Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa
File:                     OPAbhTJkztSbQ4TBKQO5stRXVto.roa (raw, json)
Hash identifier:          GM+Q18PbLdzaojVlco9BsaSuHsdc5SV8BORJLLUFvR8=
Subject key identifier:   38:F0:1B:85:32:64:CE:D4:9B:43:84:C1:29:03:B9:B2:D4:57:56:DA
Certificate issuer:       /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial:       01867D7DBB0A73A04020EDC67FD853FB28D3
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa
Signing time:             Thu 23 Feb 2023 08:57:17 +0000
ROA not before:           Thu 23 Feb 2023 08:57:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2001:678:934::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:7d:bb:0a:73:a0:40:20:ed:c6:7f:d8:53:fb:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
        Validity
            Not Before: Feb 23 08:57:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=38f01b853264ced49b4384c12903b9b2d45756da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:7c:74:e8:3c:0a:29:80:31:a1:15:04:c4:
                    24:e0:1a:70:aa:df:d5:cf:c1:3e:ca:4f:6a:9d:1a:
                    3e:e9:c3:01:31:20:13:76:5a:3a:89:1f:b6:40:1a:
                    b4:d3:b7:ec:cc:d2:b1:93:da:ab:6e:83:05:2f:22:
                    28:9c:49:94:79:02:e7:4f:ca:3a:f8:83:9d:32:c2:
                    a9:dd:56:ec:c4:49:1d:dc:0a:a3:3f:bd:59:c0:8c:
                    2e:18:61:36:32:64:ac:76:36:eb:50:7d:c1:4b:dd:
                    2c:3a:ba:26:b7:9f:7f:bc:b5:9f:75:95:f9:4b:e2:
                    49:e4:f1:d5:fc:c2:8f:68:eb:d8:42:1d:f3:48:46:
                    5a:93:c3:73:4a:a1:87:80:eb:9c:b0:20:dc:47:5b:
                    de:10:65:cd:94:ed:ba:2f:e0:3f:c5:9e:24:32:9b:
                    81:fd:ed:c4:da:ff:b7:41:c6:46:4b:2e:13:7b:5e:
                    81:78:3d:55:39:8c:98:9c:82:f2:59:a4:6f:9b:5b:
                    e5:09:3a:15:67:e9:83:0a:e3:1d:d2:4f:ac:b1:35:
                    2b:4f:fe:1e:e1:90:04:22:59:e7:ba:21:75:34:19:
                    d8:68:9f:91:07:a4:15:fb:5f:fa:b9:fd:5e:05:4c:
                    a6:7f:54:98:01:17:6a:ee:b3:95:00:80:15:28:8d:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F0:1B:85:32:64:CE:D4:9B:43:84:C1:29:03:B9:B2:D4:57:56:DA
            X509v3 Authority Key Identifier:
                keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:934::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:49:5a:83:71:fd:1d:17:d3:1c:cc:55:5c:0f:f5:dc:e2:ea:
         e1:bd:11:c3:18:96:1d:12:95:e6:ca:f5:e5:77:e1:66:47:a7:
         28:44:96:26:2b:c2:e4:c8:5e:cd:2c:d6:4d:09:2f:b0:4e:81:
         99:b3:20:45:0d:39:bd:52:0c:f2:59:f5:96:fb:a3:13:dd:96:
         dd:a8:b1:06:aa:e8:f0:39:a8:0a:8f:e4:4b:bc:d7:e5:cf:8a:
         98:9f:5f:3c:f5:c9:a0:3d:60:d1:56:0b:10:e0:6a:db:a5:fa:
         48:22:f8:80:52:0d:cd:93:f3:a7:c7:5b:7e:fd:8e:fd:1e:68:
         c0:b7:18:bd:cf:25:42:37:ca:61:ed:31:43:e2:49:04:06:97:
         a3:c3:d8:cc:e1:fb:38:d6:a2:14:53:64:c3:fa:5c:fe:a2:07:
         a2:56:15:09:23:4f:fe:fc:1a:bb:82:d2:c8:c6:09:b5:34:25:
         e9:c6:ed:e3:86:42:76:ce:36:53:c3:62:1a:31:8d:1c:14:08:
         83:59:a0:ec:e0:9c:f3:c0:a4:c9:3e:60:76:da:86:f4:ab:5e:
         0c:0a:13:07:73:e7:f8:46:76:da:ff:21:83:0c:91:7f:fd:28:
         e4:92:47:cd:29:8a:70:e8:f6:2e:cb:1a:ab:3b:75:d9:e4:83:
         19:39:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----