Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZIeaHN5V_yKDGQEW1Y3inQHwMPg.roa
File:                     ZIeaHN5V_yKDGQEW1Y3inQHwMPg.roa (raw, json)
Hash identifier:          nglURHHdK0wsXts8Xq7D3SzH5/X9hBjIQBI86/gUXIo=
Subject key identifier:   64:87:9A:1C:DE:55:FF:22:83:19:01:16:D5:8D:E2:9D:01:F0:30:F8
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       018AD54F6E8DFBE03EA800C27D53D7FF6AEC
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZIeaHN5V_yKDGQEW1Y3inQHwMPg.roa
Signing time:             Wed 27 Sep 2023 06:24:27 +0000
ROA not before:           Wed 27 Sep 2023 06:24:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396356
IP address blocks:        2a0e:4206::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d5:4f:6e:8d:fb:e0:3e:a8:00:c2:7d:53:d7:ff:6a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Sep 27 06:24:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64879a1cde55ff2283190116d58de29d01f030f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:52:40:0e:40:cd:9f:03:09:26:df:84:b5:
                    a6:16:6e:60:0a:7a:82:4e:71:cd:d9:bd:6a:90:0d:
                    e1:de:14:63:9a:de:2a:33:b9:a4:8f:78:32:f6:a3:
                    59:e1:fb:7d:7c:54:ab:0e:0a:83:14:14:83:66:2a:
                    66:12:ef:c9:b0:e5:1e:c1:bd:1a:01:4e:c8:c8:a2:
                    04:b3:7f:fb:1b:c1:28:21:84:b7:ad:5a:d5:a8:9d:
                    50:24:0c:c3:cb:8c:4e:b2:d9:dc:e1:b6:4d:97:5d:
                    d5:6b:b7:7f:c7:3b:ca:13:d8:da:8d:a8:0f:eb:11:
                    3b:47:28:f0:67:a6:ec:4d:1c:4a:b6:b5:10:97:5b:
                    8e:27:48:81:3b:8b:39:9f:83:9b:f3:fe:63:8a:d4:
                    fb:bd:ff:3b:93:4a:71:de:f0:b2:e4:a0:41:05:8d:
                    c5:03:98:1e:26:fc:39:72:f4:ef:2f:6d:64:f7:6f:
                    05:fb:58:f1:aa:3a:c4:25:2b:24:50:92:6f:cb:1c:
                    7a:88:8f:94:7d:91:61:ac:08:df:ab:7b:19:c4:98:
                    90:cc:81:38:08:bc:d8:89:48:83:9f:a2:b4:b2:5c:
                    c4:ca:c6:09:08:9e:1a:3d:4b:55:da:1e:f4:b9:87:
                    ff:8a:84:fe:df:9a:99:61:15:a7:20:fe:f0:d5:9d:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:9A:1C:DE:55:FF:22:83:19:01:16:D5:8D:E2:9D:01:F0:30:F8
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZIeaHN5V_yKDGQEW1Y3inQHwMPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4206::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:40:49:24:a5:08:ee:4b:7a:ed:6e:9c:14:16:33:c0:86:8d:
         04:6a:4a:91:b5:cf:d6:06:37:34:70:01:f5:17:db:73:f2:16:
         91:23:3b:72:16:c4:c1:25:72:4a:65:3c:d7:4a:93:79:ba:3f:
         4b:0c:5b:9e:5e:c2:12:99:ef:1d:08:f7:4d:d7:4e:fb:87:52:
         94:43:9b:2c:9d:01:d6:1a:aa:dc:00:45:6b:79:26:b7:90:41:
         fe:e5:35:f3:81:69:aa:e8:21:fc:84:ac:38:2a:ca:0c:6c:01:
         b9:29:ef:ae:8e:e5:fd:01:99:a3:5f:70:53:17:5c:4a:10:ba:
         dd:cf:d4:3a:d0:03:10:63:88:7d:47:dd:31:43:24:8e:26:e9:
         6f:a7:b3:ab:0f:41:e5:52:c3:d5:5f:56:5c:9b:19:39:84:9c:
         b8:d2:a5:47:91:2b:ee:5c:2d:3a:e9:d0:c7:d3:05:4b:f6:d0:
         d8:61:a4:82:82:c2:9c:88:e3:01:3f:6c:e3:8f:30:8b:5d:c7:
         36:0b:a9:f6:58:19:42:e7:e0:b9:d4:b7:23:3d:5f:03:c2:78:
         ab:97:d3:67:60:03:62:48:87:b3:fd:b8:a9:e8:99:b9:b3:2b:
         ca:ea:0b:db:d9:49:93:2c:b3:5b:2b:ba:e2:58:5d:41:78:9d:
         d7:67:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----