Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa
File:                     VoXytln2yi8hQymhxbisJywbuMc.roa (raw, json)
Hash identifier:          ucSaj/3kEizragt3PlaWmBggPsK2hwdoS57Z+F/PkrI=
Subject key identifier:   56:85:F2:B6:59:F6:CA:2F:21:43:29:A1:C5:B8:AC:27:2C:1B:B8:C7
Certificate issuer:       /CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Certificate serial:       01856F8251B583F135FC13F4984191158C22
Authority key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa
Signing time:             Sun 01 Jan 2023 22:44:49 +0000
ROA not before:           Sun 01 Jan 2023 22:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24956
IP address blocks:        2001:67c:1978::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:51:b5:83:f1:35:fc:13:f4:98:41:91:15:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
        Validity
            Not Before: Jan  1 22:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5685f2b659f6ca2f214329a1c5b8ac272c1bb8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:a7:7e:13:ea:fa:5b:f9:15:d5:81:51:6d:
                    96:c5:c6:8c:fa:72:78:f2:b2:a3:8a:e7:90:55:25:
                    97:c0:f5:b2:4d:a8:8d:d0:16:3d:08:f3:9f:19:29:
                    93:65:a4:70:14:08:27:34:df:b8:4e:52:f9:bb:19:
                    b0:33:65:da:e7:54:dc:65:a8:ce:7e:c9:36:60:74:
                    85:2a:78:e5:aa:ad:2f:85:ce:44:e3:21:64:16:51:
                    e7:91:3a:9d:54:7d:6c:de:67:b4:6a:af:de:5e:7d:
                    1d:7e:10:9b:3f:a4:fe:9d:e6:28:5a:34:c4:c3:9e:
                    47:b2:e8:29:f5:22:ef:92:fd:24:2b:84:04:fe:2c:
                    ef:63:5b:f2:36:df:cf:65:56:5b:fb:02:5c:82:d2:
                    b4:57:04:5b:d5:4c:38:ec:09:d0:55:a0:8b:6b:3f:
                    45:9b:1a:4a:09:31:77:62:e1:26:b3:f6:fb:05:a5:
                    50:c1:b5:ef:45:5b:54:04:09:44:3e:ea:d2:88:7c:
                    16:2d:45:7e:70:0a:29:aa:2a:72:a9:e1:28:fb:df:
                    c9:1f:39:18:04:08:fb:4c:db:15:d9:cb:d1:b3:f5:
                    26:f8:0a:11:d7:e6:a9:9d:10:f5:07:36:88:1a:06:
                    76:cd:7e:b6:da:14:af:c7:70:62:f1:26:95:9d:51:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:F2:B6:59:F6:CA:2F:21:43:29:A1:C5:B8:AC:27:2C:1B:B8:C7
            X509v3 Authority Key Identifier:
                keyid:57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1978::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:7d:45:34:87:01:34:e8:fd:f8:29:d2:09:be:13:76:25:
         4a:bd:18:5f:fe:92:8f:fe:72:29:d8:16:07:50:73:8b:14:6d:
         f7:fa:f1:cb:4a:0e:01:8a:d6:1a:bb:82:9d:e7:bf:3c:99:d8:
         ef:a6:d2:09:3f:2e:2d:5d:be:73:4a:d0:b4:7f:f8:8b:42:16:
         30:58:53:b6:67:20:db:37:e2:b5:58:c4:36:65:87:bb:34:94:
         36:4c:92:55:f2:19:a5:41:10:e5:30:0f:33:b6:76:cc:36:f8:
         6a:b0:62:6a:da:6b:32:21:11:3c:1b:29:74:4e:28:fb:4f:24:
         34:fa:a0:97:88:fc:e9:de:cd:a2:ec:bf:a2:9f:24:6f:63:5c:
         51:1b:42:38:8c:6b:d4:de:06:12:45:72:f2:3b:55:49:eb:f6:
         f9:8b:f4:c0:87:85:2e:54:8b:2e:23:e4:33:d2:6f:e1:40:27:
         5c:c1:23:5c:cc:b7:8b:a4:51:48:68:82:f2:8c:77:b8:17:65:
         bb:dd:4c:11:a0:95:b3:f7:84:f7:bd:19:10:67:92:6a:7d:1c:
         71:97:93:03:13:4d:9c:e8:08:9f:7e:ac:44:73:8d:b9:7b:46:
         e2:72:d2:31:4f:79:6a:35:d2:d5:6f:92:1d:65:eb:e3:e4:1c:
         de:c0:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----