Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/wXG75DsnsR5zmr6TbXuVXcQXlZI.roa
File:                     wXG75DsnsR5zmr6TbXuVXcQXlZI.roa (raw, json)
Hash identifier:          lIro8Wj4gKJHu4nhTWZCHSeyaeExIFXPGPj9697jcAg=
Subject key identifier:   C1:71:BB:E4:3B:27:B1:1E:73:9A:BE:93:6D:7B:95:5D:C4:17:95:92
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       01856ED4A7B592040FD7D4A3C1F23766BB9C
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/wXG75DsnsR5zmr6TbXuVXcQXlZI.roa
Signing time:             Sun 01 Jan 2023 19:35:08 +0000
ROA not before:           Sun 01 Jan 2023 19:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211184
IP address blocks:        2a12:4946:4000::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:a7:b5:92:04:0f:d7:d4:a3:c1:f2:37:66:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Jan  1 19:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c171bbe43b27b11e739abe936d7b955dc4179592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:4a:ec:e5:d3:09:f7:a0:dd:ea:73:90:bb:
                    24:00:bc:98:cd:96:e8:65:04:48:c4:95:25:6e:f1:
                    b9:ff:d9:66:84:07:1f:c9:85:09:71:2f:65:91:34:
                    d5:ef:41:39:b7:41:e8:15:64:f8:ee:3f:24:43:c5:
                    a7:7c:02:0a:f2:50:10:99:b1:6e:44:42:a9:ce:df:
                    da:f7:09:42:15:5b:0e:b7:d6:0c:f3:e3:50:d7:82:
                    9e:f3:e3:a4:4e:da:e5:d6:13:4d:23:84:2c:c4:c5:
                    c1:8c:c8:3b:be:59:65:3f:e3:33:d4:98:64:5f:dd:
                    f9:f8:b7:2d:d2:c4:d6:fe:73:c8:26:bc:74:bc:a3:
                    33:11:e0:e7:94:7d:86:00:e0:ab:ea:38:20:eb:e5:
                    a3:20:e9:ab:d0:09:9f:9c:d2:70:df:e5:b1:c6:b8:
                    6c:9f:0f:48:24:95:74:94:15:98:23:f7:06:61:a1:
                    f2:43:ab:ca:97:94:11:57:b6:f0:9a:03:31:1a:a7:
                    45:94:f6:a3:37:95:6d:60:00:f8:ec:94:78:b0:fe:
                    7f:2e:64:04:a0:83:3a:b5:f5:a5:b8:75:d6:6f:e8:
                    6f:7c:22:48:24:7b:a7:a6:24:dd:67:ab:c9:a1:06:
                    94:76:5b:a7:9e:67:b7:a7:27:f9:f4:c2:a7:84:75:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:BB:E4:3B:27:B1:1E:73:9A:BE:93:6D:7B:95:5D:C4:17:95:92
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/wXG75DsnsR5zmr6TbXuVXcQXlZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4946:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:8b:67:2f:53:c6:a4:f5:73:31:79:21:f2:d1:94:8e:82:
         b2:f8:f0:40:b4:7e:fb:b3:ac:17:f8:3a:b8:13:9e:ac:4d:95:
         8a:d0:fa:ad:3c:f5:25:0c:d9:ec:7a:f3:f2:89:2f:4c:c7:84:
         a7:f2:88:72:3c:e3:2d:d1:8e:c2:7e:b1:68:ca:e5:f9:cf:02:
         d2:17:85:ed:c3:9a:42:c7:05:ef:79:64:ad:9f:27:60:73:bb:
         bd:10:a4:00:97:d5:a6:52:69:45:c8:07:09:55:a4:57:76:bf:
         a7:61:cc:a6:55:8e:22:da:91:ab:fd:23:1f:30:8c:13:eb:2e:
         0e:d8:1c:5e:f2:e5:28:60:d2:44:3d:ef:9a:d1:1f:15:81:07:
         0a:52:98:68:b1:82:eb:9d:14:54:dc:c7:51:16:18:49:47:83:
         a1:fe:90:e6:81:59:ca:08:0c:fe:db:b0:14:8b:db:71:81:04:
         f4:a0:b4:93:2e:9a:43:1e:4b:c9:c9:5e:b8:8b:f3:4c:11:d3:
         be:f0:1b:d9:fc:10:b7:74:9b:72:27:7f:6f:f2:23:09:4a:13:
         67:b2:50:51:34:5d:ef:04:bf:4c:35:06:c3:a7:6e:f2:f6:1f:
         e6:93:e9:55:19:d2:b8:b0:27:71:df:ca:18:64:c9:1c:70:43:
         01:b0:14:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----