Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5vcimQnJOiAiBx_apZ3ypH9x4EY.roa
File:                     5vcimQnJOiAiBx_apZ3ypH9x4EY.roa (raw, json)
Hash identifier:          Msf6BdPzuVEGGBWXMQ9fM94bovwRP4iyRTEmpqs0nFE=
Subject key identifier:   E6:F7:22:99:09:C9:3A:20:22:07:1F:DA:A5:9D:F2:A4:7F:71:E0:46
Certificate issuer:       /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial:       0186DF1B007B6B560578DC272AA114D35121
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5vcimQnJOiAiBx_apZ3ypH9x4EY.roa
Signing time:             Tue 14 Mar 2023 07:52:14 +0000
ROA not before:           Tue 14 Mar 2023 07:52:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210619
IP address blocks:        2a0a:a501::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:df:1b:00:7b:6b:56:05:78:dc:27:2a:a1:14:d3:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
        Validity
            Not Before: Mar 14 07:52:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6f7229909c93a2022071fdaa59df2a47f71e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:35:ab:5e:26:67:f1:fb:74:5a:12:58:05:
                    bf:55:28:fe:28:84:d4:3e:7a:c2:99:38:fa:d4:e9:
                    d5:f9:6c:3b:c1:d8:d2:42:55:2c:84:a0:e6:49:4f:
                    3f:19:58:03:7d:6a:29:c2:d2:df:81:e6:82:dd:49:
                    cb:ce:8c:5a:69:80:c4:c0:7c:06:f8:48:89:c9:0f:
                    b7:46:08:18:ea:37:56:2c:1e:2a:dd:ff:b2:ce:7b:
                    45:ce:c0:c5:14:e3:0c:70:ca:4a:76:4d:3a:de:f3:
                    23:cd:d5:49:1c:f1:a2:79:5b:fa:20:3d:5e:8d:0b:
                    2d:9c:51:ef:c6:54:d3:9f:5d:ed:2e:c3:02:f6:4b:
                    42:fc:0a:26:a0:59:38:b3:f3:70:2a:17:41:40:f2:
                    06:8c:7e:00:57:7b:ef:d8:d8:e4:47:28:ce:d2:25:
                    66:6f:e9:98:5d:16:97:05:6d:c4:4b:07:06:80:b3:
                    54:05:8c:c2:44:69:ed:e7:4e:c4:e8:49:fd:6d:61:
                    ec:b8:7a:1b:0b:f6:26:4f:62:cd:62:fc:84:36:2e:
                    92:12:c7:68:10:02:76:e0:2e:f8:64:a0:6a:6c:81:
                    b2:33:ef:c2:36:22:a6:5c:a3:0e:2e:f8:7e:55:8b:
                    c7:46:dd:22:dc:36:54:56:6b:5d:53:56:18:df:85:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:22:99:09:C9:3A:20:22:07:1F:DA:A5:9D:F2:A4:7F:71:E0:46
            X509v3 Authority Key Identifier:
                keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5vcimQnJOiAiBx_apZ3ypH9x4EY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:a501::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:b4:c5:e3:15:2f:e2:14:38:71:48:80:9c:45:ea:22:0f:7b:
         46:ad:93:69:1f:7e:1f:62:26:2e:18:06:69:35:5b:a3:40:19:
         3e:39:fd:b5:56:08:49:e7:c4:d7:bd:4a:f7:55:b5:14:e7:98:
         cb:e3:eb:f5:fb:b9:f2:d1:82:cc:15:4b:a5:50:0e:46:ca:e7:
         34:94:64:f1:11:47:c7:c7:e0:02:16:fc:97:aa:71:8a:6c:be:
         c8:b0:33:dc:70:2d:ba:50:1f:1b:e5:b5:f6:02:31:48:97:e9:
         a5:f1:ac:56:02:26:11:6b:0c:48:5d:99:8f:d2:e3:7c:00:52:
         29:01:1c:5d:7a:ef:f9:e6:2a:f5:50:6d:71:ed:d1:c0:35:44:
         83:11:fb:10:99:35:b5:be:40:f5:a1:52:be:56:85:d9:26:5e:
         d4:d7:65:d7:ed:b7:a5:6e:f9:e2:98:fc:24:de:40:24:75:d1:
         59:30:29:88:c1:52:2e:77:0b:e3:51:ec:ad:1e:c6:64:46:6a:
         fe:e5:3d:33:31:b0:22:1c:31:50:c3:5f:8b:2a:c8:1b:52:06:
         ee:ae:dc:87:0e:f7:29:fa:c0:c4:42:2c:05:93:40:bf:09:fb:
         6d:ab:e8:d9:a9:6b:1b:78:0f:9c:bc:72:74:50:d9:15:68:44:
         a9:29:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----