Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/bjv7XlvKJMoQEgcLF2lp08xeDj0.roa
File:                     bjv7XlvKJMoQEgcLF2lp08xeDj0.roa (raw, json)
Hash identifier:          FWfgssPnLGQZ29/XxphUFASBJn+ZQehGWioYANNNrbs=
Subject key identifier:   6E:3B:FB:5E:5B:CA:24:CA:10:12:07:0B:17:69:69:D3:CC:5E:0E:3D
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       0186370F32ABFEEF8EDCE5DBFB73E47138D1
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/bjv7XlvKJMoQEgcLF2lp08xeDj0.roa
Signing time:             Thu 09 Feb 2023 16:43:08 +0000
ROA not before:           Thu 09 Feb 2023 16:43:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208022
IP address blocks:        2a12:ef40::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:37:0f:32:ab:fe:ef:8e:dc:e5:db:fb:73:e4:71:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Feb  9 16:43:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e3bfb5e5bca24ca1012070b176969d3cc5e0e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:70:02:37:ac:1c:dc:dc:8e:43:69:0a:c6:
                    97:d3:e0:75:ee:34:07:3f:f6:04:fb:10:7b:8a:db:
                    06:4a:bb:2f:64:bb:01:54:eb:5c:6d:3a:a1:bc:c3:
                    b2:c4:94:39:e0:2a:16:dc:2c:64:a2:2c:2c:3e:fc:
                    d4:8d:40:c8:2f:2b:6f:91:ac:50:29:9b:6c:ed:64:
                    bd:2e:76:24:0c:7f:44:a1:95:13:08:f3:de:9d:df:
                    10:bf:a1:d9:d1:81:9f:c1:8e:20:6f:f1:01:71:f8:
                    01:40:d2:e5:f6:60:f6:5a:b7:8f:ab:64:5b:76:4e:
                    dd:97:55:23:e6:21:07:47:78:44:c3:5d:23:45:1d:
                    b0:72:62:9c:7a:90:6f:98:bd:55:88:0f:54:bb:06:
                    ac:3f:1f:1d:61:ef:de:bf:3a:e9:05:5e:76:e6:eb:
                    65:0c:19:24:e6:6d:94:43:88:ef:4a:3e:a2:db:07:
                    8e:55:a4:a0:54:68:f4:0f:ee:d6:bd:5b:41:e9:ff:
                    73:e6:89:3e:23:8d:77:cd:c2:e9:a3:91:8b:11:47:
                    f9:42:8c:9f:e4:bb:d8:ad:e3:3f:74:c2:73:1d:d0:
                    5b:0e:6b:7a:db:e2:2a:50:f2:43:f5:f2:41:25:17:
                    33:c9:b8:ac:22:fd:ce:7d:5c:82:61:e8:45:42:69:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:FB:5E:5B:CA:24:CA:10:12:07:0B:17:69:69:D3:CC:5E:0E:3D
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/bjv7XlvKJMoQEgcLF2lp08xeDj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:ef40::/29

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:7b:a7:1e:88:26:a2:b8:c2:b5:35:1d:27:c8:b4:d6:d5:
         64:28:a1:0d:52:37:32:bd:8d:e8:32:f7:ff:97:16:72:58:a8:
         28:99:4e:28:31:a3:a2:90:6b:38:51:c6:16:26:c9:bb:74:b0:
         1b:9d:4b:46:be:4e:40:d5:40:1c:02:40:c6:7a:ce:13:06:c8:
         6d:b0:d8:64:59:74:1f:24:5d:03:41:b7:d2:22:b1:35:98:bb:
         5f:5a:05:c9:f7:a4:ec:fa:68:73:6b:f4:74:b5:f8:8b:65:9c:
         5d:ba:a2:30:a7:de:31:ff:b2:4b:6e:64:90:8f:fa:35:03:7f:
         e6:84:ae:58:65:36:b0:4f:29:8b:15:dd:9f:4a:11:8a:91:c0:
         c6:86:d6:06:b8:0f:0a:54:f8:05:a2:3f:73:92:5e:78:78:6c:
         22:d3:f0:01:c8:54:29:b8:f2:6d:fb:42:84:8c:cb:e6:24:a1:
         9c:2d:ee:f2:38:e1:14:bc:bd:fd:8c:fe:3d:80:c8:5b:a9:81:
         c8:65:ad:e1:98:d9:2a:ca:ba:c7:83:c2:9b:eb:80:7e:23:3c:
         29:5b:72:19:8a:7b:74:4e:3b:3e:7f:a6:5c:33:51:e3:2a:fb:
         a7:2a:98:28:9a:95:40:89:93:a4:45:fb:d9:5c:58:d7:8a:53:
         9f:ae:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----