Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa
File:                     dmKRtNVh3XeXRjo4YQRI83idcEg.roa (raw, json)
Hash identifier:          FVjd4U/3t1mYlHNCLv28PYeVcBRFmaKzm3VfPkAbXLc=
Subject key identifier:   76:62:91:B4:D5:61:DD:77:97:46:3A:38:61:04:48:F3:78:9D:70:48
Certificate issuer:       /CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
Certificate serial:       01856E666362924618604E05321DB92444A5
Authority key identifier: 0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa
Signing time:             Sun 01 Jan 2023 17:34:41 +0000
ROA not before:           Sun 01 Jan 2023 17:34:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212966
IP address blocks:        2001:67c:2480::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:66:63:62:92:46:18:60:4e:05:32:1d:b9:24:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdf81c991cd900879f1fdbb8cee661dd2dc089a
        Validity
            Not Before: Jan  1 17:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=766291b4d561dd7797463a38610448f3789d7048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:b6:b7:84:58:c5:d9:b9:f7:72:52:ff:1d:
                    17:11:cf:2c:a5:39:ee:74:b7:21:3b:67:ae:fc:a5:
                    6e:ca:49:45:4e:50:ed:d1:ae:3b:95:7f:40:e8:28:
                    f1:43:9f:d9:e4:93:b1:29:57:66:f0:1a:ba:c0:c7:
                    bc:ef:8c:fd:69:f8:ad:65:64:c6:f8:50:09:dc:64:
                    28:84:11:52:64:81:57:c1:43:8b:98:d0:3c:b4:1a:
                    d6:7f:65:50:56:c7:ce:82:27:f6:d0:7b:ba:f0:87:
                    dc:75:cf:c0:f1:e6:47:f8:4f:74:c4:7c:40:97:8c:
                    a7:c4:12:f2:df:b8:91:99:21:83:2f:a6:3d:fd:ce:
                    f9:13:87:d3:f3:27:85:4d:ac:f3:23:b0:5f:46:e0:
                    ae:93:6a:bc:a0:12:9a:0a:aa:ec:6a:ce:17:a8:aa:
                    e1:37:a8:0a:42:c6:57:cd:29:96:be:31:f1:35:78:
                    98:db:63:f4:b1:77:6b:fe:02:fb:5f:18:c4:59:98:
                    88:97:10:c2:cb:94:0c:38:72:f7:fd:ee:4f:d6:f7:
                    9f:64:4a:b1:c4:1f:af:7c:2f:d4:55:bb:32:e1:69:
                    ed:64:51:f2:72:2a:da:04:ca:f5:aa:97:ac:7c:8e:
                    d6:2a:b2:59:a3:4a:cb:72:d6:64:0c:ae:4d:12:9b:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:91:B4:D5:61:DD:77:97:46:3A:38:61:04:48:F3:78:9D:70:48
            X509v3 Authority Key Identifier:
                keyid:0B:DF:81:C9:91:CD:90:08:79:F1:FD:BB:8C:EE:66:1D:D2:DC:08:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9-ByZHNkAh58f27jO5mHdLcCJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/dmKRtNVh3XeXRjo4YQRI83idcEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6710fd-2342-4f88-8baf-6da1d2c474a9/1/C9-ByZHNkAh58f27jO5mHdLcCJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2480::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:53:83:a4:bf:49:d1:cb:69:8d:ff:f0:fe:15:17:7e:26:
         a8:9e:e8:80:44:09:0e:25:dc:7b:96:c3:ea:12:41:3d:60:3a:
         4a:6a:e6:45:78:31:f4:4e:99:49:73:c6:4d:b8:1a:fc:48:1a:
         46:e4:10:3a:4b:48:90:f8:d9:08:fb:bd:a7:60:62:99:3a:9b:
         8b:74:58:24:e5:c2:cd:3a:e7:a6:0d:11:bc:3a:aa:6f:12:bf:
         2a:95:b1:6d:14:fb:5d:4b:74:1c:57:76:7d:f3:f8:d3:17:fe:
         ed:09:27:37:4f:a5:c6:26:13:80:14:d0:1e:71:0e:cb:b5:f0:
         68:9a:07:8c:a7:41:13:88:e0:0c:5c:eb:4d:fb:e5:52:b6:82:
         05:a1:c1:b1:8c:dd:c5:ce:3c:9f:5e:fb:b4:a6:65:0f:e2:18:
         e3:ce:13:c6:66:c0:cc:42:7b:76:69:4a:0e:95:3b:4b:41:3c:
         8c:10:de:fc:a7:63:17:6b:8b:8c:52:74:32:3f:72:2b:31:c7:
         41:7f:10:fb:ce:4c:21:3e:02:73:b5:77:0d:51:48:13:03:40:
         e1:c2:ce:06:67:04:0f:82:d1:f3:da:8f:2a:ed:0e:83:d3:f5:
         67:96:9c:84:2c:4f:24:06:43:1b:ec:42:8f:aa:fc:4c:b9:df:
         4b:b3:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----