Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa
File:                     W89vRK954TUEdu-1bY8Z7z_5Crw.roa (raw, json)
Hash identifier:          FsvfbPindKEpB7TzpQzjCIcTQvvDzRnM+FGsL127NCM=
Subject key identifier:   5B:CF:6F:44:AF:79:E1:35:04:76:EF:B5:6D:8F:19:EF:3F:F9:0A:BC
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018585A63AAC5134A38A43EE08A46FB3D2A3
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa
Signing time:             Fri 06 Jan 2023 05:55:41 +0000
ROA not before:           Fri 06 Jan 2023 05:55:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211703
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:85:a6:3a:ac:51:34:a3:8a:43:ee:08:a4:6f:b3:d2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Jan  6 05:55:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bcf6f44af79e1350476efb56d8f19ef3ff90abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:2f:ee:f5:3b:db:f6:6f:a6:6a:16:4d:c3:
                    ab:20:db:28:70:d6:18:28:c9:15:72:6c:18:b7:4b:
                    97:89:28:81:6f:0a:39:45:30:8e:6c:33:f5:44:b9:
                    ec:4d:86:17:7d:9b:52:10:6d:13:b5:9d:b1:a6:ea:
                    21:6b:e0:8a:8b:72:4a:7f:d7:79:8e:69:51:fa:87:
                    ff:1c:0a:06:48:15:71:6b:a8:73:51:48:af:b7:86:
                    75:e1:b3:14:db:ce:55:b1:ec:8e:5a:b9:95:26:c1:
                    2a:30:96:3d:2f:ac:4c:b1:03:62:7c:d5:3d:46:1e:
                    75:91:de:53:0e:0f:73:3b:7c:67:ee:29:37:97:f3:
                    d3:b2:59:4b:1c:15:1c:60:ea:74:27:db:9a:13:c1:
                    c5:b2:c3:83:f0:a2:47:0e:41:e6:97:29:12:9c:a4:
                    af:37:bf:dc:b0:87:d1:76:5b:9b:98:03:26:1b:40:
                    08:e7:fe:ab:94:6a:c1:c5:06:5b:fb:dd:bf:b0:4b:
                    2d:a8:08:68:05:52:6f:e6:04:e0:e5:58:01:11:6c:
                    dd:28:9e:a2:b4:ae:57:a1:d7:69:49:16:07:13:8d:
                    7e:be:0d:2b:15:b4:08:f1:46:cf:d3:5b:86:c8:42:
                    ac:6b:f0:c3:3c:63:b3:c4:c3:ff:61:18:83:20:0d:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CF:6F:44:AF:79:E1:35:04:76:EF:B5:6D:8F:19:EF:3F:F9:0A:BC
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/W89vRK954TUEdu-1bY8Z7z_5Crw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:37:13:8b:d7:b9:4e:15:cb:c2:f0:c5:ba:b4:0f:b6:88:
         ac:05:6e:79:10:cd:73:e6:53:1d:f6:8e:bd:17:1b:0d:62:53:
         bf:e4:44:0c:c8:37:1b:de:48:49:41:88:04:4b:4f:c3:20:ed:
         7e:a6:d8:ce:2e:d3:7c:da:68:fb:61:ea:d3:23:10:2f:31:3b:
         5d:95:60:44:ce:d4:2b:21:b8:96:e8:f1:f6:68:ec:1e:3b:92:
         bf:d2:3b:1f:cc:c7:bc:4d:2e:d3:5e:c4:83:91:eb:9f:46:81:
         59:0e:d0:bb:bd:22:f3:09:ab:28:20:f0:09:8d:1e:1d:12:6c:
         6e:3a:ab:27:b2:ed:ae:87:db:94:b4:61:d2:ab:07:f7:3e:3b:
         4b:a9:97:58:50:c5:b4:db:7f:40:30:73:bb:21:61:86:2b:06:
         a1:5b:57:86:10:11:50:a6:95:a4:ce:76:2e:a7:06:e3:6c:0d:
         c7:a2:d2:ee:6b:44:b1:2c:ac:46:17:60:9a:a7:31:25:c7:0d:
         70:a5:b8:52:2f:27:24:ec:26:8d:1f:13:49:88:d4:84:c3:c5:
         47:fb:3d:13:25:df:0a:21:52:80:15:64:d4:3f:fa:9e:52:ff:
         3f:8f:2f:7d:b2:41:83:41:f4:27:17:fd:b4:e9:76:e2:91:37:
         57:9f:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----