Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/j_AqpAFk8TeFODfBb4UbW32AyJY.roa
File:                     j_AqpAFk8TeFODfBb4UbW32AyJY.roa (raw, json)
Hash identifier:          /htuMUmpa5S8n3Acil1lzjmCYeoP6ZVVVnYuh7NMREQ=
Subject key identifier:   8F:F0:2A:A4:01:64:F1:37:85:38:37:C1:6F:85:1B:5B:7D:80:C8:96
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       01856E2F9D2CE98B5E7F496DCD7B59363E32
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/j_AqpAFk8TeFODfBb4UbW32AyJY.roa
Signing time:             Sun 01 Jan 2023 16:34:52 +0000
ROA not before:           Sun 01 Jan 2023 16:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51897
IP address blocks:        46.143.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:9d:2c:e9:8b:5e:7f:49:6d:cd:7b:59:36:3e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  1 16:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ff02aa40164f137853837c16f851b5b7d80c896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:db:a1:ff:22:55:f9:d7:b9:48:d1:49:d3:
                    25:b8:b1:72:09:76:60:51:20:ac:2b:43:51:a6:db:
                    c5:a8:b9:6b:cc:20:ca:36:ab:0d:4d:ed:ad:1d:77:
                    5e:0b:7e:0a:66:be:52:f7:aa:8a:68:a1:51:62:c5:
                    37:b6:0b:34:ca:11:6c:58:6d:ca:4f:af:50:e7:73:
                    14:f0:47:e1:9c:b5:b2:f7:d5:2a:d2:d2:ce:f7:2a:
                    c2:23:e0:35:42:c0:c5:9f:62:d4:df:fb:b4:bc:44:
                    6d:e8:b4:dd:14:47:83:92:af:47:9c:7c:d0:c6:c2:
                    6b:46:3c:87:03:d6:1e:39:e0:9a:38:db:08:5c:9a:
                    c1:32:14:66:a6:37:90:e5:88:ce:a0:f5:96:f4:8b:
                    8c:20:79:87:13:75:66:35:be:aa:3c:cf:f0:13:81:
                    02:82:fc:40:da:90:90:3b:97:f9:2c:8b:48:3d:bc:
                    77:a2:8e:56:bb:4b:dc:ec:65:78:f7:70:36:66:c4:
                    5c:1f:a7:72:a0:10:9f:fc:bd:72:db:68:76:74:ae:
                    b5:52:d6:9b:b1:d2:0a:76:0c:87:d2:ad:2b:d7:98:
                    e3:3c:25:4c:3a:8c:66:9e:c8:1e:56:69:71:46:b6:
                    7f:77:12:a4:8d:d2:ed:ff:00:5e:36:6e:2f:25:f4:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F0:2A:A4:01:64:F1:37:85:38:37:C1:6F:85:1B:5B:7D:80:C8:96
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/j_AqpAFk8TeFODfBb4UbW32AyJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:81:9f:ec:92:90:fa:81:5d:4a:ef:84:90:e9:dc:26:43:
         05:b8:cc:f8:ef:71:b6:c4:4f:60:1b:43:69:28:c0:8d:dd:fe:
         1b:63:a3:5a:0c:99:4b:03:8b:50:9c:3c:1b:67:41:87:33:69:
         3e:17:9b:7d:6c:a0:e9:5c:29:69:f4:c5:bf:4a:18:42:52:63:
         9c:af:92:e0:79:f5:b2:67:1c:f2:36:16:d7:8b:7c:90:d6:f1:
         5e:e1:24:9f:d7:63:be:d4:30:46:fe:91:fe:4c:c7:a5:d0:bb:
         59:76:b6:dc:ad:0c:b0:2d:ae:b7:cc:e5:9b:26:db:71:f5:60:
         2b:18:3e:cf:64:9f:e0:8a:d1:a0:ff:d7:0a:36:26:0c:d8:19:
         e0:3c:98:16:94:a7:4a:6c:3e:ce:11:8c:c2:88:a9:7a:4c:85:
         e9:31:83:2c:b6:91:d1:e0:82:dd:ae:a2:f7:5c:c1:7e:2e:58:
         13:07:5b:f4:d5:f9:5c:7c:3e:5d:ff:b0:0d:4f:95:c9:58:4c:
         35:cc:e5:3f:2b:13:52:4c:f7:00:4a:d4:91:83:12:fa:8b:49:
         29:39:47:7f:56:a2:e8:c5:ca:d3:40:bf:12:48:d4:72:1a:ac:
         e1:c2:a9:c7:d8:db:a4:91:84:02:3c:dc:01:76:9d:13:e1:73:
         21:78:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----