Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa
File:                     W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa (raw, json)
Hash identifier:          QE/R/qdBEGxs7udj/r3S8/s0oX8Y2DlV6tUyBiOtLWs=
Subject key identifier:   5B:F6:01:2E:E2:C9:DF:57:EB:49:6B:DC:1D:FD:5B:55:0D:D1:7E:00
Certificate issuer:       /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial:       0185B8B6D64759436C623CBA28566BDBAE4A
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa
Signing time:             Mon 16 Jan 2023 03:54:28 +0000
ROA not before:           Mon 16 Jan 2023 03:54:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200368
IP address blocks:        2001:67c:b44::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b8:b6:d6:47:59:43:6c:62:3c:ba:28:56:6b:db:ae:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
        Validity
            Not Before: Jan 16 03:54:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bf6012ee2c9df57eb496bdc1dfd5b550dd17e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:2d:3d:6d:01:4e:93:5d:c5:4d:7d:7b:9a:
                    72:86:43:3c:29:df:ce:39:e7:12:b5:0c:34:fc:26:
                    b0:62:bc:87:7d:ad:3a:d8:95:a8:e3:cf:4d:77:ef:
                    29:45:b2:f6:d9:df:35:11:33:a3:55:0d:2e:9e:18:
                    ac:9d:72:d3:e9:2d:b0:ad:b2:96:62:20:d6:74:e3:
                    92:1d:4d:41:7e:74:40:e3:79:90:e8:4b:2d:0d:77:
                    06:60:37:53:32:95:f7:95:35:85:37:33:48:af:04:
                    e9:98:ce:13:3a:02:fa:c1:9b:1b:62:79:d5:f5:88:
                    6e:ff:75:ab:30:bb:48:e6:83:3f:81:2d:6f:7c:f9:
                    76:e4:38:58:ec:90:f9:09:c6:8a:4c:2d:84:4c:31:
                    d8:2d:62:81:c6:6b:59:92:19:0d:ec:95:2f:b2:68:
                    67:e1:5d:8b:32:1f:47:fe:44:c4:20:e1:d9:bd:f8:
                    de:af:4e:11:6c:7c:7e:89:18:f0:b5:58:64:11:59:
                    60:2d:61:e3:af:a0:fa:ef:df:21:b0:03:5e:3c:72:
                    ab:8b:30:4e:57:13:53:8f:2d:6e:cf:eb:5d:4e:48:
                    6a:42:68:4d:a5:96:6b:36:d7:20:3d:0c:ba:ad:f6:
                    56:5d:a6:28:d0:94:6a:ff:09:2b:c2:03:88:50:01:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F6:01:2E:E2:C9:DF:57:EB:49:6B:DC:1D:FD:5B:55:0D:D1:7E:00
            X509v3 Authority Key Identifier:
                keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b44::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:16:2a:7e:d2:6a:36:63:17:4f:eb:7d:f6:c3:fa:3c:d7:4b:
         ab:7b:bb:5c:6e:ce:b1:4e:29:ac:5e:b9:b3:44:5b:c3:c9:b9:
         6b:e2:6e:bf:71:5b:4f:cc:fb:5c:4c:1c:36:b5:40:5b:df:5c:
         f5:cd:4f:4c:54:83:b9:9c:bc:1e:93:50:fb:95:1a:6f:5d:88:
         7a:11:cc:4f:9c:7e:64:9c:7e:a5:17:e7:bd:3b:73:75:da:25:
         5d:c2:a0:77:f0:01:b8:d2:0e:bf:08:a6:ed:c9:3d:c2:50:27:
         2f:84:9c:ca:3e:37:58:9b:96:76:85:23:b9:c5:5e:69:03:6b:
         b1:a4:e7:d5:d4:f3:ff:30:49:46:77:8e:28:41:ed:56:c3:29:
         d5:b7:f3:d8:cd:5d:74:e7:05:e7:0c:f8:65:99:9d:d8:51:62:
         71:9a:9a:59:fa:e9:79:fe:b5:48:85:5c:bd:ea:86:81:e4:62:
         83:1d:cd:79:b0:45:26:c7:eb:29:fa:81:ea:6e:d3:41:84:88:
         93:cc:47:73:7c:6d:0d:c5:ce:53:3c:2c:f5:6a:a5:9b:4f:d7:
         af:fc:3d:77:f3:be:5e:0b:9a:a9:93:cd:e1:39:6c:e2:1f:ad:
         ae:bd:e4:d3:4b:c0:64:71:f5:6a:b9:ce:5c:94:65:c5:f3:30:
         ae:78:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----