Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ZC6VHccSQwTC0nIH3AoQcfPWAwI.roa
File:                     ZC6VHccSQwTC0nIH3AoQcfPWAwI.roa (raw, json)
Hash identifier:          nyrGPxqjQkZ61lzpOtK9N4NtuzMVrtWBND1DQV/8efc=
Subject key identifier:   64:2E:95:1D:C7:12:43:04:C2:D2:72:07:DC:0A:10:71:F3:D6:03:02
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       01856D4AE83D73C2DC8035067E69670BE1CF
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ZC6VHccSQwTC0nIH3AoQcfPWAwI.roa
Signing time:             Sun 01 Jan 2023 12:25:03 +0000
ROA not before:           Sun 01 Jan 2023 12:25:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15585
IP address blocks:        2a07:2904::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:e8:3d:73:c2:dc:80:35:06:7e:69:67:0b:e1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Jan  1 12:25:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642e951dc7124304c2d27207dc0a1071f3d60302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:40:3c:be:7c:49:9e:02:19:ae:8e:8b:73:
                    bf:ff:fb:f6:e4:7d:09:c7:e2:1f:ad:8a:c2:f6:87:
                    72:96:cc:89:93:0b:4d:ed:57:a3:81:ed:47:c9:4d:
                    7b:5d:23:db:d4:43:c5:39:88:83:59:07:86:23:66:
                    1c:9d:8c:5a:5f:19:67:65:25:13:bc:3f:23:e4:d3:
                    b3:1a:67:31:8b:92:ff:fb:e3:ee:72:0b:c3:50:8c:
                    58:53:92:6b:44:4d:d4:fc:68:45:ac:40:78:a0:b3:
                    09:50:51:8c:63:32:5b:af:3f:b9:ba:d3:de:aa:1d:
                    02:5c:f0:46:82:26:5f:04:70:46:ca:c6:46:aa:08:
                    8d:e4:11:79:aa:a4:0c:8c:17:13:bc:03:3a:dd:0b:
                    4c:10:9e:e3:3e:cb:cf:e0:95:cb:72:a1:59:8d:4c:
                    1a:31:06:4c:bd:0f:cd:66:10:09:fa:ea:1e:e9:7e:
                    88:8e:7b:fc:47:f8:82:77:b0:6f:40:e8:e9:27:ae:
                    45:08:9c:fa:ce:10:c4:39:f3:4d:d2:c6:51:db:6a:
                    e4:7b:a1:26:b6:79:7c:81:b4:94:17:ad:ac:0d:2e:
                    ec:7f:8f:bb:63:33:23:8b:10:c8:a5:58:e6:56:b5:
                    4e:fc:1e:58:4e:4d:db:a5:30:67:82:87:49:e5:cb:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:95:1D:C7:12:43:04:C2:D2:72:07:DC:0A:10:71:F3:D6:03:02
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/ZC6VHccSQwTC0nIH3AoQcfPWAwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2904::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:62:4b:4a:ab:75:ac:bb:fc:6b:da:39:66:65:b7:a5:e5:
         e0:2b:c1:8a:43:c6:bd:70:b7:5f:e1:d7:45:ec:76:57:95:85:
         16:b0:be:21:1c:f5:ff:c3:3e:45:42:b2:6a:82:2a:69:d2:10:
         1a:c8:55:3c:e4:f3:31:f9:0b:8f:26:e1:a9:59:ad:13:50:c6:
         54:d3:1d:21:90:1a:04:06:6b:41:03:f0:d9:5f:27:8d:a5:40:
         9f:fe:36:4d:75:aa:ee:f0:87:28:d9:34:77:0a:67:82:a1:1c:
         f1:a7:55:bd:b8:67:22:e4:61:bf:c8:12:e7:1a:1c:79:86:4f:
         07:8a:89:56:cb:e3:92:82:0c:11:c2:d3:83:3c:91:45:54:c1:
         85:80:cb:6f:cf:bd:d4:8d:72:54:08:61:36:7a:9c:7f:22:7e:
         d1:98:41:5b:2b:be:4b:3d:76:27:bc:93:43:fd:b6:56:bc:fd:
         af:82:0e:17:a2:9c:98:d5:05:39:e7:08:31:43:20:56:39:35:
         ad:88:30:f3:37:bf:2e:e6:9c:76:47:cd:f7:57:83:08:9b:9d:
         9f:a7:2d:2e:cf:af:64:d6:06:5f:30:55:41:20:e7:f6:5c:e0:
         8d:55:e9:01:b0:1e:b8:a8:f9:6c:da:c1:7c:70:cd:99:2f:5d:
         cc:8b:d3:f7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtSug9c8LcgDUGfmlnC+HPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw
OTliYjgwHhcNMjMwMTAxMTIyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDJlOTUxZGM3MTI0MzA0YzJkMjcyMDdkYzBhMTA3MWYzZDYwMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVAPL58SZ4CGa6Oi3O///v25H0J
x+IfrYrC9odylsyJkwtN7Vejge1HyU17XSPb1EPFOYiDWQeGI2YcnYxaXxlnZSUT
vD8j5NOzGmcxi5L/++PucgvDUIxYU5JrRE3U/GhFrEB4oLMJUFGMYzJbrz+5utPe
qh0CXPBGgiZfBHBGysZGqgiN5BF5qqQMjBcTvAM63QtMEJ7jPsvP4JXLcqFZjUwa
MQZMvQ/NZhAJ+uoe6X6Ijnv8R/iCd7BvQOjpJ65FCJz6zhDEOfNN0sZR22rke6Em
tnl8gbSUF62sDS7sf4+7YzMjixDIpVjmVrVO/B5YTk3bpTBngodJ5ctJ4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGQulR3HEkMEwtJyB9wKEHHz1gMCMB8GA1UdIwQY
MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt
ODhkMmRmMTBkMTViLzEvWkM2VkhjY1NRd1RDMG5JSDNBb1FjZlBXQXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi
LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgcpBDAN
BgkqhkiG9w0BAQsFAAOCAQEAPkliS0qrday7/GvaOWZlt6Xl4CvBikPGvXC3X+HX
Rex2V5WFFrC+IRz1/8M+RUKyaoIqadIQGshVPOTzMfkLjybhqVmtE1DGVNMdIZAa
BAZrQQPw2V8njaVAn/42TXWq7vCHKNk0dwpngqEc8adVvbhnIuRhv8gS5xoceYZP
B4qJVsvjkoIMEcLTgzyRRVTBhYDLb8+91I1yVAhhNnqcfyJ+0ZhBWyu+Sz12J7yT
Q/22Vrz9r4IOF6KcmNUFOecIMUMgVjk1rYgw8ze/LuacdkfN91eDCJudn6ctLs+v
ZNYGXzBVQSDn9lzgjVXpAbAeuKj5bNrBfHDNmS9dzIvT9w==
-----END CERTIFICATE-----