Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa
File:                     RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa (raw, json)
Hash identifier:          tgdqRAIIgGMkPPDUn3Po6xv4GDEaebx3xzH26PK/X2k=
Subject key identifier:   46:F3:0E:0F:11:39:6E:15:19:42:04:82:9B:C4:2F:EE:C8:C5:D0:5E
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       018B60B4B05DA34955821E84FE00FB6E6F99
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa
Signing time:             Tue 24 Oct 2023 08:02:16 +0000
ROA not before:           Tue 24 Oct 2023 08:02:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206873
IP address blocks:        2a0d:afc1::/32 maxlen: 32
                          2a0d:c101::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:60:b4:b0:5d:a3:49:55:82:1e:84:fe:00:fb:6e:6f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Oct 24 08:02:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46f30e0f11396e15194204829bc42feec8c5d05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:88:29:30:32:97:b6:a5:07:d5:cd:46:15:
                    fa:a1:dc:3e:b9:b3:64:b5:43:55:df:1a:2b:de:fd:
                    5b:3f:70:ff:06:3f:bd:64:2e:65:3d:45:52:54:ab:
                    98:df:1d:4d:2b:97:9b:36:32:f7:83:3f:52:5c:58:
                    79:69:aa:68:7f:bb:bd:27:88:2d:38:d7:8a:aa:17:
                    30:29:b7:92:af:ef:4e:6c:cb:df:c4:8d:dd:47:d6:
                    99:a9:0e:87:0c:ef:db:80:07:91:02:8f:13:ab:77:
                    5f:43:4d:00:10:6b:54:43:ba:e7:79:c0:4c:d0:ac:
                    93:78:21:0a:1f:4d:60:f8:b1:45:8d:05:7d:e0:90:
                    33:98:79:69:dc:34:70:4f:17:36:de:42:b6:ec:9b:
                    28:63:6e:92:08:09:dd:b6:bf:d9:ac:da:7b:7d:d5:
                    ce:f1:12:47:d7:f2:b4:78:35:fe:68:ba:37:c5:05:
                    5a:4f:74:42:26:c1:1e:50:8e:48:a4:8d:d7:9c:f1:
                    fc:2f:8d:c3:73:0b:94:fb:48:82:fd:26:44:3b:0d:
                    a8:ff:87:1c:c6:5d:25:a8:0a:bf:96:69:96:0d:ce:
                    09:9d:d6:29:5d:a1:3b:24:61:98:73:c0:65:cf:4b:
                    02:77:67:0d:45:19:cb:c8:72:84:8f:48:ff:41:f7:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F3:0E:0F:11:39:6E:15:19:42:04:82:9B:C4:2F:EE:C8:C5:D0:5E
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/RvMODxE5bhUZQgSCm8Qv7sjF0F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:afc1::/32
                  2a0d:c101::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:fa:8b:6c:74:df:fd:e4:0a:d2:4a:ab:87:84:7a:06:82:
         22:6a:bc:77:60:ed:60:8e:d6:1a:72:10:d5:e1:c6:86:38:dd:
         cb:0f:51:2d:e0:a8:26:82:78:5d:54:9f:3e:83:19:65:ba:74:
         04:6b:88:af:48:f6:de:63:b7:60:35:23:5c:82:d2:cd:61:f6:
         80:f4:2a:59:56:d5:bb:f0:54:c4:20:4d:e6:a6:c4:b4:21:5e:
         2d:08:a6:f1:ac:63:e1:76:33:3c:e8:cf:31:5a:cb:1a:7d:c4:
         29:5f:58:32:21:bf:52:ad:07:03:9e:40:5c:7c:dc:d7:ce:c3:
         d9:3b:78:4d:f3:37:06:e6:be:20:28:da:da:f8:c1:a1:b0:fb:
         0d:f6:d7:36:91:e5:a3:bd:fd:c6:e7:06:ce:cd:a8:19:6b:41:
         54:af:4b:90:3e:98:37:54:9c:3f:61:3d:b0:ef:39:b8:f8:14:
         17:31:21:d3:3a:c9:ef:1c:24:d0:85:66:7a:43:c9:c4:57:4e:
         9c:10:19:50:f5:3b:d0:14:cf:d8:cd:66:05:87:e7:0b:36:0c:
         d9:80:33:5e:ae:73:3f:44:b6:e0:6a:c0:cf:93:84:6a:40:13:
         b5:26:10:34:45:55:b6:ff:e2:20:51:ed:60:5d:b3:cf:41:92:
         9c:64:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----