Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/YZ7yGLfTvivOdoRDZu4yUqS7Nzo.roa
File:                     YZ7yGLfTvivOdoRDZu4yUqS7Nzo.roa (raw, json)
Hash identifier:          vxfnYd9st1yvAccPEvQNv5WTo4HaVA4/7+nt79C5cPs=
Subject key identifier:   61:9E:F2:18:B7:D3:BE:2B:CE:76:84:43:66:EE:32:52:A4:BB:37:3A
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018C06576BB33F693A4F8AFF8B517B11E02B
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/YZ7yGLfTvivOdoRDZu4yUqS7Nzo.roa
Signing time:             Sat 25 Nov 2023 11:57:21 +0000
ROA not before:           Sat 25 Nov 2023 11:57:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:06:57:6b:b3:3f:69:3a:4f:8a:ff:8b:51:7b:11:e0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Nov 25 11:57:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=619ef218b7d3be2bce76844366ee3252a4bb373a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:62:fc:af:b6:53:74:1e:0e:8a:52:80:b6:
                    08:b8:a5:59:d4:87:a4:99:a0:0c:ee:9f:52:c1:b8:
                    c0:90:3b:1e:cd:ce:28:6e:c9:b6:db:2e:73:7f:10:
                    4e:19:d4:0c:8e:ee:97:41:2e:70:ac:26:5d:49:97:
                    56:ee:57:11:c7:7e:20:d4:31:ab:1a:24:b5:9c:df:
                    f3:90:a3:28:32:7d:0e:76:7a:b7:cc:09:b4:77:fa:
                    aa:06:d3:7c:6b:74:e5:4e:95:a8:62:79:89:f3:bd:
                    ca:af:c0:3a:8d:a0:fd:1b:97:d5:0e:de:3c:9e:69:
                    a0:62:4f:44:2a:06:fd:70:b3:b1:0d:4b:c9:b1:b6:
                    18:f5:31:b5:e7:26:10:d0:98:ac:af:58:15:e3:95:
                    1d:4a:09:5a:2a:d3:96:29:1a:34:3a:a7:08:ab:4b:
                    9f:de:9b:cc:f5:26:00:f6:1b:df:6b:a5:9f:26:ac:
                    5c:0c:26:2d:b2:d4:2e:50:48:4d:6a:85:e3:50:9b:
                    b4:4e:d9:00:00:8f:b5:cf:b5:00:ea:ac:0d:e2:0f:
                    0a:bd:ec:f1:d8:59:c1:3d:e5:a8:fc:3c:74:78:95:
                    68:06:2b:df:3f:a9:ef:6e:1d:fe:9f:de:b4:da:5a:
                    4e:3f:fc:f4:b8:a5:a7:3c:87:64:52:e2:1b:8c:28:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9E:F2:18:B7:D3:BE:2B:CE:76:84:43:66:EE:32:52:A4:BB:37:3A
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/YZ7yGLfTvivOdoRDZu4yUqS7Nzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:30:ae:8d:df:b5:78:d2:50:6f:7f:73:9f:82:2d:bb:d0:
         d5:46:10:34:39:21:79:ad:aa:78:24:1c:cc:2d:60:08:38:e9:
         5a:a5:fd:de:03:f6:de:19:3e:8a:f2:43:d2:a2:c0:d1:d6:80:
         a6:9a:61:98:d8:ec:c7:f5:bf:71:91:56:f6:17:da:16:eb:cc:
         56:dc:0f:02:8b:af:57:2a:b9:bc:83:61:34:0d:82:4e:5c:72:
         90:e6:7d:7e:7a:c5:f7:aa:9a:40:b8:69:e5:c6:64:c4:d8:47:
         0f:02:6a:a3:a8:4f:20:c2:ce:b0:2c:01:b0:44:f9:52:7f:a3:
         a6:fe:26:c2:b1:75:58:c8:91:ba:43:cc:16:8d:81:d5:5e:9e:
         04:4d:7c:a8:b6:d2:66:43:4e:4d:c0:ab:cd:b3:91:fc:25:50:
         06:1b:1e:95:8a:f5:04:8f:92:bf:95:41:6d:aa:14:38:13:b3:
         52:8f:3e:96:7b:cf:96:3e:d0:43:8d:0b:30:77:05:20:32:7b:
         17:20:89:c0:d3:31:9c:34:fc:2a:d7:bc:c5:3b:e2:da:f0:b3:
         4f:15:f9:a3:62:51:da:1c:78:4a:02:e0:6b:fd:be:3b:07:00:
         2b:2b:32:8d:c4:8c:b0:02:58:3f:d7:6a:3a:eb:3d:ab:f5:2a:
         09:81:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----