Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa
File:                     OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa (raw, json)
Hash identifier:          w41hkOoBevYXXtcVuxEZRI5e+6r02ME60Ys+si++j+4=
Subject key identifier:   38:C9:8B:12:72:F3:0C:4E:E7:66:C3:C5:50:61:D3:FD:B0:E3:14:51
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42DBF7628350EFA1AE19EDD13B84FA
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa
Signing time:             Sun 01 Jan 2023 21:35:30 +0000
ROA not before:           Sun 01 Jan 2023 21:35:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211479
IP address blocks:        2a0e:8f02:f022::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:db:f7:62:83:50:ef:a1:ae:19:ed:d1:3b:84:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=38c98b1272f30c4ee766c3c55061d3fdb0e31451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:ee:85:74:79:26:0e:d2:d2:ba:53:7f:51:
                    8e:0a:f8:e3:9a:1e:06:6f:19:10:c6:8b:70:c2:22:
                    2c:5e:a4:b3:f4:78:83:dc:f3:54:f6:c2:50:e1:44:
                    aa:fe:cf:51:34:f0:49:ac:bc:11:3e:d9:ff:5d:89:
                    ee:5d:cf:f2:c4:b3:c6:bc:0b:7f:1a:6e:26:52:80:
                    b1:68:6f:0f:4d:45:05:c7:54:17:cf:cd:36:1c:c1:
                    a0:ba:67:6d:1d:12:e1:db:07:3b:23:05:17:ce:d8:
                    e5:9a:5f:4d:c6:96:ad:16:28:cd:e5:d1:47:80:e9:
                    0c:09:2b:3a:23:27:18:2d:4e:d6:40:d9:be:fb:80:
                    e7:6c:92:da:b0:23:d4:af:e7:09:33:3b:39:65:a4:
                    90:d8:d7:3f:30:6b:af:1d:e2:84:e1:fd:f3:d7:f8:
                    f6:c7:4a:61:cd:0d:54:e5:ed:8b:43:0c:21:5c:d8:
                    e1:1f:a1:be:f3:fa:5f:7b:83:a5:cf:f9:ae:6c:a4:
                    2f:1f:99:d2:40:8f:7f:7a:da:62:a1:7b:8f:d6:13:
                    b3:26:8f:b1:9f:7b:63:62:1d:24:de:a9:27:39:4e:
                    76:51:6b:17:83:34:3d:02:61:e9:7a:9b:75:7b:b4:
                    0d:16:1d:69:21:17:72:09:96:e8:f9:69:0b:22:8d:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:8B:12:72:F3:0C:4E:E7:66:C3:C5:50:61:D3:FD:B0:E3:14:51
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OMmLEnLzDE7nZsPFUGHT_bDjFFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f022::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:5d:f0:3f:fb:0c:eb:4e:d1:07:65:41:e9:28:5a:c1:ba:2c:
         da:05:d0:40:8f:66:16:84:b5:1e:2d:96:66:13:9d:31:1c:b9:
         03:b2:1f:ea:c1:68:39:d5:6b:71:8e:1e:9c:53:69:ab:9d:15:
         d1:45:73:78:b1:93:58:00:91:96:f1:64:5a:b6:02:f6:1f:dd:
         9b:ea:41:c6:35:b0:94:47:31:ad:56:19:e8:48:f3:c6:1e:4e:
         91:cc:a5:14:b3:57:7c:d8:26:e8:a6:55:78:89:8d:fe:33:a2:
         e7:27:8b:89:79:f2:b5:15:29:e7:2d:bb:06:87:aa:25:50:af:
         9e:d0:2f:81:64:70:51:22:da:90:4c:ef:11:c2:7b:94:cd:33:
         ec:ce:70:8c:3d:ee:a6:00:3c:35:f9:37:1a:4a:a8:e4:ce:3b:
         22:7f:c2:e9:93:0f:47:cc:53:88:6a:17:04:b1:dd:79:67:e0:
         ec:4d:d3:b8:6c:21:c9:31:a1:3d:f4:09:e2:6e:e0:cb:a6:65:
         1e:7a:fd:b5:05:4e:3d:fe:da:af:b6:ca:88:f9:5a:88:a3:07:
         69:77:35:b8:d0:6c:31:51:64:c9:42:a0:11:a2:94:72:12:5d:
         e1:50:df:3a:ca:fe:66:28:a2:d5:d9:1d:b8:7e:c8:64:00:97:
         35:06:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----