Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ajLIWFuN_uM1ALMk3OQP2W2twHo.roa
File:                     ajLIWFuN_uM1ALMk3OQP2W2twHo.roa (raw, json)
Hash identifier:          /i757Dl5zMO1zmawpgnA43rs8lnU6u7bz++eJhTRqwg=
Subject key identifier:   6A:32:C8:58:5B:8D:FE:E3:35:00:B3:24:DC:E4:0F:D9:6D:AD:C0:7A
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       018572BA4E9AFB4E2F169D075BAB8FFE7DE5
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ajLIWFuN_uM1ALMk3OQP2W2twHo.roa
Signing time:             Mon 02 Jan 2023 13:44:50 +0000
ROA not before:           Mon 02 Jan 2023 13:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49183
IP address blocks:        2001:146b::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:4e:9a:fb:4e:2f:16:9d:07:5b:ab:8f:fe:7d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Jan  2 13:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a32c8585b8dfee33500b324dce40fd96dadc07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:9e:e6:ca:29:9d:68:58:ee:9d:b0:38:12:
                    25:1f:9c:fe:c6:78:56:0e:aa:9b:b0:0f:28:dc:a7:
                    d1:19:ce:e0:6d:f4:c9:79:97:e8:a1:1f:97:a9:8b:
                    80:60:70:60:62:e4:7c:c8:e7:32:96:a9:87:09:d4:
                    c6:aa:41:6d:d3:81:ad:47:f8:1e:1a:2a:9e:97:6a:
                    b1:38:af:39:01:45:9a:eb:11:71:a1:99:64:62:f6:
                    b7:11:b3:c9:ab:c3:2e:4d:d8:76:9e:d9:93:f6:ff:
                    1f:68:e1:c0:be:d0:a7:eb:9f:eb:91:ae:62:f0:be:
                    0a:8d:00:59:c3:8e:25:1f:c9:3a:fa:fb:39:6e:f9:
                    60:7c:28:ab:b6:43:92:d7:23:a3:61:5e:4d:3a:8d:
                    49:58:d3:af:90:be:9d:36:fc:3f:54:84:91:51:a7:
                    f2:8f:7a:93:92:29:02:e1:18:d7:a0:a2:77:cc:af:
                    f4:54:d7:06:bf:e3:2f:2b:64:bb:a5:6e:64:05:ee:
                    47:67:e3:1a:b5:6a:6f:a7:71:70:c1:af:bb:7a:3e:
                    46:70:a6:8c:1d:9e:7c:3c:b1:a5:28:d2:4d:06:cd:
                    2a:63:2d:0b:d8:e3:aa:ce:c1:e9:43:a9:69:3e:96:
                    a7:2e:28:1e:5d:bb:af:65:e1:60:f7:81:e8:9a:64:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:C8:58:5B:8D:FE:E3:35:00:B3:24:DC:E4:0F:D9:6D:AD:C0:7A
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ajLIWFuN_uM1ALMk3OQP2W2twHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:146b::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:17:f8:3c:c2:7f:57:d5:17:d4:a5:ca:de:ac:ef:27:c4:
         e2:62:b0:85:a4:2f:6f:2e:0e:82:85:bb:a7:eb:94:68:f5:8e:
         26:0c:4b:4e:e4:0c:4a:f7:ba:d1:30:ad:e0:7a:70:f3:d5:af:
         a5:47:d6:7f:c6:e9:40:02:fc:6f:2d:52:50:bb:72:63:8c:bd:
         79:e3:e3:70:4c:b0:69:c1:0b:05:de:b3:dc:a5:08:98:04:f2:
         3d:95:69:b7:73:b2:21:26:65:3a:91:98:76:3b:19:b6:03:4e:
         4f:4c:6a:c6:3e:e9:76:79:69:d9:60:46:d5:4a:7f:97:34:f5:
         68:e9:84:63:0d:0c:69:7d:8d:e6:cd:4c:df:3a:87:26:0c:3c:
         1a:ac:67:2e:6a:7e:ea:38:b8:40:a9:cc:25:11:57:6e:96:09:
         5a:75:a3:06:73:cd:19:17:16:97:5c:78:ff:d6:09:7e:7c:94:
         91:2d:a1:c0:bc:6e:9e:ed:33:97:57:02:83:36:36:79:04:26:
         d8:16:ca:4a:cd:d3:95:ef:d2:e7:f2:97:4d:e2:6b:7f:d9:7a:
         21:c0:93:30:76:73:42:0a:98:ce:1f:b0:2a:25:55:aa:12:a2:
         50:30:86:e5:7b:b6:8e:13:d3:c8:ba:af:6a:5b:47:75:47:2e:
         19:0f:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----