Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gF50KurZHDOiObmV4d_v16Jg5BU.roa
File:                     gF50KurZHDOiObmV4d_v16Jg5BU.roa (raw, json)
Hash identifier:          zl/gq+GyMBbr4JmdhuMjtru/Yq8hUtdePZk+51vGIjk=
Subject key identifier:   80:5E:74:2A:EA:D9:1C:33:A2:39:B9:95:E1:DF:EF:D7:A2:60:E4:15
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       01856F42CF07BBBD87CAEABF40369EDB0767
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gF50KurZHDOiObmV4d_v16Jg5BU.roa
Signing time:             Sun 01 Jan 2023 21:35:27 +0000
ROA not before:           Sun 01 Jan 2023 21:35:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203472
IP address blocks:        2a0e:8f02:f046::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:cf:07:bb:bd:87:ca:ea:bf:40:36:9e:db:07:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 21:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=805e742aead91c33a239b995e1dfefd7a260e415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:38:1a:c5:14:37:29:1a:85:ce:ca:3d:5c:
                    b8:92:59:a9:a1:37:a0:9e:fc:67:85:01:b2:a4:ba:
                    2e:90:bb:b0:21:f6:d7:bc:76:ee:01:7d:ce:90:60:
                    65:ba:55:54:ec:f5:44:aa:36:1d:b6:11:e1:b9:6b:
                    f2:8e:b4:ae:01:1f:7c:42:76:05:03:09:5f:c2:16:
                    04:c2:56:69:d5:da:65:67:a6:bb:3e:60:1a:5c:ad:
                    c1:c8:14:de:a2:42:69:be:d8:dc:7e:8a:c9:94:4b:
                    44:97:a0:53:e5:80:bc:dc:9b:30:a1:9d:75:fc:79:
                    e4:f5:49:cf:0b:da:32:26:11:87:3c:b4:4c:91:d5:
                    e1:9c:1c:9e:9a:68:5f:33:e0:49:6c:85:e9:e5:71:
                    80:1f:e1:79:45:c9:7b:31:60:10:44:67:d2:ab:be:
                    a4:4e:04:2c:54:20:25:1e:2b:fa:6b:0e:08:ce:56:
                    21:66:42:21:20:e1:fb:41:c3:bf:a0:aa:b3:4b:b4:
                    df:41:0a:80:cb:82:f4:a0:1e:5c:e1:b2:6a:76:06:
                    bf:24:46:42:8c:85:18:4b:09:c2:04:f1:24:78:73:
                    8b:0d:5d:c3:0b:9b:3a:41:bf:3b:e4:66:48:3b:9c:
                    81:c0:b7:39:e8:ee:27:19:9f:de:76:97:54:86:30:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:74:2A:EA:D9:1C:33:A2:39:B9:95:E1:DF:EF:D7:A2:60:E4:15
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gF50KurZHDOiObmV4d_v16Jg5BU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f046::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:d7:a6:e0:a1:31:ec:ee:48:00:96:8f:99:ee:f0:e8:b3:
         8f:ff:a9:86:e8:a1:37:12:1d:61:e6:e0:6f:a7:a1:d3:f8:d0:
         02:dc:2e:09:c8:cc:a2:56:48:f0:6d:c0:ad:4a:a1:4a:bc:04:
         a8:72:60:1b:aa:9d:64:01:c7:08:18:50:47:17:fe:ed:59:2c:
         ff:fc:d2:6b:fa:a2:49:49:82:89:69:f8:e5:19:6e:df:10:04:
         d8:4d:e2:d3:6b:b9:69:20:55:6d:bf:91:2d:6c:62:79:94:f5:
         b9:2d:93:19:2d:f1:6d:82:eb:99:cc:00:27:a8:2a:d4:e4:11:
         8d:95:ed:0a:e3:d5:df:ef:b0:c9:86:f4:6c:67:9b:31:6f:66:
         2e:6b:46:e9:e1:04:e2:f8:1d:eb:44:41:de:14:f6:bd:1d:c8:
         4f:bc:3d:99:49:7f:78:7e:a9:e7:a2:e9:28:23:93:bf:a0:ca:
         94:e6:d5:01:64:e7:87:53:ee:ca:8b:69:30:c9:f0:09:09:b7:
         1a:20:f0:2b:56:58:70:9e:14:f7:26:99:19:60:34:e7:bd:6c:
         6f:61:f8:85:19:ae:c4:e6:a0:4f:91:e9:4f:af:eb:ca:6c:68:
         c8:67:ec:3e:d4:77:54:8d:1b:f1:be:19:e2:03:62:53:fd:f0:
         32:81:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----