Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/6AWJ-Ytl8p3hKkvLJ0eiZQtJA_k.roa
File:                     6AWJ-Ytl8p3hKkvLJ0eiZQtJA_k.roa (raw, json)
Hash identifier:          OI5j72w1Ou0ojeOgiPF3cN/5XMURriKY/QwU5BkeUM8=
Subject key identifier:   E8:05:89:F9:8B:65:F2:9D:E1:2A:4B:CB:27:47:A2:65:0B:49:03:F9
Certificate issuer:       /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial:       01856D9D402D257E5260AE79299CFA5E0E02
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/6AWJ-Ytl8p3hKkvLJ0eiZQtJA_k.roa
Signing time:             Sun 01 Jan 2023 13:55:00 +0000
ROA not before:           Sun 01 Jan 2023 13:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8995
IP address blocks:        2001:678:394::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:40:2d:25:7e:52:60:ae:79:29:9c:fa:5e:0e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
        Validity
            Not Before: Jan  1 13:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e80589f98b65f29de12a4bcb2747a2650b4903f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:41:76:ab:1f:2e:66:41:73:45:b8:c9:17:
                    14:69:33:06:cf:5a:d8:52:d6:33:87:f6:b1:e8:27:
                    78:2e:9b:78:28:5d:3a:d3:f7:25:ff:75:94:a1:ad:
                    36:d5:fe:61:cf:cc:e7:37:cb:45:ff:57:53:f0:8d:
                    da:e4:a5:88:40:d4:03:b6:35:14:ae:85:a1:d4:3b:
                    82:0c:b4:e8:96:a2:92:b3:97:2a:31:3a:a0:ee:b0:
                    f7:57:b5:13:5c:0b:0f:86:04:c9:c4:08:7d:35:91:
                    71:1e:15:ff:6e:d7:4c:f4:0f:69:30:2b:bb:6b:09:
                    45:6d:f9:ac:78:55:49:fe:eb:4e:4a:8f:04:ee:e9:
                    e0:3e:09:9b:3f:26:c0:fb:d6:54:ff:ec:71:1a:ed:
                    54:ee:80:3e:6f:05:e4:3d:ed:30:bc:a2:8c:e9:4f:
                    c0:1d:34:a3:54:f8:46:5e:93:bf:a7:37:62:e4:a7:
                    f0:08:12:e5:ab:f0:74:9b:61:58:02:73:63:81:92:
                    f7:a8:97:f6:59:57:1f:2e:f8:10:b1:df:2d:dc:06:
                    42:03:b5:30:67:b0:72:27:2b:1c:6d:96:12:dd:b4:
                    07:a8:7e:11:b6:98:bf:cd:c4:b0:23:6e:5c:92:ac:
                    9c:eb:db:56:3a:49:27:39:bd:1f:58:bc:92:48:1d:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:89:F9:8B:65:F2:9D:E1:2A:4B:CB:27:47:A2:65:0B:49:03:F9
            X509v3 Authority Key Identifier:
                keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/6AWJ-Ytl8p3hKkvLJ0eiZQtJA_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:394::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:63:a9:aa:35:b0:9c:bb:44:12:f5:d3:7a:4e:b3:00:84:45:
         3c:dd:43:75:9a:41:74:ab:5b:b5:ce:7b:77:83:29:c3:38:5f:
         b0:75:56:db:b8:ae:b4:ed:ba:72:94:48:02:8c:09:c5:dc:0e:
         5a:be:7a:8e:eb:f7:fc:02:1c:ec:05:19:f8:a7:13:85:13:13:
         4d:55:07:4d:ab:47:3d:1e:89:61:5c:55:b7:80:16:a1:51:a6:
         0f:c1:78:65:c0:4b:92:46:3b:99:03:b9:d8:77:c4:f1:17:df:
         ca:e1:91:60:d4:41:fc:e1:5d:e7:3d:e5:01:8c:16:e5:4b:53:
         d4:ec:cc:34:df:a8:ec:bc:71:3e:e5:39:f9:d1:22:e0:9b:db:
         0b:d7:7e:fc:2d:15:08:bf:87:21:df:5e:ef:82:14:f6:22:3c:
         dc:3a:7b:58:1e:b9:e8:c5:eb:e4:87:76:6d:08:45:cb:e1:a5:
         f4:59:5a:4d:37:a1:5c:15:11:46:0e:9a:8b:41:90:59:5c:7a:
         79:06:0b:88:3a:a6:a7:09:d2:de:ea:a9:20:39:0c:a7:90:20:
         91:3b:ef:ef:4f:46:c6:18:31:65:c9:71:ee:e3:58:63:67:12:
         91:20:b1:1c:bf:df:7d:81:d7:1f:26:39:b4:49:4f:f1:15:fa:
         bc:df:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----