Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa
File:                     tuPVD_kVaebL5b1zH5SLNpwZb3A.roa (raw, json)
Hash identifier:          sEAlKlPkInks1ViXqeHwFLW9RNgcpxanqHEJUORDPT8=
Subject key identifier:   B6:E3:D5:0F:F9:15:69:E6:CB:E5:BD:73:1F:94:8B:36:9C:19:6F:70
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       01856D81AC62C05C0FD4C1074A39475D5DB3
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa
Signing time:             Sun 01 Jan 2023 13:24:52 +0000
ROA not before:           Sun 01 Jan 2023 13:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213027
IP address blocks:        2001:678:f70::/48 maxlen: 48
                          2001:678:f74::/48 maxlen: 48
                          2a11:a00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:ac:62:c0:5c:0f:d4:c1:07:4a:39:47:5d:5d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Jan  1 13:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6e3d50ff91569e6cbe5bd731f948b369c196f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:9f:55:78:98:b5:e7:b9:88:cd:77:fa:b2:
                    50:90:91:d0:3b:a5:06:1e:ab:41:fe:b6:d9:8f:9a:
                    f5:95:c7:48:6d:71:3e:43:2c:5d:87:e6:61:fd:91:
                    6c:bd:50:c0:28:c7:bf:c1:be:b5:3d:e2:4c:3f:3c:
                    dc:a7:c1:f9:d5:a0:05:d9:4a:33:61:f3:a4:32:d1:
                    ad:67:cf:f2:a4:38:6c:e6:7b:11:9c:0e:c9:c5:c6:
                    44:a9:49:f6:e7:ed:3c:90:b9:e8:24:b7:2d:77:34:
                    54:81:ea:8f:c4:10:e9:47:57:17:c2:0e:cb:fc:c5:
                    34:36:53:7d:a4:89:96:36:57:8c:13:9f:66:b7:9a:
                    0d:26:a9:0e:fc:48:8e:80:e7:ac:e2:87:f4:24:f2:
                    12:4a:ad:54:43:21:d5:e1:75:da:0e:be:f5:52:c0:
                    a1:f3:27:5e:76:89:9e:4f:3e:a8:c7:47:4e:16:27:
                    c2:14:34:aa:df:14:82:f5:fc:d8:10:e9:5a:38:94:
                    e4:ea:22:36:59:d0:d8:f5:b6:5b:08:9b:cc:a4:28:
                    37:83:4f:08:5a:5e:9a:a9:4d:ad:8a:30:1c:57:ac:
                    ae:25:ae:3e:e7:7f:29:ac:48:8a:06:dd:73:cc:7f:
                    aa:b4:5a:c9:f4:db:01:76:b9:5c:f5:c2:9d:12:d5:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:D5:0F:F9:15:69:E6:CB:E5:BD:73:1F:94:8B:36:9C:19:6F:70
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/tuPVD_kVaebL5b1zH5SLNpwZb3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f70::/48
                  2001:678:f74::/48
                  2a11:a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:8e:36:b4:c3:cc:78:87:3f:13:40:29:27:09:2d:08:bd:
         ac:71:d4:6b:26:64:0a:f8:bb:e7:72:6f:e2:4e:7e:81:84:a1:
         82:cc:ca:a0:b4:6c:c1:57:2c:15:2d:1f:94:94:31:7c:e2:a8:
         00:16:6d:13:d0:98:4c:84:bd:d3:5d:fb:99:5b:30:f0:2f:f6:
         21:15:93:f8:5f:90:b3:27:41:70:27:14:33:f9:76:85:ed:c0:
         33:2e:07:16:8e:bf:16:09:b5:9a:c6:81:30:48:f8:a0:a3:0a:
         8b:c6:12:36:02:ce:ac:4f:62:42:ee:44:6a:82:80:42:61:5c:
         b3:6c:42:1a:00:26:57:7c:19:d5:83:74:ac:66:92:38:5b:b6:
         a7:7a:1d:2b:6b:e0:c2:5d:48:d5:18:e9:ea:b3:e9:31:82:b2:
         50:ce:0c:96:23:44:3d:11:9d:32:95:29:9d:1c:3a:c6:b0:36:
         64:0f:b3:49:3f:88:f8:27:e6:70:3f:d8:b8:7d:8c:ef:81:2c:
         77:4e:c3:9b:a3:ee:e3:29:79:36:ca:51:ad:1d:dd:01:bb:1e:
         15:71:3b:17:e4:8e:ab:f6:1a:2f:fc:fc:94:7f:02:2a:6d:3e:
         a2:97:4a:2b:8d:75:30:5b:f3:20:92:a2:a1:42:e6:ba:4c:44:
         ef:68:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----