8f:09:90:de:ac:f7:32:ab:79:85:7d:2b:80:b4:76:
         4b:a4:97:06:cc:50:a0:83:b5:8c:7f:cc:db:68:ac:d5:f0:39:
         e1:3a:a0:8e:11:32:8b:c5:ae:b4:19:6e:75:a0:39:f2:55:c8:
         f7:96:6c:32:9a:31:c4:1b:10:2e:10:19:c2:73:f8:26:d9:51:
         50:d1:e5:a4:af:f7:b7:14:70:af:df:d7:1f:06:4a:b6:e1:a0:
         dc:74:9f:c8:9c:80:ca:d1:96:4c:8c:a6:ad:df:4f:73:11:b1:
         40:d6:68:1f:6a:f3:e8:95:d6:62:db:70:14:31:92:1a:0d:34:
         48:0f:3d:e9:2e:ca:4b:5d:fc:aa:c0:9e:82:a0:e3:05:13:7d:
         54:40:59:4f:13:38:55:62:a3:5e:ed:84:a7:80:29:0e:c9:c3:
         ab:86:fe:1c:9e:96:e1:93:6a:e7:5f:75:b1:55:52:0f:95:35:
         fc:fa:5a:88:e9:80:73:6c:74:98:6f:51:d1:39:96:be:7b:a9:
         56:a6:c0:10:4d:53:02:e8:d3:e9:e6:2a:3c:3b:44:5e:74:30:
         fa:53:26:3a:18:ca:05:8d:47:52:43:c5:d0:f4:26:14:78:b5:
         45:4c:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----