Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa
File:                     6UYrcPegOXGBiEnCOJ0LfGJseWE.roa (raw, json)
Hash identifier:          Hr5/h5y7huxJnmAA65rkGExUDrtNwjQ1tBeG8S36CJg=
Subject key identifier:   E9:46:2B:70:F7:A0:39:71:81:88:49:C2:38:9D:0B:7C:62:6C:79:61
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       0188F8318A8F3A68111C422A3BEC88DC3DD0
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa
Signing time:             Mon 26 Jun 2023 14:52:56 +0000
ROA not before:           Mon 26 Jun 2023 14:52:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a04:1f42::/32 maxlen: 48
                          2a04:1f41::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f8:31:8a:8f:3a:68:11:1c:42:2a:3b:ec:88:dc:3d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Jun 26 14:52:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9462b70f7a03971818849c2389d0b7c626c7961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:4c:0a:9b:e2:42:64:5a:b1:cd:5c:c3:99:
                    3f:b1:01:ec:1d:cc:ae:cf:b3:38:48:5b:59:6d:81:
                    a2:b9:62:43:e7:32:08:d2:3b:b5:00:29:dc:49:13:
                    70:c1:5c:55:b5:48:d8:de:b9:67:e5:e8:f7:e8:48:
                    ca:46:f8:9f:6e:da:44:e5:7b:46:5d:e9:4a:94:6b:
                    d1:29:4d:bd:3f:50:1d:97:d4:09:b2:d9:20:c6:5f:
                    d1:b8:21:71:93:09:76:7a:34:e3:49:e3:33:e7:a8:
                    de:8d:01:7f:e0:82:f5:63:fe:9d:01:c3:9f:01:00:
                    ac:32:05:4c:34:00:48:de:8a:c0:88:94:5c:1c:18:
                    de:83:90:62:0f:9a:9d:2e:1c:69:5c:7c:48:7f:93:
                    02:8d:e4:c5:73:cd:94:ce:a9:45:e4:02:d9:51:a4:
                    3c:93:22:33:83:09:d7:1d:68:03:8d:d4:38:a3:63:
                    5a:2b:8f:3e:2a:a4:02:ee:d6:a2:3e:d7:11:84:b5:
                    80:9b:4f:b4:13:18:eb:0a:7e:d4:92:98:c7:1d:ee:
                    17:9a:97:7b:41:ef:1b:c9:e4:9b:a5:14:c2:2e:ca:
                    3c:7d:27:a7:b7:ac:96:58:a5:fa:22:d1:22:35:e3:
                    71:e0:21:72:c2:f4:e1:f3:9d:54:d7:69:5d:f3:20:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:2B:70:F7:A0:39:71:81:88:49:C2:38:9D:0B:7C:62:6C:79:61
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/6UYrcPegOXGBiEnCOJ0LfGJseWE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1f41::-2a04:1f42:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:b4:82:d7:58:47:6c:89:2e:18:47:51:12:da:d9:65:c3:
         ff:fa:9e:21:db:02:82:87:c0:2d:0e:19:74:6a:34:f5:7f:27:
         73:17:1a:64:01:c8:05:27:36:d6:cb:f9:b4:a0:34:d2:03:c9:
         22:90:fd:23:fa:bd:8e:3a:4b:be:3c:39:73:5f:9d:62:92:99:
         1d:bc:30:a0:e0:bf:96:bb:6b:24:91:ad:f0:f5:09:16:b7:56:
         54:c3:0b:e3:60:25:bf:fd:47:a7:71:98:b9:9c:be:d2:db:9f:
         db:5d:6e:ac:2f:eb:26:75:84:97:f0:9a:38:08:3c:2b:9c:b4:
         70:da:87:21:fd:80:4b:d2:ff:2f:da:0e:56:55:c1:61:00:50:
         1c:66:f4:03:11:6b:b8:20:ea:62:e2:cd:4c:c1:59:21:51:47:
         f0:32:b1:58:8b:1f:a7:32:72:d0:53:86:33:f5:5a:50:8f:34:
         48:95:1b:e3:df:a2:8d:6f:e7:30:b9:df:d0:20:1a:69:52:29:
         7a:df:98:c8:d5:ed:66:4f:c3:ec:1a:05:0a:69:85:d5:00:00:
         a6:df:30:28:33:5f:01:c5:20:ae:87:32:fc:8e:03:5c:9b:99:
         99:18:b5:bc:f8:18:3c:f7:7e:43:7b:cf:1b:4d:54:68:a2:f5:
         5a:8e:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----