Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa
File:                     K47vel1x-9kuhdlAUc-EOZX43Lc.roa (raw, json)
Hash identifier:          WDkmYLQR5LabXwicZq95iA9ClBfWsAWV3/omV/pCsZI=
Subject key identifier:   2B:8E:EF:7A:5D:71:FB:D9:2E:85:D9:40:51:CF:84:39:95:F8:DC:B7
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018586AFBA89477C6A8F08A6B783B3C438CD
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa
Signing time:             Fri 06 Jan 2023 10:45:41 +0000
ROA not before:           Fri 06 Jan 2023 10:45:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:86:af:ba:89:47:7c:6a:8f:08:a6:b7:83:b3:c4:38:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Jan  6 10:45:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b8eef7a5d71fbd92e85d94051cf843995f8dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:61:0d:89:6e:68:d7:d2:48:87:15:f2:4a:
                    17:be:42:df:b0:75:9c:f0:6f:ed:b2:40:d9:fd:7f:
                    4e:5f:95:dc:22:08:b6:c5:7d:6b:d9:56:27:55:ac:
                    39:02:9f:59:c2:2c:40:56:69:cb:7c:d8:89:fc:7d:
                    81:1d:06:e3:52:da:60:5d:99:d9:00:42:7d:9d:fb:
                    43:5d:3a:5d:b7:ae:32:7f:83:6f:51:11:fe:39:9d:
                    ae:fd:26:e7:9d:5f:0e:65:db:e2:26:9e:3b:8a:59:
                    d2:59:3b:1b:ee:2c:38:3f:eb:79:cd:e3:9d:e9:21:
                    55:d4:b8:c0:c2:ad:83:d9:cb:92:d4:cf:d4:61:52:
                    b2:ce:97:ec:6d:53:d7:c0:16:b9:76:83:90:74:0b:
                    2e:18:35:bb:53:20:fe:6b:2e:52:14:dd:93:6e:d8:
                    5b:c1:4c:cb:d4:28:08:dc:96:b4:07:39:47:a6:1f:
                    09:b3:d5:7e:d2:cf:7d:be:0d:0b:d1:66:be:b6:ce:
                    8b:ba:0f:07:76:e8:71:49:1e:f4:7f:5f:0a:f5:87:
                    47:af:ee:40:25:66:85:bb:78:6d:78:cc:a0:61:77:
                    40:32:1e:35:0d:d8:8f:06:79:f0:f9:79:e9:39:8e:
                    83:60:7c:60:fb:df:f6:58:0f:f2:d3:2d:fa:a3:13:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8E:EF:7A:5D:71:FB:D9:2E:85:D9:40:51:CF:84:39:95:F8:DC:B7
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/K47vel1x-9kuhdlAUc-EOZX43Lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:1d:20:c6:a1:2c:06:3a:27:d5:f5:a4:27:e2:f7:90:89:
         62:7b:68:e5:e6:61:63:92:fb:47:81:dd:d6:9c:de:b0:c6:b6:
         82:c7:71:ed:a3:b5:74:9b:89:7d:d9:9b:54:17:99:f7:6d:c0:
         ad:91:b2:91:36:79:2a:8b:c1:e9:06:aa:1c:78:59:57:72:df:
         32:73:20:95:0a:4e:eb:e4:c9:2a:a2:c6:76:6a:72:02:14:ef:
         89:4a:91:58:ba:ee:71:a1:3d:15:2b:e0:fb:c0:a0:00:b8:5c:
         cb:5c:77:1a:bf:cc:00:74:bc:94:46:d6:30:70:a0:5f:cd:6c:
         af:cc:59:c4:65:19:fa:39:da:fb:0c:34:cd:ea:01:05:5d:17:
         cc:a4:5c:a0:f6:1f:5c:10:7d:bf:d6:86:83:77:71:05:ba:93:
         3a:4f:8f:9c:e2:2d:fb:a4:52:81:84:25:36:68:11:6c:2d:fd:
         d8:37:9e:25:a2:2a:46:a3:5d:7e:f0:21:8a:f5:63:ca:27:7a:
         45:d5:cf:bd:4f:ac:29:c3:0d:62:f9:47:72:3a:c4:47:7c:f8:
         7e:4f:cb:60:45:3b:28:b7:10:8b:98:ee:a2:94:2c:ba:0d:4e:
         e3:9d:e6:03:35:41:57:cc:53:42:e3:e8:b0:7a:ae:7e:0b:55:
         02:f2:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----