Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/fsN1T0TcwEWAIGVdzhoPjPiabFw.roa
File:                     fsN1T0TcwEWAIGVdzhoPjPiabFw.roa (raw, json)
Hash identifier:          FRHWX3shvV1wg8yIWqUX80HpEiSKSG8qrQ7tIqu6Nu8=
Subject key identifier:   7E:C3:75:4F:44:DC:C0:45:80:20:65:5D:CE:1A:0F:8C:F8:9A:6C:5C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       01856CAF39D393BF836EC5C0B6618CE32D31
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/fsN1T0TcwEWAIGVdzhoPjPiabFw.roa
Signing time:             Sun 01 Jan 2023 09:35:01 +0000
ROA not before:           Sun 01 Jan 2023 09:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59441
IP address blocks:        2a12:9340::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:39:d3:93:bf:83:6e:c5:c0:b6:61:8c:e3:2d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Jan  1 09:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ec3754f44dcc0458020655dce1a0f8cf89a6c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:71:35:b1:11:a0:ca:6e:7f:34:ea:cd:74:
                    82:8d:35:78:74:bc:ea:df:c1:75:b5:e7:66:2c:c9:
                    22:ec:eb:66:46:60:37:f5:85:cf:7d:90:f6:d4:bc:
                    58:74:84:e0:17:e1:aa:e7:d4:5a:dd:9f:61:75:32:
                    9c:5c:14:ff:b8:ac:18:23:83:3e:2e:54:4b:f0:6c:
                    5b:0b:a7:e8:24:a9:e6:dc:46:c2:98:af:d2:e4:b0:
                    ab:a0:c3:b7:24:da:62:6e:e6:89:c6:e7:6d:1c:07:
                    c1:9e:be:60:10:9e:54:91:f1:56:3f:2b:77:40:e5:
                    b3:eb:d4:e1:e7:18:f4:57:9b:bf:82:74:28:f8:31:
                    8e:43:5d:2b:35:66:5c:1e:ef:ce:ba:e0:97:12:9e:
                    63:e9:9b:f1:04:74:2f:c3:17:ab:fe:ea:aa:b4:8c:
                    1a:f3:77:64:2d:fe:fb:1d:43:46:41:4e:41:1a:5c:
                    57:3f:a1:da:7f:07:bb:85:01:e3:98:76:59:e3:61:
                    6c:ae:a0:72:fa:82:49:41:e9:01:ef:4d:55:ef:74:
                    b9:60:38:ae:4a:ef:07:c7:8a:bd:d4:66:6c:f4:3b:
                    4c:63:96:6c:a8:47:3f:b5:cd:e8:3c:3a:bb:90:0c:
                    0d:1b:28:f4:55:1e:d1:02:b7:19:38:73:f3:79:77:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C3:75:4F:44:DC:C0:45:80:20:65:5D:CE:1A:0F:8C:F8:9A:6C:5C
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/fsN1T0TcwEWAIGVdzhoPjPiabFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9340::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:e0:a6:e7:63:da:d0:2f:9c:be:a2:53:10:16:68:04:22:06:
         92:a5:8c:06:ab:c8:08:4f:8f:52:77:a7:ac:a1:51:3f:79:7c:
         30:db:e7:72:70:93:ab:7e:e8:90:19:4a:1f:55:31:9f:c2:15:
         04:51:6e:80:0d:88:5a:78:e9:cf:13:1a:01:60:48:f4:7b:8d:
         2b:13:26:c4:82:f1:eb:b3:94:ec:46:b5:3c:19:76:24:23:f2:
         7b:e6:de:29:da:97:82:b3:18:ae:7f:65:24:e7:9d:6b:9a:ed:
         f5:1a:85:a0:3f:80:2c:b7:56:2a:2e:52:0e:03:5c:ea:19:a9:
         c4:f0:6f:54:f0:63:b3:ac:d6:cc:03:71:6d:be:46:5f:c2:67:
         d2:ed:07:12:ac:ab:8a:a6:25:ee:1a:3c:c0:6f:8d:aa:29:2e:
         d4:72:23:ac:a6:d0:aa:8c:d6:58:a9:29:ef:99:b4:17:56:a3:
         89:31:96:d5:aa:a2:be:ab:ff:ab:dd:86:b5:1d:4d:e8:a0:49:
         4c:2b:26:4a:aa:3b:f3:8c:13:e5:72:bb:f4:3c:72:0e:ed:94:
         5b:97:a2:d4:b5:20:6a:dd:b8:6a:f3:8a:2b:bb:06:48:a1:2b:
         de:f8:5a:59:3c:ad:39:08:6a:af:91:bc:b6:8b:1f:02:8a:a3:
         71:96:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----