Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/1BuBqXyNZDvIufRxPkdgxxguJJc.roa
File:                     1BuBqXyNZDvIufRxPkdgxxguJJc.roa (raw, json)
Hash identifier:          jKb8Um3Xiey1PPhXSaX+Jqlh5Qkbr2x51jg4Kn+lcZg=
Subject key identifier:   D4:1B:81:A9:7C:8D:64:3B:C8:B9:F4:71:3E:47:60:C7:18:2E:24:97
Certificate issuer:       /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial:       0187D08701BEE887A4C65DF6B28615F7DB86
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/1BuBqXyNZDvIufRxPkdgxxguJJc.roa
Signing time:             Sun 30 Apr 2023 04:58:41 +0000
ROA not before:           Sun 30 Apr 2023 04:58:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64105
IP address blocks:        2a02:9b0:22::/48 maxlen: 48
                          2a02:9b0:25::/48 maxlen: 48
                          2a02:9b0:20::/48 maxlen: 48
                          2a02:9b0:23::/48 maxlen: 48
                          2a02:9b0:1e::/48 maxlen: 48
                          2a02:9b0:26::/48 maxlen: 48
                          2a02:9b0:21::/48 maxlen: 48
                          2a02:9b0:24::/48 maxlen: 48
                          2a02:9b0:27::/48 maxlen: 48
                          2a02:9b0:1f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d0:87:01:be:e8:87:a4:c6:5d:f6:b2:86:15:f7:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
        Validity
            Not Before: Apr 30 04:58:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d41b81a97c8d643bc8b9f4713e4760c7182e2497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:d3:db:62:66:74:cf:23:8d:40:b0:48:91:
                    70:b7:b1:2d:40:e6:d0:00:d4:fc:b3:ef:63:15:14:
                    e3:7a:db:0c:1b:5c:a4:87:29:0c:89:5a:c3:a2:64:
                    16:79:3d:70:c4:1f:db:07:c2:d0:89:f4:cf:21:fb:
                    19:34:b8:95:b7:61:27:73:23:18:33:c5:c5:c1:db:
                    75:cc:d7:9d:ac:46:d5:46:3b:2b:93:ac:bb:22:2c:
                    a2:a7:2e:e5:63:6a:90:19:af:6e:f3:25:69:05:29:
                    04:6c:01:37:f9:48:be:57:58:2a:4b:7f:14:7f:c9:
                    dd:af:07:85:c6:25:8a:7f:f3:be:9f:3a:a2:7d:a4:
                    7a:14:81:a7:0d:ae:7d:18:2e:60:03:65:b9:24:25:
                    27:58:c7:fe:f9:ef:db:14:81:ef:b6:1e:5b:63:2f:
                    81:d7:6d:6d:53:04:a8:74:f4:42:c7:e1:4b:59:1a:
                    de:f3:89:57:19:97:dd:55:59:45:1a:88:1a:bb:24:
                    20:b6:1e:87:c9:87:28:cd:cb:7f:2f:ca:04:c0:e6:
                    dc:8c:13:0c:b5:fd:f0:87:b4:18:f5:fa:5c:78:34:
                    36:a0:6d:27:3f:20:7e:c7:b1:3c:04:a4:5d:89:46:
                    89:82:87:db:e2:4f:1b:3f:7b:9e:a8:8b:db:9a:72:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1B:81:A9:7C:8D:64:3B:C8:B9:F4:71:3E:47:60:C7:18:2E:24:97
            X509v3 Authority Key Identifier:
                keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/1BuBqXyNZDvIufRxPkdgxxguJJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:9b0:1e::-2a02:9b0:27:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         22:37:9b:48:60:fa:06:99:31:e4:d3:64:75:d7:4f:0e:be:81:
         9d:cd:b9:4e:72:9c:8c:e7:ff:35:ba:5f:04:3c:db:6e:d6:1f:
         72:9d:b5:0b:91:1a:25:8c:ff:49:2c:92:8e:a0:60:bd:8d:0f:
         4a:fa:57:cf:f4:0b:f0:97:4e:d8:42:04:59:22:e9:b8:8e:50:
         12:48:77:32:d9:a8:03:b3:a9:af:42:85:7e:59:ac:67:38:2a:
         f1:d6:1e:86:66:f6:f6:28:ff:ca:55:9b:00:af:53:42:03:47:
         6b:bc:9e:be:a9:dd:ee:5c:01:e0:46:7b:aa:54:00:97:c1:31:
         3d:90:02:11:ab:0c:cc:5f:f3:0d:bb:68:98:b2:d6:bc:e9:6c:
         18:17:cc:83:85:76:fc:92:9d:85:81:26:da:0f:f6:16:7c:37:
         eb:99:a5:b0:32:0c:f1:ff:ec:26:38:e2:f5:64:cc:80:2f:3c:
         82:52:b2:4d:dc:40:cc:e1:d9:d6:2b:4a:5a:d9:91:1f:d3:31:
         f7:86:18:bd:75:51:86:68:80:47:6d:5b:2f:e0:7e:d2:8b:17:
         2c:91:21:df:0c:93:cc:33:fb:9a:5f:12:c5:16:ea:0e:39:ca:
         ab:d8:36:3c:9f:8c:53:be:80:9b:6d:bc:d1:46:8c:98:03:ca:
         94:0b:52:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----