Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sKiTjObFBpwLXK1L1y3U5Yq85c0.roa
File:                     sKiTjObFBpwLXK1L1y3U5Yq85c0.roa (raw, json)
Hash identifier:          SzqjJtJq4xojaacXtBtt/l3fcrOjGTF6lBqGmxtB6jw=
Subject key identifier:   B0:A8:93:8C:E6:C5:06:9C:0B:5C:AD:4B:D7:2D:D4:E5:8A:BC:E5:CD
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01862B63D9C8026569EA5CC4351C29B14940
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sKiTjObFBpwLXK1L1y3U5Yq85c0.roa
Signing time:             Tue 07 Feb 2023 10:20:09 +0000
ROA not before:           Tue 07 Feb 2023 10:20:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        2a0e:4201::/32 maxlen: 32
                          2a0e:4203::/32 maxlen: 32
                          2a0e:4204::/32 maxlen: 32
                          2a0e:4202::/32 maxlen: 32
                          2a0e:4205::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2b:63:d9:c8:02:65:69:ea:5c:c4:35:1c:29:b1:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Feb  7 10:20:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0a8938ce6c5069c0b5cad4bd72dd4e58abce5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:37:7b:3d:3d:58:00:9e:18:0f:83:29:e3:
                    1e:2d:b9:25:ce:41:a2:57:b2:84:de:d1:8b:53:e5:
                    3c:10:4e:33:fb:a4:2a:82:f6:05:1a:68:64:c6:19:
                    65:04:d0:e7:94:48:86:44:e7:a4:f7:62:fc:77:3c:
                    8c:1e:65:6c:64:d5:f4:2f:41:1b:7e:c4:83:c4:7a:
                    9c:03:b1:7c:cb:b2:70:86:49:2d:26:ba:d1:98:85:
                    d0:97:d4:39:8c:9e:22:ea:d3:a3:b7:5d:dd:87:6a:
                    a4:91:2b:31:f9:4d:ad:91:61:d3:a0:92:03:e4:5f:
                    49:18:e6:56:a0:cc:ba:1c:06:85:e0:90:ec:4b:11:
                    3c:db:4d:58:db:cb:00:79:22:9e:75:72:21:b1:d9:
                    d5:5f:89:45:e6:f8:bd:b5:10:d7:06:cf:cb:8b:3b:
                    cc:55:29:2d:d4:d5:51:a8:e7:b4:0b:46:67:a5:64:
                    4e:21:aa:f4:0e:e4:05:47:df:76:9e:d9:2a:c7:21:
                    b7:43:36:46:0c:a0:8a:08:3d:88:e6:28:0b:65:1b:
                    c1:86:21:15:c1:08:4e:bd:cd:a8:21:c0:2a:52:b4:
                    99:d0:2b:42:8c:80:94:bc:46:85:e8:9a:b6:a3:2d:
                    66:dd:0b:51:c9:ad:b3:96:b1:e7:c3:cc:2f:50:37:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:93:8C:E6:C5:06:9C:0B:5C:AD:4B:D7:2D:D4:E5:8A:BC:E5:CD
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/sKiTjObFBpwLXK1L1y3U5Yq85c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4201::-2a0e:4205:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:88:7d:eb:be:59:29:fc:1b:70:d4:af:29:3d:2e:7e:45:
         ee:9b:85:4a:5d:f2:74:a5:66:8d:00:45:b0:9e:0b:b5:04:eb:
         eb:91:72:2d:e2:c4:e1:1a:2b:be:7f:31:77:f4:13:40:d5:86:
         8a:3e:25:c5:a5:04:ca:aa:65:f6:0e:82:f1:a6:98:0a:51:7e:
         c6:36:60:d8:96:87:59:f7:49:a6:af:04:44:81:26:cc:58:88:
         d2:a3:04:0f:bd:de:f8:7a:38:55:30:e8:e0:69:f9:00:f4:58:
         c4:52:59:5b:31:e3:19:7e:5a:b2:70:02:d4:66:f9:d9:5d:06:
         59:10:64:5b:b4:41:58:79:8f:eb:1a:8a:cd:bc:fd:9c:af:58:
         da:0d:e3:54:45:74:21:89:5a:7e:dc:b4:13:19:a7:26:fb:93:
         c3:b3:5b:9e:c8:2e:7f:ac:95:ab:de:03:45:65:b7:fd:42:5a:
         de:ad:34:35:20:0f:03:7b:5c:64:18:52:fa:39:3f:ca:ca:55:
         e7:28:08:a4:94:ab:dc:f8:2c:b3:1d:7e:9e:7b:d8:eb:f7:b3:
         5e:10:97:0d:5e:ee:3f:98:0e:3e:a1:8b:51:cd:ed:49:5e:78:
         2e:a7:6b:bb:ed:a5:b8:44:cd:95:ce:36:ab:9a:06:5d:27:7e:
         0a:0c:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----