Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa
File:                     GfbTc61yb7_CmXqcgMiviz-eBCo.roa (raw, json)
Hash identifier:          hxpPP9VsB7TQVCDgfpKYFNecAZd5zf6gyIO13HZkWco=
Subject key identifier:   19:F6:D3:73:AD:72:6F:BF:C2:99:7A:9C:80:C8:AF:8B:3F:9E:04:2A
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       0186598637255D75B66B450C6D3E4EA1744B
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa
Signing time:             Thu 16 Feb 2023 09:20:13 +0000
ROA not before:           Thu 16 Feb 2023 09:20:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137409
IP address blocks:        2a0c:b6c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:59:86:37:25:5d:75:b6:6b:45:0c:6d:3e:4e:a1:74:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Feb 16 09:20:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19f6d373ad726fbfc2997a9c80c8af8b3f9e042a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:a9:9e:83:5c:29:e1:98:68:9d:65:2f:ed:
                    e5:ad:87:30:39:48:72:d4:e7:b3:02:2b:81:d6:25:
                    9a:01:79:c0:62:b2:76:32:5f:44:47:f5:77:71:3e:
                    44:e9:98:cc:71:21:46:cd:f7:36:02:ec:63:4f:ee:
                    53:2e:8f:93:0b:24:fe:b3:26:26:57:bd:b0:b8:9f:
                    09:c4:3d:63:87:d2:46:30:8b:18:b1:0f:1b:8d:ec:
                    ec:f3:9b:81:01:0d:4e:c9:2b:2f:2e:ec:dc:cd:71:
                    2c:dc:89:6f:5f:3a:cc:24:21:dc:48:8c:d1:c8:e6:
                    04:94:d1:58:1b:60:80:c5:62:21:78:27:65:6b:04:
                    fc:02:a8:0d:b5:3e:1e:51:fb:d9:5d:d2:77:24:95:
                    0e:cf:d8:b5:e0:37:56:d0:9b:dc:79:7f:22:d8:1e:
                    8c:4d:cc:a1:de:58:de:d6:45:7f:82:77:ce:77:b7:
                    9b:8b:dd:23:91:80:92:82:54:f6:90:11:df:f5:67:
                    eb:b7:d1:b1:4c:1a:8b:f0:17:ca:37:76:57:e9:76:
                    65:c7:f6:e2:8b:2a:bc:75:dd:7d:16:62:11:09:83:
                    b8:56:cd:17:e7:e9:c3:e7:e5:48:b9:a3:eb:54:40:
                    35:51:2b:5f:23:56:bf:ae:d6:84:43:9b:1d:a7:72:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:D3:73:AD:72:6F:BF:C2:99:7A:9C:80:C8:AF:8B:3F:9E:04:2A
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/GfbTc61yb7_CmXqcgMiviz-eBCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:6c:56:40:26:0b:90:00:92:b5:a5:bc:70:1e:ce:be:f2:
         71:4b:2f:8f:1b:82:e8:92:db:8c:ee:ea:ef:b7:c1:38:2c:b5:
         4d:ad:94:c1:49:58:4f:35:03:a9:ac:2c:c6:e5:4f:b6:c2:3b:
         74:d1:a0:af:8a:19:b1:3c:8f:77:f5:95:6b:5c:30:09:ac:22:
         05:fc:95:c3:3f:fb:d0:46:ab:a1:f0:1e:03:4b:87:21:e0:a1:
         09:04:16:3b:c0:44:22:61:e3:40:45:f3:45:83:0a:7c:41:f3:
         2a:0d:fb:4e:ea:71:3c:3d:d8:70:e8:c3:ac:37:65:be:47:1d:
         96:ea:f1:7f:21:ca:1e:b0:a6:84:40:5c:55:dc:c5:ef:42:d1:
         cb:2a:17:b4:fa:78:fe:67:dc:7d:1f:71:1e:36:1f:13:2f:03:
         2a:d9:44:01:e3:35:49:d8:ad:45:c5:ef:cb:ac:73:29:a1:56:
         8d:41:4d:3a:73:dd:7c:e7:11:ee:00:5d:fd:ca:f3:14:1f:ae:
         aa:31:64:f9:52:68:2b:4d:e6:74:68:aa:28:1d:a7:00:52:0f:
         31:32:73:84:8d:4b:8f:35:77:07:53:48:53:f6:db:39:fa:c9:
         71:75:24:6c:d8:24:1f:ab:34:57:61:74:15:a6:9f:17:35:c9:
         56:9e:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----