Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/HnRRvhYe961B-WidfylUeH3Gi90.roa
File:                     HnRRvhYe961B-WidfylUeH3Gi90.roa (raw, json)
Hash identifier:          kXkjSpJC3SxztyXg1vf4XxEt7JkzVUYJhRl2hSPbX4M=
Subject key identifier:   1E:74:51:BE:16:1E:F7:AD:41:F9:68:9D:7F:29:54:78:7D:C6:8B:DD
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018B5D50C3BC08E9408DADCE7D79E02E1AD9
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/HnRRvhYe961B-WidfylUeH3Gi90.roa
Signing time:             Mon 23 Oct 2023 16:14:15 +0000
ROA not before:           Mon 23 Oct 2023 16:14:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5d:50:c3:bc:08:e9:40:8d:ad:ce:7d:79:e0:2e:1a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Oct 23 16:14:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e7451be161ef7ad41f9689d7f2954787dc68bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:22:e9:6f:f0:28:ea:31:06:97:6b:c0:28:
                    a3:ef:05:ef:aa:47:42:95:ed:57:8a:0e:a1:a9:ad:
                    e9:ad:b7:df:b9:54:2a:21:92:33:7d:8b:b2:14:9f:
                    a1:fe:21:df:c6:57:7e:07:95:e5:62:6c:13:dc:4d:
                    8b:a8:04:80:78:46:c1:6f:f9:51:a7:07:13:53:c2:
                    cc:f7:d4:8f:05:9e:63:3c:97:34:5b:6b:17:9f:19:
                    45:d8:47:b0:b2:c3:a5:54:67:00:36:f9:a5:b6:75:
                    8c:68:3f:37:2e:8f:6e:e8:18:3d:40:ef:bd:bd:9c:
                    34:fe:4d:f6:42:0c:90:67:a4:36:78:8b:e2:9e:5c:
                    b7:71:37:dd:25:23:96:c2:0d:62:b5:75:e0:c2:1c:
                    2b:39:92:4c:f2:6c:4c:6d:d4:9e:2d:25:7e:a1:72:
                    82:e0:eb:d6:50:5a:b1:01:95:d0:66:1e:23:f0:e3:
                    78:f1:1b:c5:b9:85:8a:6a:80:81:f5:c3:c4:44:34:
                    fd:1a:db:0b:ad:53:b1:bc:64:4d:4c:9d:f2:a1:98:
                    96:74:69:ba:8d:bb:30:e9:e0:68:35:0b:6d:99:fd:
                    4f:79:7c:10:59:f3:a7:f8:39:f5:d8:a5:b3:f0:93:
                    de:03:4e:fd:45:b0:2f:b9:bc:ef:88:0f:c4:e9:6c:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:74:51:BE:16:1E:F7:AD:41:F9:68:9D:7F:29:54:78:7D:C6:8B:DD
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/HnRRvhYe961B-WidfylUeH3Gi90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:14:c7:4d:bb:87:9c:d4:a8:2b:a6:d8:88:0c:29:93:5d:43:
         df:bd:c3:49:75:da:0b:d4:41:21:56:22:af:37:be:93:49:4a:
         93:27:c4:80:46:53:1b:71:95:b0:e9:a3:01:b9:b4:b5:fa:17:
         93:a6:1f:6e:c0:9e:10:86:55:dd:fb:0c:b0:1b:c7:65:02:10:
         01:8f:81:49:52:ff:05:b4:60:93:87:56:52:d4:69:e8:76:44:
         7d:83:b5:9a:91:66:a9:88:fc:b3:66:64:aa:2a:4e:30:be:48:
         27:7a:c1:bc:a4:fd:48:e2:45:ba:6c:9c:6a:da:f9:bd:ed:d7:
         cf:f8:eb:b2:3b:51:50:5f:cb:6e:30:f7:f6:a2:f9:05:d4:24:
         40:dc:cf:1b:d5:82:04:a7:2e:a2:3e:fd:3c:2d:75:e7:e2:17:
         b7:b3:98:b9:b1:f0:ee:56:22:a0:3b:53:fd:8b:8e:9c:d9:c3:
         44:b2:cd:8e:98:81:ff:99:09:ed:58:15:47:57:49:55:61:ac:
         e5:de:0b:83:df:7e:e4:8d:17:21:6f:bf:87:1c:46:51:4b:77:
         9b:cd:fc:09:05:f9:75:28:05:00:2d:ed:4e:32:25:41:9e:df:
         33:33:17:2a:c0:b1:b0:57:74:bf:e9:a5:3f:ca:30:31:7e:17:
         68:6b:53:3a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtdUMO8COlAja3OfXngLhrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmNiNzllZjU4YTFjOThlMTUxZjYwYzUxNDI2Zjc0ZWIx
YzM5MzgwHhcNMjMxMDIzMTYxNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTc0NTFiZTE2MWVmN2FkNDFmOTY4OWQ3ZjI5NTQ3ODdkYzY4YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuIi6W/wKOoxBpdrwCij7wXvqkdC
le1Xig6hqa3prbffuVQqIZIzfYuyFJ+h/iHfxld+B5XlYmwT3E2LqASAeEbBb/lR
pwcTU8LM99SPBZ5jPJc0W2sXnxlF2EewssOlVGcANvmltnWMaD83Lo9u6Bg9QO+9
vZw0/k32QgyQZ6Q2eIvinly3cTfdJSOWwg1itXXgwhwrOZJM8mxMbdSeLSV+oXKC
4OvWUFqxAZXQZh4j8ON48RvFuYWKaoCB9cPERDT9GtsLrVOxvGRNTJ3yoZiWdGm6
jbsw6eBoNQttmf1PeXwQWfOn+Dn12KWz8JPeA079RbAvubzviA/E6WzrBwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB50Ub4WHvetQflonX8pVHh9xovdMB8GA1UdIwQY
MBaAFD68t571ihyY4VH2DFFCb3TrHDk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQt
ZTlmNzlkZmJkMmU2LzEvSG5SUnZoWWU5NjFCLVdpZGZ5bFVlSDNHaTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kZDllZDEtMDJjZC00YjM1LWEzYjQtZTlmNzlkZmJkMmU2
LzEvUHJ5M252V0tISmpoVWZZTVVVSnZkT3NjT1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAJhTHTbuHnNSoK6bYiAwpk11D373DSXXaC9RBIVYi
rze+k0lKkyfEgEZTG3GVsOmjAbm0tfoXk6YfbsCeEIZV3fsMsBvHZQIQAY+BSVL/
BbRgk4dWUtRp6HZEfYO1mpFmqYj8s2ZkqipOML5IJ3rBvKT9SOJFumycatr5ve3X
z/jrsjtRUF/LbjD39qL5BdQkQNzPG9WCBKcuoj79PC115+IXt7OYubHw7lYioDtT
/YuOnNnDRLLNjpiB/5kJ7VgVR1dJVWGs5d4Lg99+5I0XIW+/hxxGUUt3m838CQX5
dSgFAC3tTjIlQZ7fMzMXKsCxsFd0v+mlP8owMX4XaGtTOg==
-----END CERTIFICATE-----