Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/nk5YXerc-BFKf9V9ukcks-d7yD4.roa
File:                     nk5YXerc-BFKf9V9ukcks-d7yD4.roa (raw, json)
Hash identifier:          iUljzHlRcI1HEj++rEL2Z+rmkBKqLbHAy/LpFTKxLYA=
Subject key identifier:   9E:4E:58:5D:EA:DC:F8:11:4A:7F:D5:7D:BA:47:24:B3:E7:7B:C8:3E
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       018570303E3D25F14BB006F13E50CFF2D5CD
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/nk5YXerc-BFKf9V9ukcks-d7yD4.roa
Signing time:             Mon 02 Jan 2023 01:54:47 +0000
ROA not before:           Mon 02 Jan 2023 01:54:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1132
IP address blocks:        2001:67c:2c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:3e:3d:25:f1:4b:b0:06:f1:3e:50:cf:f2:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Jan  2 01:54:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e4e585deadcf8114a7fd57dba4724b3e77bc83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:c0:9c:b2:c0:fa:c6:30:97:65:5f:76:87:
                    5c:f3:54:26:61:2c:94:d5:c2:21:93:af:3f:eb:9d:
                    4e:35:bd:12:4e:05:fa:e3:4c:3a:6c:10:bf:3c:ea:
                    88:b9:67:79:c0:b0:0e:85:76:13:83:3e:24:ad:e0:
                    fb:0a:f6:87:1b:d8:91:2a:1e:a9:26:95:f3:6c:8e:
                    f5:1d:05:07:fb:c3:2c:20:16:e5:92:64:54:b5:7b:
                    46:ad:a8:0c:24:8a:d2:2d:39:09:54:fd:f5:2d:17:
                    9a:78:3a:a8:4e:08:e5:c5:b5:8d:63:50:fd:5d:77:
                    d6:2d:15:b1:48:4b:47:ce:e4:df:1a:b1:bb:7b:e9:
                    84:d8:f2:8d:00:4b:90:4f:74:ab:a3:e9:33:71:d7:
                    54:a7:bf:25:76:70:d5:a3:45:71:b1:c7:cc:4c:d5:
                    5c:6a:8d:9c:01:4e:2e:52:cd:4a:3b:98:5c:5e:62:
                    95:a2:9d:20:6d:3e:16:d0:4a:32:36:f5:e4:a0:f4:
                    9d:8a:f6:0a:4b:77:0b:5c:f5:30:8a:73:5e:12:9d:
                    3d:5d:c1:bb:90:ec:b2:2d:10:b8:cf:87:d5:75:64:
                    6b:a8:24:f5:89:04:d3:0b:71:d0:ec:61:60:5f:34:
                    27:ce:de:a1:e4:46:e6:04:c4:07:90:07:fc:8d:49:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:58:5D:EA:DC:F8:11:4A:7F:D5:7D:BA:47:24:B3:E7:7B:C8:3E
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/nk5YXerc-BFKf9V9ukcks-d7yD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:d6:40:54:f1:cf:e3:99:ac:3b:27:3e:4e:73:02:d7:ff:b7:
         2c:be:a2:cb:43:40:64:9e:16:87:dc:5f:52:a1:6f:39:7c:dd:
         90:c8:a6:24:7a:aa:c5:4a:71:c2:65:c4:a8:f8:93:51:42:7a:
         4a:28:27:42:33:f4:15:46:9d:aa:4f:bd:3c:4d:e2:d9:e2:fb:
         ec:8a:63:46:38:16:ec:7d:7a:15:88:71:dc:43:22:fb:9e:be:
         3a:d0:56:43:dd:04:c2:3f:68:f7:96:21:67:2a:31:1c:da:fd:
         96:4f:98:2c:54:56:34:e6:0e:a7:24:8d:1b:aa:d2:0c:9a:aa:
         1f:3e:a7:f5:de:c9:60:46:bc:3e:41:fc:a1:91:7d:2d:a8:8c:
         77:53:d1:fa:0b:95:49:c2:2e:17:4e:f0:49:2c:19:1a:9d:6d:
         b8:77:99:18:33:da:56:b7:7b:62:96:8e:38:4e:7c:8a:e0:bd:
         78:c6:30:73:57:ac:21:bc:ba:f5:2b:1b:97:12:20:0c:7e:5e:
         a6:42:5b:b7:89:a1:31:92:d8:d9:9b:2a:bd:c3:03:93:15:ec:
         6e:3c:80:5d:f9:a6:53:0c:f5:ae:0a:27:76:45:91:53:ce:e2:
         07:66:a7:8d:c7:bf:ab:d9:88:93:ef:6d:8d:3a:33:43:24:95:
         b8:c9:26:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----