Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tDtGAiaoYg_3_GcJyV-s9O-rEcc.roa
File:                     tDtGAiaoYg_3_GcJyV-s9O-rEcc.roa (raw, json)
Hash identifier:          0+S+qrMk+WITtWtUZLqEqmb780Vf/R7cd5yvfx7AKRk=
Subject key identifier:   B4:3B:46:02:26:A8:62:0F:F7:FC:67:09:C9:5F:AC:F4:EF:AB:11:C7
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E526F9DF50AB978E9820E7996EBEC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tDtGAiaoYg_3_GcJyV-s9O-rEcc.roa
Signing time:             Mon 02 Jan 2023 06:14:50 +0000
ROA not before:           Mon 02 Jan 2023 06:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204633
IP address blocks:        2a0c:b641:8d0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:52:6f:9d:f5:0a:b9:78:e9:82:0e:79:96:eb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b43b460226a8620ff7fc6709c95facf4efab11c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:ac:77:3a:9c:47:28:38:9c:db:4c:28:30:
                    96:1a:c9:8a:d4:9f:d5:f1:7b:e6:1a:54:ff:3f:18:
                    08:d7:05:85:34:95:d6:a4:46:65:0e:76:0a:8e:e3:
                    dc:c6:72:c4:67:01:e8:74:97:23:52:4d:56:b9:67:
                    7e:7a:a0:2c:3b:2a:0a:e7:a2:f8:84:e0:d1:b9:61:
                    f9:66:c6:a6:3f:4e:c6:6f:2c:59:1c:c9:f4:54:e4:
                    63:7c:a2:a9:3f:39:b4:93:2c:d5:0f:04:4e:9f:55:
                    d6:01:65:c4:b1:90:af:51:cb:98:d8:88:b1:5e:3c:
                    1b:e0:e8:21:7b:02:2c:71:62:d8:5f:25:a9:67:c1:
                    41:ac:29:ab:0b:7b:7a:9e:c5:6f:5f:ef:05:36:df:
                    d9:ec:9e:cc:f4:5c:1e:08:ca:0e:62:39:92:cd:22:
                    84:f2:37:73:28:1d:eb:11:f0:3e:7a:ab:d0:2f:a0:
                    bb:f2:74:76:b6:3c:fb:23:1e:70:d3:64:dc:01:c2:
                    ec:83:3b:ed:fe:cc:e9:dc:c2:db:5a:b4:66:cf:30:
                    d5:80:7e:2b:8e:10:a4:0b:98:45:0c:31:e9:4e:99:
                    eb:bf:45:eb:8e:25:b3:c2:3a:f9:82:0d:7e:b4:8c:
                    3d:c6:49:5b:81:f0:f9:4f:98:2d:2c:52:9b:bc:52:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:46:02:26:A8:62:0F:F7:FC:67:09:C9:5F:AC:F4:EF:AB:11:C7
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tDtGAiaoYg_3_GcJyV-s9O-rEcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:8d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:b3:c3:60:5c:43:42:50:f5:77:83:13:f9:f4:08:d9:bd:
         d1:d9:2a:9d:a5:f0:1c:8e:d6:a6:d7:3b:0c:fa:67:6d:ac:cc:
         c5:64:b5:63:5a:9b:a7:22:be:5d:e5:ed:97:3a:c0:43:c3:5c:
         e2:27:37:3d:52:eb:e0:c7:b5:2c:9d:bb:ed:c7:c8:6a:db:94:
         ab:43:ce:4f:34:6f:77:05:68:b7:61:75:11:2c:bf:83:a6:52:
         b8:93:54:3a:08:2f:a6:b4:7c:a6:cf:ca:3d:8f:e8:98:82:87:
         93:49:ed:2f:c0:78:e8:18:54:d0:6b:e3:be:c3:14:ca:7d:bf:
         94:f7:f3:36:00:63:88:3b:79:9a:c3:02:af:b2:73:d3:bf:79:
         49:bc:f8:06:4d:44:eb:a7:20:3e:46:b4:94:7f:11:6b:94:ba:
         bb:dd:5e:40:ba:cc:f3:c3:85:4b:1e:3c:cb:f9:fe:41:70:6d:
         83:6b:86:2f:b1:c3:27:03:16:e0:72:b8:bd:d5:72:c9:d4:38:
         27:22:0a:32:21:87:b6:5c:8d:a3:9a:8e:99:08:ff:de:fa:2b:
         d4:bd:b3:65:25:e9:2c:11:76:53:56:a7:e2:19:e6:ad:0e:09:
         19:f9:e1:50:61:e3:cf:24:da:b3:d6:eb:42:26:bb:92:08:79:
         9b:17:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----