Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/UMLPScArxOtua8LuktubFPKTaLo.roa
File:                     UMLPScArxOtua8LuktubFPKTaLo.roa (raw, json)
Hash identifier:          hZsQCYXxwJ7r7F6rBRDSrolJH6Co/QaeUzgMEud4EdY=
Subject key identifier:   50:C2:CF:49:C0:2B:C4:EB:6E:6B:C2:EE:92:DB:9B:14:F2:93:68:BA
Certificate issuer:       /CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Certificate serial:       01874E7F8C4D1CA65756ABB6B2E98B3DC8A7
Authority key identifier: 03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/UMLPScArxOtua8LuktubFPKTaLo.roa
Signing time:             Tue 04 Apr 2023 22:59:54 +0000
ROA not before:           Tue 04 Apr 2023 22:59:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a11:a100::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4e:7f:8c:4d:1c:a6:57:56:ab:b6:b2:e9:8b:3d:c8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
        Validity
            Not Before: Apr  4 22:59:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50c2cf49c02bc4eb6e6bc2ee92db9b14f29368ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:75:e8:87:64:9d:73:ce:7d:64:ef:c7:3a:
                    92:bd:27:29:db:26:4c:41:12:8f:17:14:7b:11:d5:
                    a6:65:c2:51:5f:3a:99:1a:6b:cc:ea:9e:76:c1:ed:
                    9d:90:af:dd:3b:8a:66:b5:a2:64:a1:38:82:cb:6c:
                    57:09:47:0c:b6:85:f0:5a:53:1b:e3:44:bb:bf:0c:
                    17:7e:28:2b:84:40:06:4c:9c:a2:95:bf:8b:93:89:
                    a6:e2:1e:c2:e7:8f:b4:0f:b5:eb:19:6d:75:70:18:
                    6a:9e:3d:6b:c6:96:ad:6b:82:b0:cf:ce:b3:b0:55:
                    4a:86:a1:0f:7c:e6:7c:de:23:8a:93:e6:ca:40:ab:
                    97:8e:cf:21:5a:6d:40:a5:92:0b:3c:36:31:a7:53:
                    a8:75:73:92:e6:b0:4d:95:ab:ce:e1:d2:a7:28:71:
                    85:5b:93:1f:78:65:ae:d7:90:d6:6a:92:5f:c3:fa:
                    3f:02:26:b8:c2:45:b1:9f:06:a9:19:5b:3e:cc:1e:
                    2b:39:b3:73:d8:68:22:3e:d2:f4:be:89:50:3c:dd:
                    07:4d:34:cc:af:cd:74:de:84:c5:35:6a:8a:e2:1b:
                    34:6c:2f:18:4c:68:b0:c3:52:76:b6:76:c8:86:ed:
                    d9:58:a9:b4:d3:4f:b0:d7:7c:22:ee:e7:4d:0e:ec:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:CF:49:C0:2B:C4:EB:6E:6B:C2:EE:92:DB:9B:14:F2:93:68:BA
            X509v3 Authority Key Identifier:
                keyid:03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/UMLPScArxOtua8LuktubFPKTaLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/A0Usnb_J5Bk8flXg0gFlaNlGUoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:a100::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:e1:66:99:43:8a:59:35:8d:37:8b:85:3e:3a:a0:88:ed:
         5f:e9:b7:41:8e:9e:61:91:2e:c0:14:70:49:72:30:4a:71:73:
         03:47:c8:be:56:ac:db:d7:f6:4e:96:b9:c7:a0:41:bc:9f:4d:
         b4:a9:35:9f:a9:e7:90:fd:6b:0d:25:2c:38:46:d7:bc:77:55:
         fa:ad:67:fa:6b:60:e4:f7:74:35:23:e7:c5:fc:56:fe:ab:ad:
         3f:95:80:df:df:cb:cc:f8:31:44:5b:24:c3:dd:06:8d:e5:80:
         0c:e1:b2:35:89:d9:1f:ee:7f:53:1b:21:53:a2:30:a8:fc:1e:
         e4:ff:32:00:55:df:c8:e8:2e:3f:97:f9:67:ea:51:83:17:d4:
         9a:b5:86:ec:59:34:fc:70:48:5d:4a:3a:b6:6a:51:6c:88:4e:
         5c:22:a2:2d:dc:43:c4:6f:8f:25:5c:09:33:1b:ff:17:7f:aa:
         82:ab:4d:5f:ba:71:fb:a6:d9:d6:d4:e2:a8:4f:bc:03:47:99:
         7c:fa:17:b1:ec:fd:73:b2:50:40:88:10:70:15:a8:9e:b3:29:
         6d:7a:e0:1d:62:44:c1:dc:2c:32:cc:2e:ce:5b:2c:f0:26:33:
         c8:f6:fe:6e:53:4b:48:3d:1b:56:cd:37:89:3b:be:4e:af:7a:
         71:e9:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----