Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa
File:                     S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa (raw, json)
Hash identifier:          oPfSy2Lc9S0cfNeINuBRq22XiVg/lVCoDGL9fQrdk14=
Subject key identifier:   4B:EF:6C:7C:7D:C8:B1:CE:71:5F:33:3A:18:FB:91:74:1E:85:DE:D8
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       01856C4A6F5C7C983F2B4DF6BCFAA5E09033
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa
Signing time:             Sun 01 Jan 2023 07:44:55 +0000
ROA not before:           Sun 01 Jan 2023 07:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211970
IP address blocks:        2a04:2dc0:18::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:4a:6f:5c:7c:98:3f:2b:4d:f6:bc:fa:a5:e0:90:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Jan  1 07:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4bef6c7c7dc8b1ce715f333a18fb91741e85ded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:e0:79:60:ce:77:a3:63:92:f7:26:c2:4d:
                    eb:67:64:de:50:e9:d4:b4:75:b1:cb:0d:3d:62:7e:
                    6b:f0:ef:c6:4f:cd:9b:c4:25:d8:95:87:53:d1:e6:
                    98:df:74:6c:f9:98:cb:5e:0d:d6:5c:ad:8e:37:3a:
                    64:a4:0d:1e:90:9e:bd:e9:59:73:6a:b9:03:78:85:
                    23:9c:d3:e2:6b:61:f3:38:30:63:14:b8:fc:ee:2a:
                    b3:40:f0:f8:a4:0e:17:99:a0:b7:ba:94:23:7d:30:
                    1e:3f:17:c7:d5:17:bf:ee:aa:a2:ad:b8:eb:63:75:
                    3e:87:14:45:f0:95:20:61:85:f5:76:64:06:b2:76:
                    66:a9:c6:8b:d8:e7:e4:f6:e0:93:9c:3d:3f:c6:03:
                    74:70:74:4c:a0:38:bb:19:2c:8f:ca:56:b5:9a:d6:
                    a3:b8:4b:fd:08:14:c8:e9:a0:37:f8:c0:88:0c:86:
                    3f:f9:8c:87:a6:c3:d2:7b:8f:d2:f3:e5:6a:22:12:
                    f6:7d:e5:ad:37:94:6e:36:74:ad:94:bb:9a:d8:d9:
                    e3:3f:93:d4:5f:8c:dc:2e:aa:c9:dc:5e:68:73:59:
                    04:f9:1a:b7:d3:27:b1:c2:9c:03:19:c9:8e:44:b1:
                    d6:01:98:1c:e5:41:1b:82:b4:af:b3:0f:ab:e9:2c:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:6C:7C:7D:C8:B1:CE:71:5F:33:3A:18:FB:91:74:1E:85:DE:D8
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:2dc0:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:80:8d:e1:41:f3:e9:aa:20:e5:0d:18:d0:3d:c6:ff:72:cb:
         96:a5:ab:d8:81:94:f8:8d:d4:cf:ef:5d:7f:0e:5a:c2:07:7a:
         90:97:65:18:f0:b5:fa:5f:e2:ba:15:74:30:73:96:cd:01:89:
         b5:ae:e0:2f:ca:67:9c:51:4b:da:92:77:2e:a2:45:db:d6:5f:
         90:f9:eb:26:6a:0c:27:b9:17:1f:1d:f8:4c:ed:f5:17:1d:c4:
         b1:cf:2c:c4:d3:9d:dd:04:2c:1d:2e:11:a2:37:a9:34:18:6a:
         b2:b4:a5:55:2b:90:df:ad:5c:db:95:42:8c:74:34:a8:ba:75:
         ed:0b:68:9b:ea:59:98:b8:06:7a:ed:2c:a3:35:c1:ef:f6:b9:
         97:35:fa:99:cc:55:00:c4:20:3f:c7:77:bc:9c:6b:c7:50:ca:
         b6:89:ea:66:ae:bf:eb:b2:91:9f:55:50:dd:ab:b4:9d:97:de:
         dd:71:d9:e3:5c:28:33:f2:9c:d4:86:36:31:72:c5:c9:5e:6c:
         36:fc:48:d1:55:c0:67:be:a3:f6:a9:98:3f:1f:ea:f1:c4:30:
         33:5a:75:93:b6:ff:e1:2d:c5:0c:63:3b:c9:6e:f5:44:df:ea:
         68:99:24:af:3b:b9:fa:49:ee:a1:4d:a0:ab:cb:2f:cc:73:8a:
         cd:17:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----