Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa
File:                     XO5x1ed6Qican6ewDJRUjWEnme8.roa (raw, json)
Hash identifier:          fx0lc0KbzwovZZhby66v7GxDNGYxnGf/b2m9WLttOyw=
Subject key identifier:   5C:EE:71:D5:E7:7A:42:27:1A:9F:A7:B0:0C:94:54:8D:61:27:99:EF
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018AAE1D9A1B361958FF791895C9C4AD8AF2
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa
Signing time:             Tue 19 Sep 2023 15:44:50 +0000
ROA not before:           Tue 19 Sep 2023 15:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ae:1d:9a:1b:36:19:58:ff:79:18:95:c9:c4:ad:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Sep 19 15:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5cee71d5e77a42271a9fa7b00c94548d612799ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:23:e7:59:02:72:29:74:26:c4:8e:dc:0d:
                    7e:f7:17:ac:6a:fc:a1:83:f4:78:41:08:14:5f:f8:
                    7c:3c:cf:81:3c:67:27:d8:8a:a6:38:e9:19:36:37:
                    5a:0d:28:30:04:a1:7a:5c:f3:9f:64:ae:46:65:fd:
                    78:69:a4:ab:23:13:b5:38:fb:8d:86:04:1b:14:2c:
                    a5:4f:0e:05:1a:25:c5:06:07:ec:73:e3:02:b8:39:
                    70:f9:9f:e2:6d:85:1c:24:ab:7a:8c:db:09:a8:71:
                    f3:11:87:a5:61:63:27:e7:4d:ef:11:82:7f:87:0b:
                    cc:7d:2f:c9:38:c2:35:64:bb:fb:34:18:b5:5a:38:
                    7c:73:b0:77:d5:35:92:8e:97:fc:60:76:7f:c0:4f:
                    93:5d:bb:43:f5:a6:19:3e:e6:d3:15:aa:3d:f4:1c:
                    84:ab:fc:33:73:3b:a9:bc:ca:de:f9:a9:2b:8e:14:
                    49:39:4b:e4:75:43:23:08:b4:80:c7:e4:2b:c5:17:
                    db:68:07:b1:a9:7d:5a:93:a8:58:b0:df:71:17:d7:
                    52:ea:65:98:54:28:1b:d7:7d:50:b2:da:e5:9b:e3:
                    9d:9d:13:6d:85:6c:39:03:cd:fa:fe:28:ad:38:ad:
                    07:e9:14:1e:22:4a:58:13:20:93:c3:b5:f7:2e:3f:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:71:D5:E7:7A:42:27:1A:9F:A7:B0:0C:94:54:8D:61:27:99:EF
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:4f:66:93:bc:68:1e:a4:f5:75:b8:16:98:3e:8a:99:5c:
         7a:70:4d:4b:e7:b0:35:e1:ec:b4:f3:86:95:c0:c3:a6:c4:51:
         42:2e:64:b2:75:03:f7:49:26:c6:e7:89:b2:6d:19:b9:af:38:
         be:04:8b:31:7e:07:d1:8d:bb:d1:00:dd:0d:e9:3d:b9:31:0f:
         40:11:a6:c7:40:6f:51:7d:1c:80:0d:2b:2f:3a:d8:bd:34:4b:
         43:a8:22:d8:0e:ce:55:62:cc:e9:01:9d:b9:1e:e4:a1:9d:b6:
         83:8a:a3:9c:f7:f7:ef:61:ae:c0:bb:80:b8:0e:37:2a:2d:73:
         ad:7c:76:3e:7a:6a:e0:06:47:3c:4c:e5:74:58:b2:7b:99:47:
         52:01:c4:ef:56:4e:8f:e6:a4:d4:20:b8:8c:60:23:bd:11:74:
         7b:7a:b2:3d:40:f5:6f:b7:9f:0c:fe:7d:42:cb:a8:7d:21:97:
         44:c6:37:a4:f9:1e:b2:56:da:32:f2:ef:e9:e4:c4:54:e0:a9:
         bb:0e:fb:68:6c:a1:5a:39:2a:bf:de:d9:5d:13:2a:a6:48:70:
         f1:02:51:37:9f:0e:5a:ad:d0:af:75:02:ae:7c:ff:2e:f9:46:
         2a:78:cd:73:0a:f0:aa:fd:71:0f:af:2c:9d:10:2a:de:72:b8:
         a3:8e:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----