Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/k8JfKX2GzQx_UP2e4r0_JzgBBRU.roa
File:                     k8JfKX2GzQx_UP2e4r0_JzgBBRU.roa (raw, json)
Hash identifier:          V++DiVMn3GTX1Jp3444eBj6mDAJFPmDTkXE/gx4Pjiw=
Subject key identifier:   93:C2:5F:29:7D:86:CD:0C:7F:50:FD:9E:E2:BD:3F:27:38:01:05:15
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       01872016A4F21ED496BC59CEF3901583476A
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/k8JfKX2GzQx_UP2e4r0_JzgBBRU.roa
Signing time:             Sun 26 Mar 2023 22:42:47 +0000
ROA not before:           Sun 26 Mar 2023 22:42:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211380
IP address blocks:        2a0c:5707:ff04::/48 maxlen: 48
                          2a0c:5707:ff01::/48 maxlen: 48
                          2a0c:5707:ff00::/40 maxlen: 40
                          2a0c:5707:ff00::/48 maxlen: 48
                          2a0c:5707:ff02::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:20:16:a4:f2:1e:d4:96:bc:59:ce:f3:90:15:83:47:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Mar 26 22:42:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93c25f297d86cd0c7f50fd9ee2bd3f2738010515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:50:87:72:a7:5f:fd:39:74:c5:27:6d:6e:
                    38:fa:7c:72:cf:e5:0b:32:37:78:95:62:ae:a2:a1:
                    89:f2:f9:83:cf:a5:7f:fa:32:f2:26:72:fd:1e:17:
                    33:da:ea:d3:cd:c4:39:30:16:ed:4d:70:dd:ba:02:
                    b4:55:31:0c:eb:04:c2:f5:7a:a6:e3:63:3c:d4:36:
                    46:c1:bd:ee:1c:6c:a3:4f:3e:bb:2e:30:1c:1d:c6:
                    38:13:1d:f3:63:d9:25:d6:4e:54:ca:56:57:fe:6d:
                    0f:ce:a9:07:b6:33:09:2e:24:62:a4:4e:f9:80:03:
                    f6:60:3b:de:5a:28:e3:7b:03:78:88:96:7a:3b:0c:
                    27:93:d8:56:d2:c8:32:c7:55:ee:be:2e:e1:58:e6:
                    78:9c:40:98:5b:18:da:3f:e0:94:3a:1c:9c:c5:07:
                    1d:4f:1d:a8:9a:d3:da:53:1b:e4:52:f6:dd:2a:78:
                    3c:e0:12:d2:48:5c:a2:89:34:aa:c8:86:17:53:2f:
                    5f:e2:f7:2f:1c:66:b1:c8:72:5e:0b:ab:0c:fe:34:
                    f5:1a:dd:1e:cb:f2:9c:08:73:97:5a:c6:27:4b:e7:
                    d9:42:e6:c2:c9:67:3a:e3:2f:6d:1e:40:24:0c:3e:
                    8a:68:9e:8b:f0:c4:43:a9:d1:09:1c:27:36:42:ba:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:5F:29:7D:86:CD:0C:7F:50:FD:9E:E2:BD:3F:27:38:01:05:15
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/k8JfKX2GzQx_UP2e4r0_JzgBBRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:5707:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:75:c5:ba:76:2a:e5:33:e2:bb:12:42:38:ec:72:3c:7f:
         0d:78:69:90:f9:78:2e:d9:90:cf:37:93:8f:b8:87:35:2d:0d:
         c2:92:78:5c:3f:4f:95:18:10:5a:61:44:0f:64:4b:9e:2e:96:
         64:c7:1f:5e:8c:29:d7:39:64:4a:d4:75:1c:62:a7:5f:10:05:
         1a:34:6e:a3:c4:12:24:39:cf:0c:64:d0:58:e7:61:4d:e3:3e:
         2b:40:4b:9e:3e:46:5d:0d:29:9b:50:74:6d:f1:1c:1c:d9:5c:
         cd:ea:21:d4:ca:48:d8:8c:08:af:8f:0f:d8:e5:52:17:69:51:
         38:e6:1e:2d:0b:1f:9a:55:58:03:89:91:17:e4:4c:5d:7b:76:
         14:62:3e:1f:73:e4:81:fe:49:d3:0d:12:cb:31:d6:3e:b1:6a:
         51:75:1e:19:cc:ea:46:64:d7:27:9c:c9:fb:ee:c8:72:ea:6b:
         c8:83:d2:08:87:64:2a:62:38:1d:59:97:d4:1d:f3:ce:d5:ea:
         a3:0f:5f:f1:21:55:fb:f6:c7:a9:27:86:57:b5:1e:cb:ae:9f:
         83:06:31:25:36:a8:2a:5b:ab:d8:5c:80:b6:0b:35:42:de:6b:
         da:d4:c1:5d:46:54:39:66:75:33:cb:df:ac:d0:c7:79:c9:ff:
         0c:04:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----