Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa
File:                     AbCbjtU7DvajCheaE39bN4A9E1w.roa (raw, json)
Hash identifier:          z8GntQpRngsS676yQYSoHRcPuApS2cnCQ5Dl6FLCM/Q=
Subject key identifier:   01:B0:9B:8E:D5:3B:0E:F6:A3:0A:17:9A:13:7F:5B:37:80:3D:13:5C
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42F629719BF155C6740F7EFAA48A12
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa
Signing time:             Sun 01 Jan 2023 21:35:37 +0000
ROA not before:           Sun 01 Jan 2023 21:35:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213248
IP address blocks:        2a0e:8f02:2160::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:f6:29:71:9b:f1:55:c6:74:0f:7e:fa:a4:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01b09b8ed53b0ef6a30a179a137f5b37803d135c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:a1:23:29:a6:46:3a:17:ea:86:5a:5d:cc:
                    f8:53:38:17:5d:bf:f0:e8:43:10:82:36:db:c1:4e:
                    61:95:94:c6:15:c8:ee:50:6d:1e:cb:80:90:d1:21:
                    3a:21:1c:29:4a:92:d2:ca:b6:83:7c:75:71:f4:8a:
                    05:64:65:ff:fe:50:1c:80:55:97:61:74:34:3b:85:
                    6a:66:f0:cf:ea:d1:5b:22:02:64:9d:ba:61:86:bc:
                    56:e2:13:8b:39:e5:b5:90:0f:c7:58:3b:92:32:4b:
                    7d:a7:c4:8e:1b:59:c6:93:ca:dc:e5:07:ac:a1:04:
                    80:44:fd:82:6e:ce:64:92:05:54:43:94:e5:01:41:
                    90:6d:08:1b:26:38:07:d5:b2:88:6e:a4:d9:19:e3:
                    8f:65:9e:80:53:d1:e0:41:78:2d:5e:06:94:37:0f:
                    4d:81:99:82:9a:56:73:dc:4a:81:14:47:db:e6:01:
                    46:83:90:0b:6e:d8:09:46:5b:a5:52:19:1a:24:a7:
                    44:b7:75:ff:a8:e2:e0:b3:29:ee:eb:91:b0:7f:cd:
                    67:32:24:39:5e:6c:92:43:81:4f:b5:f6:76:f2:f1:
                    9f:e5:62:c9:eb:4e:c7:d6:57:80:7e:71:17:77:73:
                    c1:43:a0:ce:5b:04:80:91:75:98:57:37:c4:d1:30:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:9B:8E:D5:3B:0E:F6:A3:0A:17:9A:13:7F:5B:37:80:3D:13:5C
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AbCbjtU7DvajCheaE39bN4A9E1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:2160::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:bc:fa:74:be:32:a4:7b:ee:9d:3e:01:06:b2:33:dd:4d:
         31:43:86:5e:d2:10:cf:ed:46:b4:c5:87:b3:d7:10:48:0a:f8:
         bb:83:de:82:6b:31:ee:ba:c8:0b:be:ce:32:b0:c1:5b:4f:32:
         07:6b:a5:bd:b6:df:df:90:8e:93:58:fb:b7:89:03:d9:5b:1b:
         a1:af:02:84:62:5a:91:e1:b8:1a:bd:7d:9d:60:f5:fd:d0:94:
         3a:c3:ec:9a:41:49:91:9b:c3:86:a8:67:50:dc:da:72:45:bf:
         da:67:aa:2c:96:32:83:30:ef:bd:aa:8a:1e:5f:88:f1:09:7f:
         49:c6:ee:01:57:45:ee:f9:79:03:34:01:b0:8c:d8:3b:6c:91:
         78:b2:e5:35:ec:4e:35:7f:2d:16:6c:b0:25:b2:30:65:05:f1:
         44:1b:74:91:db:83:9f:42:1e:0e:3e:ca:20:37:d1:43:40:a1:
         47:97:80:f2:08:04:7b:49:07:ea:e8:d1:04:12:d0:5e:aa:cc:
         fb:f7:9b:a4:8d:90:c9:06:70:50:fa:a8:67:06:d9:ed:05:4c:
         e5:b9:c3:31:4b:73:82:c8:23:7c:bd:e9:56:20:2d:02:de:28:
         47:6a:ce:d7:5d:de:d8:c4:30:ac:8e:25:12:b0:bc:5b:9c:9d:
         e3:45:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----