Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-4dWTuKVBtkAqs1mCosNqreF4L0.roa
File:                     1-4dWTuKVBtkAqs1mCosNqreF4L0.roa (raw, json)
Hash identifier:          soGcOY9mpDxEppV7cfPuiTb6KNAJyM/weOc9G/vQ8n4=
Subject key identifier:   FB:87:56:4E:E2:95:06:D9:00:AA:CD:66:0A:8B:0D:AA:B7:85:E0:BD
Certificate issuer:       /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial:       0185BA8A44B8CA3E36A45F40C5C1B5A5FCE8
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-4dWTuKVBtkAqs1mCosNqreF4L0.roa
Signing time:             Mon 16 Jan 2023 12:25:01 +0000
ROA not before:           Mon 16 Jan 2023 12:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210756
IP address blocks:        2a03:90c0:b0::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ba:8a:44:b8:ca:3e:36:a4:5f:40:c5:c1:b5:a5:fc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
        Validity
            Not Before: Jan 16 12:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb87564ee29506d900aacd660a8b0daab785e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:e1:01:11:95:85:fb:19:0e:bc:79:74:b5:
                    88:c5:2a:20:01:1f:22:c6:89:25:30:35:7c:7b:7b:
                    82:cd:e9:6a:e8:ef:b4:2f:7a:99:00:99:c7:cd:4d:
                    ef:29:00:83:05:d4:35:50:c5:1e:bf:1c:15:fe:b7:
                    1d:27:0c:96:58:3b:cb:b5:9b:61:fe:3b:69:e4:ab:
                    7f:3c:40:e4:75:9c:98:49:91:dc:d5:0b:ea:41:f5:
                    eb:04:2e:86:50:1b:24:c6:69:62:f2:1a:27:fe:79:
                    19:10:b7:b7:e7:b9:0e:cb:c6:be:5f:b5:9e:8f:8a:
                    f3:55:58:b5:9e:e9:da:54:f9:c9:6c:c8:21:06:32:
                    1d:1b:03:b4:38:7a:c1:30:76:fa:35:37:b5:07:47:
                    ee:6d:7d:20:b7:0e:35:4a:22:5f:09:5d:3b:2a:a1:
                    a2:27:62:44:42:e4:03:b6:de:14:dc:4d:8c:5c:74:
                    b3:0f:90:af:47:3b:23:ab:f8:20:03:97:cb:1c:19:
                    b2:88:74:37:90:ef:d0:70:78:a2:47:2a:23:bc:af:
                    1c:39:f2:73:af:86:46:6c:fd:35:ec:f4:d6:b6:89:
                    9a:c9:15:f4:07:e5:61:9b:dd:23:d5:08:06:ec:cb:
                    a0:3c:8c:6d:e7:9a:da:61:24:59:a5:05:38:5d:94:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:87:56:4E:E2:95:06:D9:00:AA:CD:66:0A:8B:0D:AA:B7:85:E0:BD
            X509v3 Authority Key Identifier:
                keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/1-4dWTuKVBtkAqs1mCosNqreF4L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:90c0:b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:bb:39:77:d9:cd:6a:f4:6d:61:90:29:e0:58:1d:ed:44:
         fe:e8:d7:4d:c4:78:43:72:b4:13:65:81:0b:67:6f:75:1b:71:
         a3:16:3f:2d:b6:e6:69:70:1c:f4:b5:16:52:34:1d:0f:cc:32:
         87:8c:f3:ea:de:18:fe:4d:c0:49:f3:8b:15:c9:58:56:5f:83:
         7e:75:89:ec:29:27:6f:86:36:2e:ad:cc:ea:a6:c0:84:67:7d:
         92:e0:50:62:55:94:cc:e0:15:19:35:64:17:0d:ea:ae:f3:d5:
         f0:74:85:b8:7f:25:b7:9b:b0:c9:b1:a8:62:e0:02:84:72:bc:
         57:dd:dc:82:a5:29:81:36:68:b6:30:9a:be:83:e2:1d:e5:d1:
         d2:a3:77:a7:31:de:ad:5f:11:a4:02:dd:d7:5c:a1:ca:f4:53:
         be:fa:5d:e7:27:63:5b:ef:57:74:e1:ea:15:79:9e:39:28:ff:
         9f:d7:11:16:c9:6b:ff:80:87:17:a3:e9:5f:24:db:79:41:b6:
         a9:6e:0e:32:cc:93:0d:f5:e8:4c:5e:65:6b:22:1d:b9:18:f9:
         1e:24:96:50:05:03:c1:de:50:26:06:72:05:3a:89:80:1f:77:
         4f:c5:5b:bd:f7:88:6b:5a:3f:c1:ef:c1:fd:ce:66:ab:2a:f0:
         e3:a1:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----