Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa
File:                     LiLydKxv5PmgP69-XexnIVaf-Ik.roa (raw, json)
Hash identifier:          UFYpM6d1HZ6FscU3R1Nrdnbo/fSelWrDKcyHzBYXmJA=
Subject key identifier:   2E:22:F2:74:AC:6F:E4:F9:A0:3F:AF:7E:5D:EC:67:21:56:9F:F8:89
Certificate issuer:       /CN=d24f497d157847005336b777361b1d20905c5213
Certificate serial:       01856DE63CF84DEE9AA48760B7A9699F8AFE
Authority key identifier: D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa
Signing time:             Sun 01 Jan 2023 15:14:43 +0000
ROA not before:           Sun 01 Jan 2023 15:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212985
IP address blocks:        2a0e:9b43::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:e6:3c:f8:4d:ee:9a:a4:87:60:b7:a9:69:9f:8a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24f497d157847005336b777361b1d20905c5213
        Validity
            Not Before: Jan  1 15:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e22f274ac6fe4f9a03faf7e5dec6721569ff889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:c8:fd:03:21:38:b0:2e:40:96:d4:8e:4f:
                    47:0d:e8:fd:e5:46:bf:24:75:26:9c:14:dc:66:7a:
                    53:91:11:3d:30:e5:18:fe:e7:b7:e4:03:a8:72:83:
                    8e:13:98:b2:20:76:40:86:9e:2b:44:5b:94:09:07:
                    ae:9f:31:7c:38:5c:59:39:51:f6:45:64:55:e4:66:
                    b4:9a:26:eb:a8:8d:ae:61:8c:6b:39:86:10:6d:3d:
                    7d:61:d9:a6:18:e0:1e:90:ad:f9:4f:76:45:db:16:
                    f4:24:f7:48:9a:88:55:dd:a8:ae:4b:f8:9d:3d:e7:
                    1a:3e:b5:8d:bd:de:ae:be:59:d2:72:99:7d:3c:4b:
                    21:dc:64:09:08:21:e9:37:45:8d:bd:8c:02:26:60:
                    70:b3:da:5e:dd:8e:8f:75:c7:69:b7:3b:12:ec:37:
                    73:12:db:91:4e:69:d3:6c:4a:62:28:fb:30:4f:9b:
                    77:76:9f:59:24:93:31:6c:5b:d3:0b:f6:aa:1e:99:
                    1a:7d:ca:48:a2:3a:fa:a7:a3:69:91:39:87:dc:f3:
                    98:b9:d1:31:27:59:ac:f8:ca:45:a7:c7:c2:47:c2:
                    9c:be:14:24:89:54:99:1c:1f:dc:27:29:81:e4:69:
                    68:23:8c:ea:a0:68:d2:2f:6c:79:f1:d1:37:00:71:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:22:F2:74:AC:6F:E4:F9:A0:3F:AF:7E:5D:EC:67:21:56:9F:F8:89
            X509v3 Authority Key Identifier:
                keyid:D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/LiLydKxv5PmgP69-XexnIVaf-Ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:9b43::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:71:5b:3e:e3:98:72:af:e8:70:e5:dd:cc:be:86:b3:9e:ce:
         93:83:ad:fb:28:6c:cc:23:19:04:43:1f:eb:c9:cc:3c:97:18:
         2c:29:e7:a5:eb:59:b4:1e:41:98:04:6c:fb:c2:17:96:fe:35:
         7a:3c:c1:4c:e4:3b:cf:a0:84:c6:4e:7f:41:42:44:c2:71:a9:
         d4:5b:52:32:a9:b9:88:6f:59:19:26:53:75:81:03:1f:1b:13:
         23:51:70:71:11:59:69:4f:92:01:82:05:5b:ee:9f:74:e2:94:
         64:cf:02:ca:d9:ab:e0:43:c0:b1:fa:26:11:82:a9:76:65:38:
         55:6a:4d:d0:d2:e9:b3:e5:28:28:60:e3:1e:d1:b9:96:f8:16:
         87:59:4e:05:77:de:84:95:af:eb:28:f6:96:ca:a2:9b:64:eb:
         44:dd:1d:ec:5c:89:ab:bf:7f:c2:bc:72:00:05:86:48:ad:47:
         a7:e6:53:b5:7e:0c:c8:12:29:d0:fe:12:08:c5:af:25:98:27:
         d4:38:d2:3c:28:c4:80:e3:e4:7d:3a:0d:88:0e:76:76:dd:f5:
         34:1b:1e:0d:55:4c:65:e8:87:e6:59:45:01:03:bf:d1:c9:8a:
         f4:bc:5f:7b:5a:44:73:6c:a6:d8:65:9e:a7:b0:df:35:26:00:
         60:15:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----