Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa
File:                     mbqYMOrmsDUg1MN8HWmCpciKcVw.roa (raw, json)
Hash identifier:          5TTd7odnQLiPcli2kNIARpzm/DWYYC2sa4Hf9hyCS4I=
Subject key identifier:   99:BA:98:30:EA:E6:B0:35:20:D4:C3:7C:1D:69:82:A5:C8:8A:71:5C
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       018CA4C059055583E68DA99C840F118332B4
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa
Signing time:             Tue 26 Dec 2023 06:11:58 +0000
ROA not before:           Tue 26 Dec 2023 06:11:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212541
IP address blocks:        2a12:4946:4050::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a4:c0:59:05:55:83:e6:8d:a9:9c:84:0f:11:83:32:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Dec 26 06:11:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99ba9830eae6b03520d4c37c1d6982a5c88a715c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:17:5b:c3:17:fc:cc:4a:a9:b5:08:d2:a4:
                    75:ab:7d:b4:e0:3c:a5:77:62:35:5d:f4:8b:44:42:
                    49:0b:24:d1:e2:13:f7:84:ec:f2:b0:22:1a:e1:2f:
                    ff:ad:47:1b:da:d2:38:be:40:17:0a:f2:54:2d:98:
                    11:d7:e4:c0:53:c7:97:5c:a1:75:a7:96:b8:2e:75:
                    61:44:8c:26:cf:28:e4:53:d9:cb:9c:99:6a:2c:33:
                    18:42:b3:1f:53:0b:32:e9:03:45:7d:35:ab:7b:5b:
                    11:d3:ab:15:f7:92:1c:07:07:b3:95:e6:ac:36:10:
                    53:03:fa:f3:90:40:8d:91:b8:d1:b6:c7:e2:7b:22:
                    87:b8:54:d2:2d:ce:08:6d:ec:fa:05:e7:2b:24:5a:
                    e4:ad:50:f7:a4:45:85:80:7a:19:e0:ec:21:8b:03:
                    85:32:c6:49:03:ae:f1:10:8b:20:61:56:9c:32:9f:
                    4f:97:bb:b6:e1:22:46:2c:32:51:be:7f:e6:87:82:
                    04:64:cc:00:3f:50:40:c4:36:23:37:15:11:37:c2:
                    11:49:2b:2f:bb:c0:61:03:1e:94:a8:80:de:bb:95:
                    64:b3:b0:a5:90:a7:83:b9:db:71:23:b9:35:57:87:
                    1c:7a:cf:fd:c3:5a:8f:54:19:70:fb:82:eb:fe:5b:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BA:98:30:EA:E6:B0:35:20:D4:C3:7C:1D:69:82:A5:C8:8A:71:5C
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4946:4050::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:41:8e:ce:ac:c8:9c:5e:3d:89:35:30:fc:59:66:ef:3a:a4:
         0b:c6:e3:56:f7:b3:61:f3:c5:b4:dd:4d:2b:70:42:81:c9:f3:
         bd:61:43:7b:4a:0d:ed:66:37:da:fa:4b:0a:e4:f6:02:dc:9d:
         ab:0e:b6:d0:ac:c8:c2:09:b4:16:18:71:bd:8f:bc:9b:a8:26:
         a0:cb:ec:e2:55:f1:7d:fc:99:f0:7d:2e:a2:b5:be:db:b0:09:
         fc:ec:d6:7d:0e:be:73:50:c1:b8:e9:f9:ad:f3:23:ff:d8:81:
         24:38:37:ca:c0:c5:32:a5:63:fd:a9:b0:78:a8:c4:c7:f0:ce:
         45:14:a3:a9:a9:28:65:6a:e4:c3:6c:60:1f:da:69:36:e8:a6:
         0a:44:ff:a6:c7:91:dd:c3:80:05:da:4a:4e:47:cb:83:d5:b1:
         20:19:36:62:3d:ff:ed:a1:ce:4e:0d:57:d5:a2:bf:73:8a:d4:
         ba:df:07:81:e6:5e:4e:72:fe:45:9a:c6:98:db:0b:43:72:bf:
         36:74:8e:17:44:26:c3:78:75:1e:59:34:e4:cf:bd:2c:07:0e:
         d3:27:b3:66:b9:8e:96:c7:be:a8:dc:76:1b:13:18:d4:5e:85:
         e3:31:9d:32:54:c5:dc:a5:cb:7d:a0:df:92:0e:04:9f:35:2f:
         2f:66:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----