Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EMM-mj_v1cRkp6OBOcjKSdYCzu8.roa
File:                     EMM-mj_v1cRkp6OBOcjKSdYCzu8.roa (raw, json)
Hash identifier:          /nStJkYnkmV7o2+9cMICckxDD8sHgECDhAfB0jq3BBo=
Subject key identifier:   10:C3:3E:9A:3F:EF:D5:C4:64:A7:A3:81:39:C8:CA:49:D6:02:CE:EF
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       018776CC6E5E5F1BC003488DB519DA450859
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EMM-mj_v1cRkp6OBOcjKSdYCzu8.roa
Signing time:             Wed 12 Apr 2023 18:48:41 +0000
ROA not before:           Wed 12 Apr 2023 18:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205523
IP address blocks:        2a0f:8400::/32 maxlen: 48
                          2a0c:b641:2b0::/44 maxlen: 48
                          2a0c:b641:10::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jul 2023 14:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:76:cc:6e:5e:5f:1b:c0:03:48:8d:b5:19:da:45:08:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Apr 12 18:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10c33e9a3fefd5c464a7a38139c8ca49d602ceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:9f:bb:5a:ac:d5:d4:23:e1:0e:09:6f:be:
                    ed:c4:ef:72:31:78:47:68:2e:2e:3c:f2:38:02:cd:
                    06:03:4e:03:08:d0:a9:de:24:27:ea:da:0a:f4:f6:
                    f3:5b:f9:8b:80:27:e6:64:9f:4f:63:25:ea:45:4e:
                    a2:d4:90:f0:70:c6:43:b5:7d:0e:bc:70:b6:84:d8:
                    b0:74:e7:2a:41:9d:65:8d:77:22:19:65:64:5d:5b:
                    fb:0e:d6:92:57:d5:c3:ff:48:51:c8:67:38:47:b7:
                    ec:c0:3a:a5:c1:83:ad:1c:ff:a9:82:13:17:67:f0:
                    b9:12:93:f7:c1:75:d6:cd:25:55:d2:50:c6:7b:cc:
                    66:cc:58:52:a1:5f:bc:4b:fa:9d:7f:cc:36:ed:6e:
                    37:ca:ea:bc:4a:42:8f:fb:2d:8a:c9:12:b4:40:8f:
                    a8:bf:fd:c2:d3:e0:87:ab:cf:0d:bc:c6:5d:e4:47:
                    f9:15:cc:4e:97:44:2d:28:6c:e7:4d:e2:0f:37:dd:
                    87:9f:6d:52:f5:d7:c5:30:94:5d:ca:f0:ab:d0:2a:
                    ee:c3:5d:6b:9d:4a:f6:6a:15:64:1e:33:a7:76:83:
                    17:06:95:86:8e:99:0d:51:41:83:0f:c6:6f:8c:a5:
                    3b:0a:bd:c8:00:3c:1c:91:dd:7a:0f:a7:5e:ab:ac:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:3E:9A:3F:EF:D5:C4:64:A7:A3:81:39:C8:CA:49:D6:02:CE:EF
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EMM-mj_v1cRkp6OBOcjKSdYCzu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:10::/44
                  2a0c:b641:2b0::/44
                  2a0f:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:00:8c:61:4e:f8:13:2d:15:fc:cd:23:32:16:a0:be:cc:
         53:d5:f9:29:73:e9:12:a9:ea:56:09:23:a9:b4:2e:ec:ca:02:
         a4:ae:b6:8f:0a:95:f9:c2:5f:0c:1b:3f:4d:7b:97:a2:ad:25:
         c9:23:3b:47:07:b9:6b:2e:52:ec:ad:9b:43:b9:5a:d9:78:44:
         19:5c:d4:60:bc:13:19:14:a5:b8:31:ca:46:cd:ef:84:06:2e:
         c0:69:6d:b7:b1:84:dd:b6:1f:47:26:06:bb:40:5c:c9:14:38:
         46:6a:a3:e1:66:6f:fd:c7:11:c5:2c:05:13:2a:23:4b:2f:6a:
         49:55:cd:79:80:08:9e:70:bc:fc:2f:14:3e:5c:47:da:32:28:
         55:fe:a3:35:1a:63:d5:c6:e5:2f:77:c2:ba:31:aa:fc:26:2b:
         ab:a6:d0:2b:39:fc:ae:84:9b:09:83:f4:b5:18:60:dd:57:4e:
         89:52:0a:2b:12:ea:e2:1c:e5:57:42:8b:ba:ff:bd:3b:dd:f9:
         e6:a1:c2:91:cd:22:d9:e5:b5:28:9c:28:14:61:e1:8a:56:d7:
         74:f9:42:0e:ac:8c:9e:fa:87:16:8c:b0:6d:8e:ff:9a:95:e2:
         5d:a9:52:fa:92:63:4c:d6:50:4a:66:c5:98:02:3a:4c:d0:a7:
         50:97:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----