Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jOV8v6oTgmhJlRHc1Bsqo_Uyhv8.roa
File:                     jOV8v6oTgmhJlRHc1Bsqo_Uyhv8.roa (raw, json)
Hash identifier:          c8eGOQQLb6kNoIituvov24hrX0KDjwtrSzVK97hQZBQ=
Subject key identifier:   8C:E5:7C:BF:AA:13:82:68:49:95:11:DC:D4:1B:2A:A3:F5:32:86:FF
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C415DC0E1C930FC24837453A575B7A7
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jOV8v6oTgmhJlRHc1Bsqo_Uyhv8.roa
Signing time:             Sun 01 Jan 2023 07:35:01 +0000
ROA not before:           Sun 01 Jan 2023 07:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50058
IP address blocks:        2a0c:e644::/30 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:5d:c0:e1:c9:30:fc:24:83:74:53:a5:75:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ce57cbfaa138268499511dcd41b2aa3f53286ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:81:05:5e:dc:54:43:55:bd:8f:18:38:fa:
                    33:c5:af:0e:7c:8e:c1:92:29:2a:db:79:1c:f9:96:
                    eb:82:3e:d2:ad:43:6e:67:1a:36:37:08:a0:0d:15:
                    0f:e2:92:0a:66:bc:ca:5e:e2:2c:3a:7e:f7:7e:32:
                    37:bf:84:c5:da:9a:5a:51:01:90:75:88:3b:a7:cf:
                    88:02:be:e4:22:5c:c6:b4:87:05:2c:2b:d1:2e:51:
                    0a:2d:0b:fa:2e:0b:40:56:0d:9f:a5:f9:7d:08:0d:
                    91:ca:2a:b8:78:f0:2a:9e:81:31:ca:60:4a:89:30:
                    3d:69:06:a9:47:6d:d9:30:02:89:6d:5c:48:81:47:
                    63:3d:4d:bb:ca:0a:de:46:89:aa:71:11:1f:c6:2b:
                    1f:fd:99:5b:f3:a5:98:6c:7e:54:95:80:c0:b1:69:
                    3b:69:4d:c2:0b:ad:5b:c0:2d:f8:cb:8e:2a:c8:e4:
                    3a:e4:ca:58:b0:0c:63:17:e5:09:af:f5:45:58:00:
                    b9:ad:d9:28:03:8d:92:f6:eb:b2:f2:b8:1a:4c:cf:
                    b9:a1:ee:54:c9:33:c4:65:15:de:35:c8:71:7b:e2:
                    c5:5b:e2:82:dc:70:26:2d:c9:ec:44:eb:51:62:84:
                    3f:d5:24:37:22:f9:72:1b:7a:97:2c:cc:e6:bc:c2:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E5:7C:BF:AA:13:82:68:49:95:11:DC:D4:1B:2A:A3:F5:32:86:FF
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jOV8v6oTgmhJlRHc1Bsqo_Uyhv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e644::/30

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:32:1e:6d:d8:27:9f:be:1e:0d:2f:3a:c8:bb:34:31:d7:
         a5:6d:03:b1:72:8d:b2:f3:d7:cc:0b:5e:e3:08:8b:59:a9:1d:
         eb:6b:9d:fd:26:93:22:dc:9d:bb:be:a6:c5:69:78:74:5c:c8:
         63:8c:6b:cc:4f:98:f8:07:9a:02:6c:e5:96:88:3a:bc:09:9e:
         7f:fe:72:36:86:7c:a0:aa:3b:8f:e7:3f:4e:8d:bd:84:15:3d:
         6a:7c:ec:94:78:f9:62:90:f1:32:c5:9b:e6:c2:c3:f5:ae:0f:
         a5:2d:21:53:96:da:16:5e:d5:e1:34:8a:16:8d:34:9f:dc:22:
         ed:58:bd:ba:d6:48:ab:08:59:7a:4d:6d:eb:be:18:56:d7:db:
         1f:3a:37:75:98:3a:78:18:0f:9b:4a:d0:ab:28:a3:31:24:1c:
         1e:22:1c:89:51:14:85:06:ec:3f:ed:b2:b7:35:9b:03:fa:6d:
         6a:d4:43:74:5e:d2:7e:1f:28:f3:84:24:f3:49:42:d7:53:82:
         29:82:ed:eb:35:12:2a:da:28:95:17:8f:6b:b7:cd:d6:e3:a3:
         cf:1c:bb:78:13:e5:ce:19:0b:06:71:fd:84:59:6f:bb:fc:44:
         a2:46:57:e2:7d:5d:f5:14:a7:a8:a6:fa:20:21:94:b7:da:e8:
         8e:7f:30:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVsQV3A4ckw/CSDdFOldbenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjMwMTAxMDczNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2U1N2NiZmFhMTM4MjY4NDk5NTExZGNkNDFiMmFhM2Y1MzI4NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPSBBV7cVENVvY8YOPozxa8OfI7B
kikq23kc+Zbrgj7SrUNuZxo2NwigDRUP4pIKZrzKXuIsOn73fjI3v4TF2ppaUQGQ
dYg7p8+IAr7kIlzGtIcFLCvRLlEKLQv6LgtAVg2fpfl9CA2Ryiq4ePAqnoExymBK
iTA9aQapR23ZMAKJbVxIgUdjPU27ygreRomqcREfxisf/Zlb86WYbH5UlYDAsWk7
aU3CC61bwC34y44qyOQ65MpYsAxjF+UJr/VFWAC5rdkoA42S9uuy8rgaTM+5oe5U
yTPEZRXeNchxe+LFW+KC3HAmLcnsROtRYoQ/1SQ3IvlyG3qXLMzmvMLhuQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIzlfL+qE4JoSZUR3NQbKqP1Mob/MB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvak9WOHY2b1RnbWhKbFJIYzFCc3FvX1V5aHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgzmRDAN
BgkqhkiG9w0BAQsFAAOCAQEAcxoyHm3YJ5++Hg0vOsi7NDHXpW0DsXKNsvPXzAte
4wiLWakd62ud/SaTItydu76mxWl4dFzIY4xrzE+Y+AeaAmzllog6vAmef/5yNoZ8
oKo7j+c/To29hBU9anzslHj5YpDxMsWb5sLD9a4PpS0hU5baFl7V4TSKFo00n9wi
7Vi9utZIqwhZek1t674YVtfbHzo3dZg6eBgPm0rQqyijMSQcHiIciVEUhQbsP+2y
tzWbA/ptatRDdF7Sfh8o84Qk80lC11OCKYLt6zUSKtoolRePa7fN1uOjzxy7eBPl
zhkLBnH9hFlvu/xEokZX4n1d9RSnqKb6ICGUt9rojn8wtA==
-----END CERTIFICATE-----