Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/BvkgijNewnZ1vEpe5gglHbTLaiA.roa
File:                     BvkgijNewnZ1vEpe5gglHbTLaiA.roa (raw, json)
Hash identifier:          ZSO8VShlsLC7dGYgTCgy/svEHoiweIrM76vwy19B4OU=
Subject key identifier:   06:F9:20:8A:33:5E:C2:76:75:BC:4A:5E:E6:08:25:1D:B4:CB:6A:20
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       0186C151D5F263A96E6012B6F3ECDEC92F5D
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/BvkgijNewnZ1vEpe5gglHbTLaiA.roa
Signing time:             Wed 08 Mar 2023 13:03:31 +0000
ROA not before:           Wed 08 Mar 2023 13:03:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41107
IP address blocks:        2a03:bc40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:51:d5:f2:63:a9:6e:60:12:b6:f3:ec:de:c9:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: Mar  8 13:03:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06f9208a335ec27675bc4a5ee608251db4cb6a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:17:2e:78:ac:b5:c8:8a:9c:c5:79:bc:30:
                    fc:23:b9:c2:c5:4a:7a:26:f1:5f:43:6a:33:dd:51:
                    de:80:3f:29:8d:68:fc:c5:bd:7d:a8:c3:21:85:34:
                    f0:9f:40:29:82:6d:11:d1:51:4b:05:28:31:f7:cf:
                    83:d7:b5:bc:70:ad:f8:a3:dc:ab:eb:92:37:03:1d:
                    07:b6:c1:7d:7a:15:2a:26:db:d2:ee:a2:b6:4d:df:
                    a3:d9:1d:84:2e:a6:fa:c2:e3:2e:7f:9d:f8:d5:c4:
                    15:3a:e2:51:e0:ab:6e:c3:4a:65:fe:95:d9:24:78:
                    74:64:0b:dc:b5:28:6a:c5:8a:14:09:e4:be:43:9f:
                    73:2f:36:e6:e6:6a:d5:8b:a5:e5:70:54:6f:1c:b3:
                    3e:4e:c7:20:76:91:f7:c9:3f:1c:05:2e:b6:03:ab:
                    85:e7:bb:b6:04:80:3b:c4:85:a4:b0:bf:c5:21:ce:
                    8f:b5:84:ad:d1:79:20:22:26:f4:46:69:5e:b7:8b:
                    f8:23:06:56:1a:2e:1d:13:38:2b:05:4c:f1:6c:ba:
                    c4:8e:bd:4e:80:d4:e4:b4:d8:63:c7:31:4e:72:67:
                    90:5c:85:10:3c:f3:13:f4:b0:64:70:0d:eb:8a:f9:
                    77:3d:5e:ae:94:13:90:03:46:a2:8e:4a:b5:21:7a:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:20:8A:33:5E:C2:76:75:BC:4A:5E:E6:08:25:1D:B4:CB:6A:20
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/BvkgijNewnZ1vEpe5gglHbTLaiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:bc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:62:bb:f0:36:de:93:5b:2a:85:a4:3f:ab:95:77:ca:e8:
         55:84:d9:df:df:d2:d5:88:7f:ca:17:53:af:35:c3:ee:99:f7:
         90:3e:e9:29:f0:cb:c1:bc:87:9f:63:2e:1a:7b:29:ec:05:66:
         4b:df:8c:b7:99:d0:51:5e:b8:f0:16:44:1e:16:e5:17:8c:37:
         9a:a7:d5:8e:31:d7:12:d0:ef:6b:95:51:c7:63:f4:93:c7:7f:
         33:9f:77:09:2e:f5:30:94:37:b6:0e:8d:79:a7:db:56:59:f8:
         ab:e6:fa:c8:1b:35:8e:b6:c8:b3:d6:df:b0:88:e8:2c:2d:e6:
         ac:49:48:80:cc:12:15:44:ea:f6:d8:ed:77:54:83:89:59:2a:
         4a:a6:fb:7c:94:04:48:ef:1b:d0:13:13:80:18:b5:11:bc:a4:
         b1:f2:12:ac:fd:19:db:cc:49:23:e9:0b:37:02:0d:65:ad:eb:
         02:7d:68:56:d0:1d:14:92:72:14:32:6b:66:46:0e:1a:d7:d5:
         7b:33:b5:07:76:c7:36:3f:83:a0:5c:dc:9c:bf:a0:35:4d:92:
         3f:e5:e2:b9:3f:37:75:00:c8:93:8a:9e:13:60:47:e1:6b:64:
         20:37:dd:14:1d:5a:1b:d9:0f:c0:34:16:9b:17:1c:d2:19:64:
         a6:96:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----