Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa
File:                     2RJY1SWSBMSKCJL2RRhxUkw6znI.roa (raw, json)
Hash identifier:          F61aHi+YIzTdomGNvqPUT30ZSUSkxLc0AK7DNEnwxNM=
Subject key identifier:   D9:12:58:D5:25:92:04:C4:8A:08:92:F6:45:18:71:52:4C:3A:CE:72
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       0189DFAEBE88FDF6DB236DFE82996B11525A
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa
Signing time:             Thu 10 Aug 2023 13:41:58 +0000
ROA not before:           Thu 10 Aug 2023 13:41:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211318
IP address blocks:        2a0b:a280:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:df:ae:be:88:fd:f6:db:23:6d:fe:82:99:6b:11:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Aug 10 13:41:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d91258d5259204c48a0892f6451871524c3ace72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:a0:a8:c7:21:b4:a1:66:b9:d9:c4:60:1b:
                    b6:71:79:75:9c:93:50:1a:ab:61:a7:1c:5a:a5:03:
                    a5:9c:f7:41:db:b3:d1:f4:01:ad:91:62:ef:e5:1d:
                    9d:49:ac:dc:4d:27:5a:47:1f:28:ec:58:00:bc:7e:
                    9b:89:16:4e:8a:e0:49:b4:e7:d3:b9:62:2c:de:ec:
                    e2:de:b5:db:05:ec:d6:91:63:9d:41:dc:72:35:bd:
                    12:47:36:0f:f4:39:65:b5:9c:dd:51:df:b1:26:aa:
                    04:d4:01:46:f6:96:46:71:30:b7:a8:52:fd:fc:35:
                    60:14:c6:8e:45:14:2b:bf:c2:67:25:05:87:ce:14:
                    81:51:86:ce:d0:92:d4:c8:59:fd:2f:3d:1a:61:5a:
                    9d:98:2b:f7:f6:50:8c:f9:fe:76:50:36:a4:b3:99:
                    52:47:08:de:61:bf:53:3e:47:80:0d:7b:8c:7c:49:
                    ca:dc:ca:da:a4:66:ac:85:eb:6f:9b:ca:ee:a4:8e:
                    59:f8:b4:ae:4f:41:fd:6d:d8:0b:36:e9:52:6e:9d:
                    be:21:a9:42:7b:2a:00:f0:31:ab:1a:86:35:5c:14:
                    56:d3:a9:70:9c:2e:15:1f:63:d9:3a:5a:1a:2c:78:
                    54:b3:62:41:8c:40:d5:f1:fe:be:80:a5:43:4e:ba:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:58:D5:25:92:04:C4:8A:08:92:F6:45:18:71:52:4C:3A:CE:72
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/2RJY1SWSBMSKCJL2RRhxUkw6znI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:a280:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:97:c4:ae:16:28:ea:47:25:c4:31:9e:9d:d8:fe:0d:d5:
         58:41:e8:51:ab:87:09:44:b5:a0:41:ac:01:62:6f:ff:db:a5:
         d3:ee:e7:db:1b:80:e1:f8:e1:36:fa:a6:3e:d3:6b:e1:f1:ee:
         04:c8:8d:5c:73:b0:a7:8a:63:73:c5:c9:b0:ae:b8:35:88:1b:
         5b:93:66:15:91:20:04:d7:73:0f:9d:ac:92:c9:ca:cd:48:13:
         a8:21:16:31:9f:76:87:14:d8:ff:3d:1b:68:73:3f:cf:c9:45:
         c1:0e:a2:eb:78:03:f1:d7:96:9b:4b:03:7c:ed:d6:31:bf:e0:
         ad:5d:4e:1f:ad:ea:f8:00:b5:14:56:4b:cb:5f:f0:0c:98:9a:
         01:41:77:ca:ed:bc:7f:72:d6:bf:6b:16:48:a6:ce:e9:63:44:
         9f:fb:f2:85:69:86:5d:87:93:a0:96:a3:30:c0:47:6f:78:3b:
         27:77:a8:7d:61:c2:70:d5:2c:68:13:1f:56:23:33:0f:47:fa:
         63:46:c9:19:56:30:45:42:03:1b:a2:96:85:c0:d4:fe:1d:b8:
         a5:26:a5:af:01:1c:74:af:c7:f1:83:cd:1d:9d:60:0e:03:21:
         f3:f5:e4:62:b1:d7:27:97:f6:e1:00:24:a5:f1:3f:c0:75:12:
         ad:61:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----