Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/i7Fajs03neB9jGfMvDWSt80ZQOw.roa
File:                     i7Fajs03neB9jGfMvDWSt80ZQOw.roa (raw, json)
Hash identifier:          v0dar+gYCW4olPNIETjq5pHo/CF80hVHh1iV9HdxWnA=
Subject key identifier:   8B:B1:5A:8E:CD:37:9D:E0:7D:8C:67:CC:BC:35:92:B7:CD:19:40:EC
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       018AD551434820DB37903F33484FF482FBDA
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/i7Fajs03neB9jGfMvDWSt80ZQOw.roa
Signing time:             Wed 27 Sep 2023 06:26:27 +0000
ROA not before:           Wed 27 Sep 2023 06:26:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     262287
IP address blocks:        2a0e:4207::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d5:51:43:48:20:db:37:90:3f:33:48:4f:f4:82:fb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Sep 27 06:26:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bb15a8ecd379de07d8c67ccbc3592b7cd1940ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:1f:28:0d:48:fa:74:26:de:a6:30:b8:20:
                    cf:2b:fc:de:ab:b4:ae:2e:66:0c:2c:db:51:61:56:
                    77:0f:be:dd:b7:45:a7:62:b8:d7:bc:e8:29:ba:c7:
                    8a:82:c0:51:d9:7c:d0:88:62:31:d8:d9:43:c5:a6:
                    3c:62:30:6e:99:6e:98:4d:f4:d6:11:b3:11:69:93:
                    bb:e4:50:ef:01:fa:f2:35:06:45:9d:c7:a5:85:65:
                    f5:d6:71:b1:0b:8f:32:c3:5a:0a:4d:5c:0f:40:c7:
                    92:6c:45:45:29:91:3f:fd:0d:04:28:f3:ba:94:b9:
                    6d:ec:b1:0b:65:37:c4:1b:77:78:bf:c0:92:d5:be:
                    60:e0:5e:6d:57:41:94:86:6e:6d:b8:3d:fd:03:53:
                    45:c6:61:b1:58:36:80:3a:87:f8:a2:88:9b:b0:56:
                    6d:72:9d:35:5d:63:21:92:32:6d:5b:e1:ac:ff:66:
                    64:1d:a9:e2:51:5c:36:4d:48:2e:15:50:87:0d:91:
                    86:16:e8:80:94:ed:10:7c:6e:f6:41:29:5b:55:6c:
                    a2:f7:e6:1e:8b:ac:1c:c7:37:9e:f4:e1:3a:7d:a5:
                    71:f1:bf:cd:b5:1b:a3:e5:f9:90:84:e8:f5:eb:88:
                    7b:70:7c:c2:01:ca:17:ed:61:06:6c:60:8f:14:e2:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B1:5A:8E:CD:37:9D:E0:7D:8C:67:CC:BC:35:92:B7:CD:19:40:EC
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/i7Fajs03neB9jGfMvDWSt80ZQOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4207::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:50:a4:f0:35:cf:b3:23:34:70:e7:9e:66:39:ab:67:3f:
         04:1c:da:02:fa:51:2f:27:69:87:8b:e4:77:d5:85:63:27:ac:
         3c:4a:e3:22:23:49:4a:47:8c:3a:86:2f:15:2b:66:80:f3:17:
         0b:9b:0d:61:cd:29:51:58:de:29:8f:7a:3c:60:05:ad:dc:5c:
         3a:de:02:57:b6:8c:0d:2f:ce:3e:22:dd:f3:a6:b1:99:01:ef:
         20:36:45:21:8c:fe:ee:f2:3c:cb:d3:d6:bd:3d:07:51:3e:0b:
         be:35:b5:be:44:89:66:2a:28:92:47:d7:1e:9a:58:49:c5:df:
         bd:ef:0d:f0:f6:fc:de:01:4c:d3:d4:6f:8b:42:a9:75:d5:98:
         28:c0:71:ee:29:9d:96:af:f8:a8:fe:c4:85:22:77:46:7f:ab:
         a7:d5:a8:2f:07:6f:2a:a9:4d:23:14:5b:ce:ba:6d:21:37:0c:
         2d:32:9d:b2:34:ca:f3:c2:b4:7b:87:4e:fa:e5:80:7f:bf:91:
         df:d5:ad:b9:15:9e:4e:7c:c7:6d:03:00:3e:60:44:cc:e4:28:
         e9:54:ea:e7:32:69:b4:18:2f:ba:6f:b8:0b:a9:70:c8:49:9d:
         11:82:2c:13:0d:6c:0e:84:eb:3e:58:cf:68:a0:21:04:62:de:
         12:41:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----