Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/6RPwhFxSrXvjkrdnsTZ6PRdowSE.roa
File:                     6RPwhFxSrXvjkrdnsTZ6PRdowSE.roa (raw, json)
Hash identifier:          sMPWLnSeElIi8E8LYkQw2QNyKJH9xnoGyOLZ0oMG9lc=
Subject key identifier:   E9:13:F0:84:5C:52:AD:7B:E3:92:B7:67:B1:36:7A:3D:17:68:C1:21
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018ACBCFF1ADF277F682524DB7FFFC06C35E
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/6RPwhFxSrXvjkrdnsTZ6PRdowSE.roa
Signing time:             Mon 25 Sep 2023 10:08:37 +0000
ROA not before:           Mon 25 Sep 2023 10:08:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43519
IP address blocks:        213.248.254.0/24 maxlen: 24
                          2a01:618:402::/48 maxlen: 48
                          2a01:618:405::/48 maxlen: 48
                          2a01:618:400::/48 maxlen: 48
                          2a01:618:403::/48 maxlen: 48
                          2a01:618:406::/48 maxlen: 48
                          2a01:618:401::/48 maxlen: 48
                          2a01:618:404::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cb:cf:f1:ad:f2:77:f6:82:52:4d:b7:ff:fc:06:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep 25 10:08:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e913f0845c52ad7be392b767b1367a3d1768c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:2e:b6:cf:93:6e:4a:8e:e0:de:3f:0b:56:
                    87:44:2d:5d:b0:4e:d2:f3:03:52:4f:e5:d2:a8:cc:
                    0c:d3:99:53:10:4d:3e:ff:d6:c6:ce:e2:6a:35:fb:
                    83:a3:f2:d0:76:ca:48:fa:de:56:20:06:bb:ff:3d:
                    ec:f0:4d:e0:d9:4c:ff:f5:5e:2a:dc:d6:2b:16:e1:
                    70:2d:7d:b8:d8:1f:99:1b:42:40:7a:4a:ce:1a:0a:
                    32:b0:cb:29:03:17:01:97:32:18:b1:e9:c2:3f:12:
                    ca:06:38:0f:dc:e3:19:9c:dd:17:78:b9:fe:e7:82:
                    ba:e9:8a:c0:9f:e0:8b:8e:b4:28:e1:cd:f8:88:f2:
                    5b:d3:1d:c8:ab:cc:ad:a9:c5:70:5b:42:2e:ad:a7:
                    41:a5:3c:ae:64:34:04:1f:83:c4:fa:91:46:69:86:
                    c5:52:85:32:a3:5b:ff:02:5f:95:33:98:b3:7f:4d:
                    ad:02:e1:1f:c5:0f:74:46:8b:9e:b0:56:56:ba:89:
                    5f:32:38:d1:32:37:81:b5:77:4b:f7:54:7c:7f:9e:
                    6c:02:62:4d:7c:82:f7:28:b4:0f:bd:33:6f:5d:8c:
                    ab:b8:8b:8c:53:1f:a3:bb:21:ab:96:59:ce:46:0a:
                    54:19:bb:02:2d:9c:95:3b:bb:36:bf:99:0c:fe:76:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:F0:84:5C:52:AD:7B:E3:92:B7:67:B1:36:7A:3D:17:68:C1:21
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/6RPwhFxSrXvjkrdnsTZ6PRdowSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.254.0/24
                IPv6:
                  2a01:618:400::-2a01:618:406:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:79:2a:58:2a:f3:4d:ae:76:b0:15:f8:dd:62:8b:47:cf:
         36:69:98:f1:58:7c:2c:52:8f:77:1b:fb:54:4d:25:69:21:fb:
         ca:f2:4a:f0:ec:ff:8f:63:03:8b:8e:3d:62:94:21:95:7f:bf:
         42:ce:40:ae:9e:a3:31:de:8d:84:54:ec:56:1b:6d:6e:0b:5c:
         dd:b6:c5:9f:e9:1b:b1:cc:84:4c:e1:d7:66:92:09:4d:ca:25:
         d7:e0:04:07:6a:20:54:10:16:9b:c9:84:10:26:71:2c:e2:4a:
         f0:1c:19:96:af:ca:61:b0:f5:4a:75:a5:a9:0f:53:d2:9f:d7:
         45:35:d3:1e:83:cc:ac:e8:9f:15:49:2f:f1:4d:ce:02:9b:ff:
         09:75:9c:84:38:28:1f:c9:08:06:05:2d:5d:54:90:be:c3:1b:
         01:eb:c2:d2:38:47:0a:29:46:bc:c8:eb:2b:4b:d3:ac:e7:1b:
         14:ad:10:19:97:eb:5f:46:cf:f7:65:84:a8:3f:0e:76:bc:4b:
         f6:e4:72:f8:25:82:b2:dd:a4:4e:57:6f:64:92:e5:42:24:27:
         fd:17:cb:5c:d8:e0:a3:35:9c:e5:65:ff:3b:c5:42:60:64:94:
         ae:02:5a:1c:3e:af:84:ab:fb:ea:c3:cf:ed:5d:ef:14:a5:28:
         ea:84:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----