Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/7YGPnIzv7rTkIZJ6FzY0PdcR1HA.roa
File:                     7YGPnIzv7rTkIZJ6FzY0PdcR1HA.roa (raw, json)
Hash identifier:          wJ9/7m/BdnMi2vwYSfLx5l9jw9eQ1RsAkYE1wT+gWrU=
Subject key identifier:   ED:81:8F:9C:8C:EF:EE:B4:E4:21:92:7A:17:36:34:3D:D7:11:D4:70
Certificate issuer:       /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial:       018602BF78B2508082F4994C1A981D7916FB
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/7YGPnIzv7rTkIZJ6FzY0PdcR1HA.roa
Signing time:             Mon 30 Jan 2023 12:55:48 +0000
ROA not before:           Mon 30 Jan 2023 12:55:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     11938
IP address blocks:        2a12:8fc1::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:bf:78:b2:50:80:82:f4:99:4c:1a:98:1d:79:16:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
        Validity
            Not Before: Jan 30 12:55:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed818f9c8cefeeb4e421927a1736343dd711d470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:42:c2:ce:95:94:69:00:89:31:b9:7b:89:
                    37:2c:4d:6b:fe:f1:e8:f1:27:af:d4:ce:9e:a7:32:
                    5f:4a:78:8d:ec:6d:ea:c0:50:46:1d:24:e0:3d:b8:
                    99:0f:5e:c8:09:cc:f9:67:fa:89:75:01:7a:49:88:
                    07:b9:89:a1:e6:4a:7d:f2:76:2c:e7:4b:50:bb:56:
                    ac:be:fa:26:8f:92:5a:19:9d:89:a8:bc:cd:65:2d:
                    65:fc:20:5c:4b:60:46:c6:7e:19:3d:e2:00:79:a9:
                    30:c1:1f:31:ff:56:9d:f3:b4:f1:66:7d:d1:37:85:
                    70:c9:3f:0b:e6:1c:2f:76:82:e5:77:c8:51:40:eb:
                    94:3a:1f:dd:ab:fa:ad:b1:a7:43:3c:77:0e:71:35:
                    a6:98:ae:d0:17:47:c4:61:73:81:1e:56:41:7f:78:
                    51:df:51:f1:da:10:2c:e0:58:94:81:f7:fe:a9:8f:
                    b2:94:03:d7:71:11:17:36:5b:f2:84:ce:85:f9:8e:
                    95:34:31:58:70:6e:75:9c:9d:68:81:15:91:83:c9:
                    c3:96:7b:3d:43:ed:c5:b4:cd:d9:db:76:99:77:d5:
                    2d:74:67:6c:5b:e2:1c:d6:4e:b0:98:62:e7:78:89:
                    70:de:c1:7f:42:2a:f7:ab:d7:f0:c4:fb:cb:5f:8a:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:8F:9C:8C:EF:EE:B4:E4:21:92:7A:17:36:34:3D:D7:11:D4:70
            X509v3 Authority Key Identifier:
                keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/7YGPnIzv7rTkIZJ6FzY0PdcR1HA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:15:29:58:aa:a8:16:f5:f8:5b:cb:ff:8f:7b:0a:f7:10:1b:
         5a:89:ba:c7:3a:1f:d2:29:ac:be:9b:2d:f7:5a:d7:56:55:b4:
         bc:d1:a0:4c:a6:9f:b9:a4:71:0e:e7:4b:1b:95:59:e0:b4:e4:
         ad:f1:68:26:1c:65:1e:cf:66:36:e0:63:77:f2:ae:58:2b:35:
         9e:fc:b3:8d:20:a7:40:9c:99:a0:24:dd:6a:fe:6a:15:47:30:
         2c:97:78:9e:ea:e2:14:37:53:ce:51:f0:96:b4:ca:3f:3d:bd:
         aa:32:c9:dd:ca:b6:fd:91:f5:82:d2:b1:f7:99:75:93:fc:27:
         e0:c0:e4:4d:e1:df:d8:05:7f:07:02:59:fe:59:bd:35:44:5c:
         12:ab:9e:fb:12:06:20:41:2f:5f:51:06:7c:70:25:f5:77:ce:
         25:f9:bd:73:00:ab:d4:53:49:5e:8c:e9:0c:31:5a:06:63:a0:
         1c:67:66:37:9a:9e:d4:36:17:01:ff:95:4f:87:d9:1a:cf:5f:
         1a:07:b8:7e:0c:4b:75:da:72:33:3d:23:cd:b0:98:9c:8f:af:
         21:57:00:b1:cd:f9:64:1c:aa:31:f2:55:18:12:7c:04:af:59:
         7c:b4:bc:42:7d:be:3c:13:d9:80:af:b0:01:a9:d4:5f:cc:cf:
         e3:5c:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----