Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/CehoXYzbn2L4IY5cFsyyJzytQ5c.roa
File:                     CehoXYzbn2L4IY5cFsyyJzytQ5c.roa (raw, json)
Hash identifier:          uIYimeKby6TovWuHDoLzndVQHIng4+rgxSDr/+lY2jI=
Subject key identifier:   09:E8:68:5D:8C:DB:9F:62:F8:21:8E:5C:16:CC:B2:27:3C:AD:43:97
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018A757A6D559F3F87099CA3AEA4AF609F37
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/CehoXYzbn2L4IY5cFsyyJzytQ5c.roa
Signing time:             Fri 08 Sep 2023 15:47:52 +0000
ROA not before:           Fri 08 Sep 2023 15:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:75:7a:6d:55:9f:3f:87:09:9c:a3:ae:a4:af:60:9f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Sep  8 15:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09e8685d8cdb9f62f8218e5c16ccb2273cad4397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:16:23:66:a9:e8:2a:4f:dd:d7:55:f1:a0:
                    25:af:51:d4:56:9f:4f:fb:f7:dd:96:d6:da:2c:82:
                    f9:30:c2:9f:18:23:b5:77:12:d9:e8:08:16:46:82:
                    bf:f5:2a:83:0a:94:5a:2a:e7:c6:f9:2f:a5:88:6f:
                    45:c6:2c:05:19:35:57:26:db:f3:aa:50:1d:a5:d5:
                    eb:bf:a7:04:91:9c:e0:47:8b:b7:40:e9:2d:52:7e:
                    d2:1e:fe:3e:e7:76:1a:12:87:f0:d2:67:08:1a:57:
                    cd:78:62:1e:8c:d1:d9:02:55:26:60:3a:1f:bf:60:
                    18:d8:e6:0f:c4:01:5d:d2:ea:39:00:04:4f:73:87:
                    f4:22:66:b8:cf:4a:06:ba:2b:3c:9e:a2:7d:f1:79:
                    3e:03:45:a0:e1:e2:be:b6:29:e7:38:64:42:03:1a:
                    ef:a9:ba:56:9b:3b:c2:fd:d7:55:cc:ae:bb:e8:99:
                    aa:58:f0:a9:e0:f1:a2:7f:58:4e:37:66:c8:f5:f1:
                    9d:dc:f2:77:f9:41:e5:95:73:71:ca:56:e8:8d:d5:
                    e8:6c:75:5c:da:ff:c1:e8:b9:04:f7:ff:41:7f:83:
                    20:4a:9d:1c:20:a6:8b:f1:9a:4b:ad:97:df:c0:b8:
                    06:5a:eb:06:67:c8:6b:02:c5:54:81:5a:42:e6:82:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E8:68:5D:8C:DB:9F:62:F8:21:8E:5C:16:CC:B2:27:3C:AD:43:97
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/CehoXYzbn2L4IY5cFsyyJzytQ5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:65:f7:fe:7d:ff:4d:31:cb:d8:30:8b:85:54:58:e6:ab:
         28:db:06:ec:f8:52:f8:95:06:bc:d6:02:ef:64:bb:13:29:2f:
         85:bb:ec:3a:1c:be:12:98:91:6e:34:6a:cd:8e:ea:0d:1a:7d:
         c5:c6:42:fd:66:bd:0d:ea:18:2e:07:98:ac:10:c9:6c:f2:dd:
         6e:2a:10:4c:66:df:7f:7b:5b:80:71:17:8c:c7:13:0b:09:26:
         02:fc:20:6b:5b:dd:e1:92:f5:41:c9:e2:88:a9:dc:92:5e:0d:
         8b:79:a5:b9:db:c5:8d:51:f0:80:ce:71:6d:80:cf:c9:71:5e:
         63:3e:4a:9f:0b:a3:f2:ce:3b:e6:d7:51:91:3a:da:ac:cc:08:
         5c:8c:9c:c6:ee:a7:18:ca:7f:67:84:f1:0d:97:a6:55:17:78:
         ef:d2:71:1b:b7:48:b1:14:44:de:13:f5:ad:dd:f0:5b:c9:c8:
         ba:e8:52:aa:de:d8:89:9e:d6:b6:50:99:bb:f3:23:0d:0e:cf:
         84:43:06:f5:47:0a:c2:eb:c9:1e:70:3b:b3:40:a1:3b:af:e9:
         a8:8a:6c:4b:be:6d:a7:8a:b9:74:e9:68:f8:36:85:a9:16:a2:
         62:a5:3e:72:1c:f8:25:ab:da:81:8f:5a:fe:d7:c5:e9:39:8b:
         d8:d8:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----