Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa
File:                     xR60rdr-68OiQuqq_4uon8Hj5F4.roa (raw, json)
Hash identifier:          VIw9VbOMCgX0MndfOie4CZazmHjea+e3d4D2iBYGvbU=
Subject key identifier:   C5:1E:B4:AD:DA:FE:EB:C3:A2:42:EA:AA:FF:8B:A8:9F:C1:E3:E4:5E
Certificate issuer:       /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial:       01857030290F2BB837300CB785949EE18C2D
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa
Signing time:             Mon 02 Jan 2023 01:54:42 +0000
ROA not before:           Mon 02 Jan 2023 01:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31451
IP address blocks:        2001:67c:1550::/48 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:29:0f:2b:b8:37:30:0c:b7:85:94:9e:e1:8c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
        Validity
            Not Before: Jan  2 01:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c51eb4addafeebc3a242eaaaff8ba89fc1e3e45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:c0:7a:44:24:8b:62:af:bc:7d:ee:dc:cf:
                    2f:5a:83:a9:a4:2c:70:1f:77:eb:40:c3:de:54:bd:
                    6c:19:68:b0:58:96:3f:ba:ac:23:2e:cb:80:e1:9d:
                    5a:63:8f:63:ce:bb:5a:c3:74:96:f3:51:a7:0a:03:
                    93:5c:15:18:e0:91:91:2a:58:21:9f:1c:33:0a:88:
                    3c:b0:e9:1f:79:8a:de:48:0e:8e:5c:e7:fc:5a:2e:
                    84:56:81:13:4c:b3:80:74:b2:9b:8f:b0:46:31:d4:
                    73:46:91:30:8a:01:19:32:4b:fd:a5:04:61:81:2b:
                    01:cd:2f:96:1d:ff:6a:02:48:71:17:2e:d5:05:cd:
                    0a:5e:90:df:8f:94:93:10:42:b3:52:a8:61:ac:75:
                    58:a8:36:6d:7b:ac:02:68:ee:8b:81:76:f8:04:e4:
                    d9:63:db:50:7a:91:b3:65:85:b5:28:fd:5f:99:29:
                    21:68:11:27:b8:d4:fb:b2:81:ec:4a:38:0b:d2:b4:
                    b0:87:dc:87:c6:a2:9a:1a:b3:86:4e:eb:d3:8c:7f:
                    9b:8a:59:4e:d7:d4:fe:52:c0:cd:c7:5a:0b:0b:5b:
                    68:78:61:8d:56:88:89:ab:22:77:e4:08:15:83:a7:
                    73:9a:31:9d:c2:5a:40:a3:d4:5d:b3:f9:dd:77:93:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1E:B4:AD:DA:FE:EB:C3:A2:42:EA:AA:FF:8B:A8:9F:C1:E3:E4:5E
            X509v3 Authority Key Identifier:
                keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/xR60rdr-68OiQuqq_4uon8Hj5F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1550::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:08:c0:06:39:0c:ca:ed:2d:7a:29:53:a3:70:b8:c3:81:
         f6:55:51:22:b1:69:97:c9:5f:47:97:c1:1d:15:d0:e4:97:bd:
         e0:ca:19:96:d0:73:26:9a:7f:0d:4d:bf:c0:99:a8:55:eb:9f:
         08:bc:05:28:f0:72:52:a5:c8:ca:4e:39:74:62:22:a4:3d:fe:
         bc:3e:a3:7c:8b:f2:95:60:31:ac:d8:3e:37:dd:17:5c:ec:0b:
         be:23:7b:28:6a:f2:31:40:cd:80:04:53:67:60:22:57:81:18:
         08:4d:dc:98:39:8f:6d:78:9a:e6:b8:ae:56:03:80:d4:45:d4:
         13:80:0a:c6:d4:07:e6:1a:ee:52:05:a9:3d:b4:6d:6d:73:52:
         b8:fd:7f:97:f1:cf:80:2f:bf:e1:65:2e:b5:74:1d:f8:8d:96:
         73:03:8c:d2:22:e7:e2:a1:66:ec:5b:0d:bf:48:c0:79:16:f6:
         aa:08:0c:fb:16:74:f2:d1:76:5a:54:84:52:af:00:51:3a:7d:
         68:8b:ca:57:a8:2f:31:04:a7:08:29:64:ad:82:2b:90:c1:3e:
         4c:b2:95:aa:15:e6:66:3b:8f:62:a8:a2:43:f3:87:a7:cb:24:
         b3:35:25:7b:05:5d:c1:96:2c:c7:53:7f:1f:2e:dd:a0:d0:85:
         36:39:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----