Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pKOlWE8ujRxxqAXTLwlbPS2X6IY.roa
File:                     pKOlWE8ujRxxqAXTLwlbPS2X6IY.roa (raw, json)
Hash identifier:          f3MlHmVyP4dN0KsJ03MMeQBJuHboSsWmlQU416wsQdk=
Subject key identifier:   A4:A3:A5:58:4F:2E:8D:1C:71:A8:05:D3:2F:09:5B:3D:2D:97:E8:86
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       01856ED4A89E6A956C831032A54EB867B1E8
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pKOlWE8ujRxxqAXTLwlbPS2X6IY.roa
Signing time:             Sun 01 Jan 2023 19:35:08 +0000
ROA not before:           Sun 01 Jan 2023 19:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211696
IP address blocks:        2a12:4946:9900::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:a8:9e:6a:95:6c:83:10:32:a5:4e:b8:67:b1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Jan  1 19:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4a3a5584f2e8d1c71a805d32f095b3d2d97e886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:25:11:ef:ce:dd:99:37:e8:43:ba:f7:23:
                    fb:b7:85:43:fe:e2:32:c6:54:9d:f3:b4:4d:82:6b:
                    2c:d9:93:75:75:5a:bd:a8:bd:ff:a7:c0:c5:84:38:
                    cf:c8:3d:c4:ba:47:ad:a0:a3:8a:e8:79:19:41:8a:
                    63:7b:d4:79:4b:0e:30:a2:41:42:5d:d1:2a:fc:f8:
                    3b:95:25:f5:0b:fc:74:9e:ec:08:ef:9d:f4:e6:74:
                    4d:d9:06:b9:70:5a:5d:0a:d5:1d:e9:d1:b1:a5:69:
                    6a:d4:7f:1e:77:a7:c2:d5:8c:1d:44:48:86:8b:09:
                    e4:e7:95:02:bb:e6:41:23:c9:43:de:d3:13:30:0c:
                    6e:d4:3e:19:4c:e6:bd:0f:49:5f:73:49:da:7c:06:
                    15:4e:d3:50:6c:be:8a:6b:c2:d0:8e:72:2d:77:00:
                    4b:31:ed:13:00:3d:65:e4:6c:da:44:c1:9f:18:8a:
                    3d:ff:44:b4:19:fb:88:96:8b:b9:01:8d:06:60:cb:
                    9f:49:87:e2:38:16:86:fb:dd:54:c5:17:e1:4a:94:
                    98:82:64:a3:1f:bb:c9:bb:42:d0:cd:4b:10:46:60:
                    00:ce:87:34:04:c6:f5:69:17:12:91:2c:61:04:61:
                    05:19:27:c8:54:93:b8:f4:db:3e:82:ab:57:c3:82:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:A5:58:4F:2E:8D:1C:71:A8:05:D3:2F:09:5B:3D:2D:97:E8:86
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/pKOlWE8ujRxxqAXTLwlbPS2X6IY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4946:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:e9:6d:3e:12:61:2f:04:f0:fe:a0:bc:4d:5b:48:22:4d:
         12:bb:c8:6a:30:2f:c8:c5:82:5d:06:70:ee:47:c8:d3:e6:95:
         d5:69:38:29:dc:1c:a0:10:da:19:79:0e:ac:ae:c0:d8:be:c4:
         3c:13:05:df:09:25:7c:a3:28:70:d0:ac:ae:47:a4:63:70:2c:
         5a:d1:3b:ac:d6:0e:3b:82:99:b1:3d:a4:05:0a:00:31:43:58:
         88:d8:60:08:57:d8:5f:be:0e:a5:e8:08:fa:61:2d:a9:12:7a:
         1f:6e:21:e4:4f:43:f7:3d:4f:9f:53:fd:3c:2c:b9:c3:eb:48:
         3e:be:52:93:2c:33:79:8d:77:93:98:74:ec:a2:45:42:8c:4c:
         4a:73:49:ea:23:4e:3b:12:31:d9:28:30:dc:2b:36:de:15:72:
         de:2f:3b:d0:d0:43:64:29:19:2e:85:df:b0:9b:13:df:74:46:
         56:36:35:5d:aa:4e:07:04:57:c7:ab:43:5e:3c:7b:59:98:74:
         9d:8f:f8:c1:17:4b:37:04:4b:2a:76:4c:88:b1:62:f3:5b:f7:
         af:69:77:26:59:2a:1d:87:52:9d:65:d5:cd:7b:d5:cc:b8:99:
         3b:e4:c4:1f:ec:ce:1a:04:e7:12:83:8e:48:be:6e:6b:f3:e7:
         b2:c5:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----