Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SYb1489_Xup0irYS8ULODqdjLxY.roa
File:                     SYb1489_Xup0irYS8ULODqdjLxY.roa (raw, json)
Hash identifier:          rqMdlCwBJkJBnzYit1w5VyV+sWhq56KFPolshQmxWaA=
Subject key identifier:   49:86:F5:E3:CF:7F:5E:EA:74:8A:B6:12:F1:42:CE:0E:A7:63:2F:16
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E554A7D6AA2066FE17618D10F96FE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SYb1489_Xup0irYS8ULODqdjLxY.roa
Signing time:             Mon 02 Jan 2023 06:14:51 +0000
ROA not before:           Mon 02 Jan 2023 06:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205150
IP address blocks:        2a0c:b641:860::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:55:4a:7d:6a:a2:06:6f:e1:76:18:d1:0f:96:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4986f5e3cf7f5eea748ab612f142ce0ea7632f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:27:04:a5:8d:df:99:52:ed:b0:ea:2f:c4:
                    b1:ea:3b:2e:1f:9b:27:de:7f:67:5b:d5:88:ff:8e:
                    6f:11:ea:0b:51:fa:89:e7:2f:59:54:37:d5:7e:71:
                    d8:32:8a:f5:3c:18:b5:cf:d7:39:6c:74:39:57:c7:
                    ed:3e:1f:d4:f3:aa:7a:ba:b3:5d:12:9b:4b:f0:99:
                    82:94:db:46:4f:7c:2e:c5:0b:ad:09:e8:d4:d2:79:
                    64:ed:d7:c1:27:c8:a7:36:43:40:39:32:23:b9:d9:
                    14:fb:ee:ca:fa:3d:39:47:ce:bc:f3:7f:e0:21:a4:
                    cf:fd:ce:6c:41:a5:4f:2a:46:4d:1c:f6:8a:8b:8b:
                    48:c0:53:d6:6b:cb:a6:2b:67:de:0a:9a:dd:48:87:
                    8a:59:d3:a4:e2:0f:13:13:d4:08:8d:2c:d9:7f:c9:
                    93:99:85:a6:8f:95:3d:19:0c:e3:b6:a7:e4:36:3a:
                    34:cc:72:6a:e4:36:47:ed:bf:d9:ac:aa:a5:68:86:
                    f6:03:61:31:9e:93:04:60:1b:02:19:b9:7b:b0:aa:
                    80:b5:dc:3e:12:4a:0f:63:33:ba:12:76:02:49:a2:
                    b4:d8:bd:c8:37:ff:e3:5f:2c:c2:d5:b9:96:3c:5d:
                    af:dd:fc:37:ba:ef:17:ac:53:78:64:3a:43:4d:d9:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:F5:E3:CF:7F:5E:EA:74:8A:B6:12:F1:42:CE:0E:A7:63:2F:16
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SYb1489_Xup0irYS8ULODqdjLxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:860::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:1f:d5:c5:25:d1:46:16:96:9a:fa:be:28:f9:6a:56:03:23:
         f1:46:dc:27:6d:51:e5:3e:43:fc:35:b2:2f:9a:59:b0:7b:fb:
         36:b8:b3:02:31:9e:f3:7c:55:fa:12:6c:94:78:95:eb:de:41:
         dd:12:93:a2:f8:28:75:14:e6:86:03:3f:b1:9c:4d:cf:a5:9f:
         52:fb:b9:38:55:6b:cb:3f:47:4b:60:f7:79:dc:97:f0:9d:d1:
         dd:78:b1:d5:2f:05:c9:0b:65:27:a9:85:7d:cf:70:8d:35:78:
         96:4d:4f:0c:84:60:5b:b5:54:b1:80:f9:c7:1b:73:9d:24:e6:
         3c:60:84:5c:54:0a:fa:2a:6f:52:ca:88:4f:32:c4:04:54:81:
         e1:f9:19:0f:26:83:20:13:9f:b5:86:2b:2a:ea:ce:6f:c6:28:
         ab:64:04:e4:e3:5f:9c:04:38:b8:b3:9a:4c:37:92:63:f9:1b:
         05:50:73:e7:76:3c:6e:8e:fb:c4:bd:ba:f6:ef:2d:b6:e2:4a:
         95:60:77:b8:91:b9:e8:21:c3:64:70:82:8a:82:e9:d7:c2:83:
         7d:39:62:24:0b:15:9b:54:48:fd:f0:18:34:96:3e:52:c3:cf:
         ed:b4:e7:75:1d:0a:fe:68:4c:96:66:b4:26:79:36:33:63:4e:
         32:db:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----