Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8lxTdSm1h0krB_MsDozGTodhO5s.roa
File:                     8lxTdSm1h0krB_MsDozGTodhO5s.roa (raw, json)
Hash identifier:          seomB2/4TVQyxQy9wc1YovyMJ3WYyZwiiRi0KwkW/9Q=
Subject key identifier:   F2:5C:53:75:29:B5:87:49:2B:07:F3:2C:0E:8C:C6:4E:87:61:3B:9B
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E91C24AD5892C6036BE9CD0B32D4E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8lxTdSm1h0krB_MsDozGTodhO5s.roa
Signing time:             Mon 02 Jan 2023 06:15:06 +0000
ROA not before:           Mon 02 Jan 2023 06:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212952
IP address blocks:        2a0c:b641:5d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:91:c2:4a:d5:89:2c:60:36:be:9c:d0:b3:2d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f25c537529b587492b07f32c0e8cc64e87613b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:13:e7:b9:e3:2f:52:4f:51:87:80:19:aa:
                    ff:4d:52:ba:4a:3c:5e:00:24:e9:8e:5f:dc:a7:33:
                    79:e4:5d:22:f8:30:25:cd:d1:5e:14:36:27:f5:1a:
                    b5:ed:ec:2a:8e:b9:6f:e9:28:41:80:78:04:63:52:
                    ec:7d:4e:ca:53:78:cc:b7:6f:db:9e:99:58:18:9f:
                    ce:e5:cf:da:21:db:3c:19:9a:0e:e1:d8:ab:5f:07:
                    68:9d:75:06:3f:42:6e:1a:13:80:61:c8:d6:8b:c0:
                    11:f0:fb:b9:14:23:45:80:ed:4c:f4:62:1e:f3:af:
                    2b:5d:de:4a:a7:57:e6:4c:e5:78:d5:1f:46:67:60:
                    12:6b:1b:af:e0:fb:83:08:37:7c:9a:72:04:b8:d5:
                    47:3e:d0:4e:fe:31:5a:53:ab:6c:e8:bb:08:6a:de:
                    43:4c:38:fe:85:f4:3d:d3:01:e5:99:6a:0b:43:aa:
                    9a:70:b9:69:5f:fc:53:ac:07:7b:d1:66:d0:a9:9d:
                    10:cf:22:cf:6f:ee:82:8b:09:03:6c:9a:0a:b3:ef:
                    31:52:33:da:e9:36:02:de:c8:fe:d6:a5:bf:83:a6:
                    99:54:3f:8f:6a:c3:86:ab:fb:99:b1:1a:61:75:34:
                    ca:34:48:5c:88:17:6a:1a:f1:3e:11:37:42:c8:59:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:53:75:29:B5:87:49:2B:07:F3:2C:0E:8C:C6:4E:87:61:3B:9B
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8lxTdSm1h0krB_MsDozGTodhO5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:5d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:64:de:d1:cc:ac:8c:cf:08:3d:3a:7d:16:1b:fd:1e:3f:d3:
         f4:99:3b:55:33:10:50:28:44:02:5b:31:27:a3:4c:ee:34:5d:
         4c:07:61:63:ae:13:97:50:46:d0:ed:5d:86:b0:90:1f:59:f9:
         8f:d2:12:cd:e1:d3:f6:5e:08:eb:ef:f0:bf:de:85:cb:bf:09:
         68:02:60:7f:4a:1a:bc:94:4e:89:30:cc:a9:f1:8c:92:a3:3b:
         2c:0a:ea:ca:d1:d4:55:db:35:88:0f:51:bd:df:54:00:f2:28:
         a8:da:b0:1a:f8:a0:bb:c1:2b:9d:f1:e6:f3:28:35:34:5d:7a:
         ca:cd:05:17:a8:af:2e:a6:37:67:71:5f:81:cf:8b:b4:9e:7a:
         ab:8a:e2:3f:8c:67:0d:ce:71:b2:be:9c:86:e1:25:e1:60:ab:
         9e:7d:b1:93:88:aa:bb:dc:a3:ff:3a:38:4f:e8:19:c8:15:0c:
         63:5f:56:8b:8f:6b:cd:87:dc:7d:8a:1f:75:0a:94:8c:f8:a9:
         75:28:c7:9e:5a:9b:42:eb:5b:5d:8c:1e:6f:ad:91:58:6e:2b:
         4d:a3:b7:d5:54:a5:09:2c:3c:a5:93:f0:3a:34:3b:21:d0:f9:
         2a:38:b7:05:a6:a8:fa:39:fc:1b:d2:3b:59:03:a3:59:89:c9:
         14:f8:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----