Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa
File:                     Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa (raw, json)
Hash identifier:          Bs3HTu5kO6E0oEBN0N5Bv+2tFqlsQQVqktUqXafHpZE=
Subject key identifier:   42:6D:59:5D:03:63:F1:04:B9:B1:1A:D8:29:BA:57:10:73:76:AE:2A
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42D4B7FC4B74996D1262B1A777BB1A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa
Signing time:             Sun 01 Jan 2023 21:35:28 +0000
ROA not before:           Sun 01 Jan 2023 21:35:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208223
IP address blocks:        2a0e:8f02:f03d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:d4:b7:fc:4b:74:99:6d:12:62:b1:a7:77:bb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=426d595d0363f104b9b11ad829ba57107376ae2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:be:2b:99:25:6f:c3:7b:71:ed:5e:b5:35:
                    d4:1d:34:d7:d0:60:1c:6f:45:c1:45:3f:f9:b7:df:
                    bf:58:af:2d:f9:95:6f:99:c9:d9:19:f5:db:a9:21:
                    02:22:ab:5c:82:d8:75:cf:f4:87:96:56:16:95:8f:
                    01:16:b6:55:19:10:35:9c:83:38:12:34:98:1d:95:
                    4f:93:7e:7c:0c:1a:82:73:95:79:c7:04:bb:35:d4:
                    13:1d:78:a2:1b:e7:26:62:fa:c5:2b:d5:29:9f:f6:
                    64:06:9b:2b:aa:1f:11:e0:9f:f5:81:f7:30:4b:95:
                    55:15:05:77:55:9d:d3:04:32:05:aa:bb:88:d4:86:
                    2f:e7:de:3d:4a:4f:42:a2:ca:68:f3:37:08:a3:df:
                    df:6a:ae:46:ee:b7:f6:54:a0:d1:95:64:ec:c1:34:
                    51:0a:f8:02:09:db:4c:60:61:0d:07:fe:8a:29:8b:
                    90:87:73:10:e6:83:c6:e0:42:14:2d:14:20:52:bc:
                    27:ce:4c:cc:e9:8d:52:33:6f:70:69:b2:be:01:7a:
                    ce:4c:5d:5e:da:1c:e4:41:01:dc:c7:9b:15:39:8c:
                    a7:1f:47:48:40:3b:13:69:5c:82:57:bd:32:46:86:
                    eb:18:e5:1b:a5:d1:44:e6:8d:4a:95:a0:4f:7d:e5:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:59:5D:03:63:F1:04:B9:B1:1A:D8:29:BA:57:10:73:76:AE:2A
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f03d::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:6c:ef:ab:ca:95:d2:58:10:2c:b2:cf:13:17:96:2e:0f:
         cf:1a:6e:fc:64:49:09:e6:57:e6:06:e2:ce:7c:b1:51:fb:b0:
         d4:96:29:27:8e:1a:82:a8:63:15:1c:37:40:d7:b5:73:17:9e:
         1e:4e:d8:a2:4f:d3:91:ad:c8:b0:1f:d7:63:a2:a5:fc:c4:a2:
         cc:23:78:56:58:ed:f2:89:4f:c4:a3:3d:74:b4:13:fb:e3:1a:
         40:dd:63:5b:bb:3a:76:e7:85:98:f3:8d:c3:54:c1:af:9c:77:
         47:75:c5:58:48:5b:91:a4:ee:2e:0f:53:4e:ff:ab:48:9d:cc:
         b0:cd:74:98:50:97:1d:e5:25:8f:61:67:06:a0:e8:82:ae:51:
         01:66:27:19:7d:13:df:02:40:93:d8:72:e5:43:9f:b6:4b:d1:
         99:da:db:60:b6:27:1a:ee:a1:7b:29:37:32:e5:45:02:c1:e5:
         fb:fe:7c:49:2b:f0:2d:9e:f0:1b:bf:98:64:be:f4:21:44:8d:
         34:5e:fb:01:d3:45:df:66:e2:57:56:00:d8:cf:8b:b3:4b:b6:
         77:78:d5:eb:27:5e:a9:39:eb:8a:53:ac:7d:69:54:f6:e7:5d:
         b0:a4:ff:26:e5:8f:b9:38:0a:4e:9b:a9:60:9a:0c:44:2b:01:
         52:b8:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----