Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SA_vUEdaR6aArjUYnNLuhP9Tlug.roa
File:                     SA_vUEdaR6aArjUYnNLuhP9Tlug.roa (raw, json)
Hash identifier:          0LzGvgxvZ1yo9ElJnbF4i2ae72HcCgwTqtmaZHtsTRc=
Subject key identifier:   48:0F:EF:50:47:5A:47:A6:80:AE:35:18:9C:D2:EE:84:FF:53:96:E8
Certificate issuer:       /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial:       01856D8AD7CABF1EEDF248E4DFF05CFEED64
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SA_vUEdaR6aArjUYnNLuhP9Tlug.roa
Signing time:             Sun 01 Jan 2023 13:34:53 +0000
ROA not before:           Sun 01 Jan 2023 13:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        176.221.16.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:d7:ca:bf:1e:ed:f2:48:e4:df:f0:5c:fe:ed:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
        Validity
            Not Before: Jan  1 13:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=480fef50475a47a680ae35189cd2ee84ff5396e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:b2:97:11:83:25:3b:31:26:85:86:9e:28:
                    c9:1d:04:78:dc:04:ba:80:f8:d1:8e:c6:20:d6:3d:
                    7f:d4:49:09:ca:9c:cb:a5:1c:05:a1:68:84:76:fe:
                    64:53:26:c5:31:7b:84:e3:d3:ac:e0:8b:c4:14:83:
                    a1:ac:24:e3:0a:76:96:b4:89:04:19:43:6f:ab:ce:
                    ec:4c:f3:8c:4b:21:fc:63:cc:cd:3a:85:32:8a:12:
                    8c:d4:76:5c:99:ef:da:0c:fe:95:0f:6f:5e:78:0d:
                    74:50:89:11:2e:26:0a:28:22:b8:eb:d9:dd:73:b1:
                    ef:53:3c:57:f6:6d:d9:a4:f6:a4:bd:a1:20:d2:26:
                    c1:01:fc:29:c4:17:90:e1:ed:9c:1f:76:06:f8:58:
                    3d:10:1d:33:ab:1b:2f:20:ea:06:72:b5:61:e5:00:
                    f1:43:87:4b:dd:d3:68:58:7c:ae:69:bd:42:e8:b3:
                    3e:66:de:5f:69:e3:98:bf:e8:d4:30:77:64:e8:93:
                    9c:6f:cd:58:21:f0:6a:b6:bb:20:0b:f0:96:1b:30:
                    cf:fd:d1:2c:8f:bc:3c:b1:02:70:a9:6a:e3:b7:fa:
                    55:08:3b:b1:4e:78:b7:ea:7a:b3:de:34:e3:51:36:
                    c4:24:d4:f8:c5:ac:fd:2f:be:ad:7d:43:33:70:6f:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0F:EF:50:47:5A:47:A6:80:AE:35:18:9C:D2:EE:84:FF:53:96:E8
            X509v3 Authority Key Identifier:
                keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SA_vUEdaR6aArjUYnNLuhP9Tlug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.221.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:03:51:5a:85:c9:6e:1e:6c:c3:86:6c:9e:52:04:4c:72:
         16:d0:9c:ec:bf:68:ef:c3:09:d9:6a:71:89:3a:f8:35:fd:22:
         43:84:cd:41:0f:03:6b:a4:ef:f3:4c:40:42:c1:7d:8d:df:47:
         fa:5a:35:39:9d:d4:ed:f1:1c:49:d9:31:d4:5e:1e:b1:17:ab:
         68:b2:6f:90:35:bf:88:32:77:42:6a:af:b7:d9:c8:6f:d8:80:
         46:24:f7:2b:bc:c3:25:26:3a:5d:7a:aa:55:30:ed:36:65:74:
         01:53:e5:2d:b3:83:de:57:8f:66:12:01:5c:d9:ca:bb:ec:11:
         6c:96:9b:48:65:08:eb:5e:f5:80:1a:e1:67:1d:59:2e:2b:38:
         26:a9:39:2c:f9:74:17:db:22:27:79:58:77:4a:fc:89:ab:a9:
         cb:e7:6d:2f:bd:85:1d:76:06:7f:5a:d0:0c:9d:61:4b:73:77:
         bd:53:3d:78:d5:fe:75:b4:67:ad:ea:88:ba:db:e5:b8:d8:57:
         e9:af:72:e5:5a:dd:d9:ab:58:0c:e5:6e:dd:d8:bf:2f:bf:77:
         aa:38:e9:19:eb:e0:c4:6c:12:97:fd:58:99:7a:05:71:db:0c:
         3c:67:f9:3f:ee:a5:46:cb:2f:b7:88:da:a7:7f:27:b2:9c:fc:
         42:f1:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----