Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa
File:                     5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa (raw, json)
Hash identifier:          YHBsqYbD5sUXgfQ5LymFlrFJcgfINJUvOOQg4f0fZ+g=
Subject key identifier:   E5:FB:BA:66:8B:00:59:48:72:F0:CB:30:65:2C:D8:AB:90:A2:D5:D6
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E741B7771CABF36EE90D51F2E6B2F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa
Signing time:             Mon 02 Jan 2023 06:14:59 +0000
ROA not before:           Mon 02 Jan 2023 06:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210356
IP address blocks:        2a0c:b641:600::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:74:1b:77:71:ca:bf:36:ee:90:d5:1f:2e:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5fbba668b00594872f0cb30652cd8ab90a2d5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:ba:16:cf:8e:d4:1c:0f:a2:c3:f0:66:81:
                    e7:ef:b1:64:4c:12:4d:bf:9f:67:7b:10:98:f7:6e:
                    eb:37:17:1e:9d:69:b3:40:4e:d3:0a:eb:7d:a8:7e:
                    a5:4b:38:4d:d7:3d:0f:d5:31:d7:65:81:09:f1:8b:
                    fb:fc:0a:71:e5:4e:aa:e3:c6:70:4f:a2:db:de:41:
                    18:44:89:8d:83:d7:4a:a3:eb:26:1d:64:25:16:91:
                    9d:ca:f9:dc:89:89:9e:e9:f9:78:d8:59:a7:22:e2:
                    95:90:0f:95:5b:8f:e6:df:3d:77:c0:d1:d2:f0:e6:
                    cd:4f:c3:1a:c7:f6:71:a6:14:49:35:89:b0:36:ef:
                    d4:18:fb:70:04:ea:63:3e:2b:41:7c:ca:24:7f:42:
                    58:ec:0a:66:26:83:b9:b9:68:eb:7f:31:c9:8c:1b:
                    4c:e1:d8:e9:2f:7b:31:07:ab:55:bc:a7:aa:67:1d:
                    ce:28:3a:8c:b1:13:af:6f:65:4c:c2:ef:cd:76:2f:
                    d5:a8:29:64:12:58:73:62:2a:bd:7d:c9:3d:c1:1d:
                    8a:7a:8c:33:8f:78:55:b9:6b:07:63:29:7d:2e:c4:
                    fd:01:c7:2f:f4:e9:7a:26:a4:a8:0f:c9:e5:e0:8f:
                    56:1b:ff:cf:89:4d:06:29:95:52:6e:13:e0:06:21:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:BA:66:8B:00:59:48:72:F0:CB:30:65:2C:D8:AB:90:A2:D5:D6
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:600::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:52:30:e8:21:9e:25:62:19:8e:79:2b:49:6c:59:2a:88:
         0e:0e:ac:93:9b:08:bd:e8:df:24:45:cb:ba:55:41:17:32:a7:
         69:a4:89:d0:00:bc:8d:d1:9d:c4:75:6d:ed:dc:1b:12:f8:31:
         79:c5:a9:bf:97:54:91:2e:fb:b1:4e:f3:e3:0e:56:21:80:9c:
         2e:05:77:57:71:7c:54:2d:7e:0b:46:b4:45:0d:5a:5b:01:75:
         87:21:a2:27:76:21:2c:88:ac:0f:96:4c:d5:a8:0e:1f:9b:a2:
         79:9f:78:55:1a:d3:2a:f5:aa:49:04:66:72:61:96:74:0d:b7:
         f1:72:1f:2f:70:8d:9c:ff:c4:97:a9:4b:d9:e5:e9:55:4b:d0:
         3d:42:25:a5:e8:62:22:12:f2:a9:3f:35:5f:5e:bb:36:ec:0c:
         56:8d:2d:6c:34:3e:78:ba:14:8a:4b:94:d3:c7:8a:de:ed:b1:
         30:a8:c2:fe:50:93:18:34:fa:81:bc:63:24:a3:b1:48:83:62:
         3d:eb:e4:3d:d1:85:be:3b:4f:22:c5:f1:c3:62:3c:0e:00:1c:
         74:66:a5:6b:31:42:55:69:1d:c4:e5:78:71:5e:a1:75:54:96:
         f1:f1:17:8d:72:b8:d4:3a:f4:59:e3:28:fc:04:f3:ad:cd:10:
         43:5e:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----