Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/N6Gc8ITxCRTQ1trHcxa7SqfdhtE.roa
File:                     N6Gc8ITxCRTQ1trHcxa7SqfdhtE.roa (raw, json)
Hash identifier:          GjNLveUTOPTmID11Ft+87JqKd6zqD69mtjcckDlPuno=
Subject key identifier:   37:A1:9C:F0:84:F1:09:14:D0:D6:DA:C7:73:16:BB:4A:A7:DD:86:D1
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       01868C2F989B79346667EA541659A05F4267
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/N6Gc8ITxCRTQ1trHcxa7SqfdhtE.roa
Signing time:             Sun 26 Feb 2023 05:26:14 +0000
ROA not before:           Sun 26 Feb 2023 05:26:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200160
IP address blocks:        2a0a:280:1100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8c:2f:98:9b:79:34:66:67:ea:54:16:59:a0:5f:42:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Feb 26 05:26:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37a19cf084f10914d0d6dac77316bb4aa7dd86d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d7:e9:d6:ae:52:4b:12:b8:aa:a1:3a:ac:66:
                    b1:6f:95:1d:29:93:d0:ee:7d:7e:83:84:01:af:1d:
                    c1:db:df:56:de:06:34:7c:04:d8:dc:fc:99:ec:f7:
                    25:7f:e2:13:e0:cf:1c:90:d8:3e:9a:67:1c:fc:48:
                    0b:a2:2f:60:a8:f4:e4:c2:0f:42:5c:41:17:27:3f:
                    e9:2b:78:d5:3f:70:9c:c4:9c:73:68:c7:5d:5c:81:
                    21:ae:98:51:2f:55:44:a0:7c:27:cf:bc:57:26:17:
                    8a:0f:0c:13:c8:d9:01:7e:a1:9c:82:ae:2a:01:22:
                    1a:09:8d:fc:3c:53:7c:f9:28:29:38:2f:34:5e:e5:
                    9d:21:e9:f1:bb:e2:d1:04:17:4f:1a:f4:c6:60:5e:
                    90:03:3d:75:1d:71:a8:c8:19:f6:eb:a4:a8:fb:49:
                    08:01:03:66:3c:0d:62:74:a6:d9:e8:7e:a8:19:8d:
                    b2:41:94:1f:88:de:38:d1:e4:1a:97:52:10:50:92:
                    6c:47:b2:b7:02:7b:3c:88:7a:a2:4a:c8:e4:d8:bb:
                    d2:11:4c:0a:c2:85:ca:59:cf:11:ab:65:8f:df:78:
                    16:42:ee:52:b3:17:c4:8e:83:00:90:93:bc:93:43:
                    6d:14:3c:d3:1b:45:31:a0:3e:03:02:7b:93:50:47:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:9C:F0:84:F1:09:14:D0:D6:DA:C7:73:16:BB:4A:A7:DD:86:D1
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/N6Gc8ITxCRTQ1trHcxa7SqfdhtE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:280:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:49:ac:14:27:aa:29:24:a2:fb:ef:79:32:c2:17:5c:47:4d:
         61:9c:10:f0:8c:35:d6:e1:d5:da:8e:a0:21:c5:ce:3c:78:04:
         1e:99:4b:ec:0d:27:20:54:d2:e5:a6:21:ae:7d:58:4e:df:73:
         b1:52:d2:fb:79:c1:10:d4:41:27:bf:76:de:28:ea:26:07:91:
         e0:c8:2c:be:43:41:16:32:51:11:82:e9:20:76:3a:ac:f4:fa:
         95:4d:c6:38:08:59:74:57:7d:56:13:47:59:3a:5f:aa:a6:e9:
         47:a6:4d:0a:c3:e2:53:60:73:62:95:04:83:80:dd:88:2f:dc:
         5f:8a:4b:95:98:45:40:e3:45:1d:d3:50:5b:15:3c:1b:bb:d8:
         62:71:aa:f0:45:d7:bf:96:3d:f4:91:df:55:d9:1e:f7:aa:46:
         8b:42:bc:9f:6a:09:1e:9b:4d:94:7e:ac:54:3c:07:3d:71:10:
         c0:17:7f:ea:ab:f3:5e:bc:ec:2d:d0:a2:0f:04:26:4b:66:9d:
         4d:49:8c:f8:e0:a3:fe:31:35:27:1c:09:66:e2:c9:5a:36:76:
         69:e8:d0:8b:8f:fa:41:13:ac:6f:1f:1f:71:c8:4b:17:a6:4f:
         4d:0b:cd:22:fa:8e:d1:45:89:62:2b:ec:d4:a6:67:a1:04:e5:
         c2:31:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----