Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/LpCLPhXR4AGdT2-VVPM235kpEH4.roa
File:                     LpCLPhXR4AGdT2-VVPM235kpEH4.roa (raw, json)
Hash identifier:          rBiJR+xbbmQos45d8YR9zUSEzCKGVckzaCIEPqM5nuY=
Subject key identifier:   2E:90:8B:3E:15:D1:E0:01:9D:4F:6F:95:54:F3:36:DF:99:29:10:7E
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01856E0AFAB7A5B3B5324B11FC7B8AA52DD4
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/LpCLPhXR4AGdT2-VVPM235kpEH4.roa
Signing time:             Sun 01 Jan 2023 15:54:51 +0000
ROA not before:           Sun 01 Jan 2023 15:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2001:678:2cc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0a:fa:b7:a5:b3:b5:32:4b:11:fc:7b:8a:a5:2d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Jan  1 15:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e908b3e15d1e0019d4f6f9554f336df9929107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:1b:0b:ab:ab:79:11:09:72:22:9a:2a:a7:
                    f8:59:84:6c:0e:b6:a9:27:fa:8e:3a:90:11:41:65:
                    50:25:2f:4a:37:59:0b:f3:18:ad:2e:28:ad:ff:af:
                    15:44:7d:a5:95:45:90:f1:53:6d:64:40:9c:11:28:
                    81:60:07:1d:6e:d6:2a:05:e9:ac:d0:c9:57:43:06:
                    f6:38:9d:a1:4b:16:51:34:fd:cc:21:e8:06:13:52:
                    db:4c:ed:85:90:db:36:36:06:e2:50:b8:d1:6c:da:
                    4e:3e:9a:17:3b:68:8f:ac:18:86:e6:e9:b4:97:a1:
                    3a:32:9c:65:0a:bd:6b:35:3c:ce:c6:7a:56:42:d4:
                    d5:77:a4:8e:0e:68:c8:a6:e0:a7:86:04:4c:02:2e:
                    b6:35:c7:3d:b9:0d:5b:04:25:75:0e:ea:f8:6a:c1:
                    44:d1:49:c2:84:12:53:24:b1:25:74:c4:0f:95:46:
                    b7:98:a6:73:84:72:5a:25:98:72:79:8b:61:b1:b3:
                    9b:fa:49:7f:a0:d5:70:c3:5d:91:8e:26:e1:9c:e5:
                    c9:3c:cb:c1:04:9b:2b:0c:7d:eb:6c:c1:72:fa:ce:
                    ce:80:48:83:c5:5f:18:5d:d0:6e:dd:6d:92:1a:72:
                    d3:ce:0e:26:81:92:3d:e6:80:68:5a:28:12:46:16:
                    e9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:8B:3E:15:D1:E0:01:9D:4F:6F:95:54:F3:36:DF:99:29:10:7E
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/LpCLPhXR4AGdT2-VVPM235kpEH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:2cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:4c:e5:6d:11:fe:b8:d2:33:0d:c3:cb:80:5b:e2:a1:b1:54:
         70:c6:a4:78:4a:a4:84:b0:f6:73:f7:16:49:10:bd:2f:92:db:
         23:e6:42:29:f2:ac:9e:3b:2d:05:9e:a7:19:99:54:fb:fb:41:
         d5:35:a8:57:c1:63:b9:8b:c2:7b:a7:b6:7d:60:3d:16:58:a4:
         ad:a1:37:1b:18:cc:11:1d:c9:fe:4a:4c:16:e5:36:2e:12:73:
         ca:e5:d8:95:bf:43:98:58:b3:d9:34:87:34:65:1d:8a:94:1b:
         d4:f4:e7:03:ae:c6:74:1d:19:e4:08:4a:a0:69:25:63:34:85:
         b5:32:45:44:44:a9:a7:14:b8:ae:e2:81:5d:bc:4b:d9:b6:5b:
         b8:11:5d:a1:2c:7f:29:d7:ee:40:57:7e:ca:36:3e:56:23:cc:
         8c:e4:6a:32:c9:88:88:66:1a:9a:65:11:9c:8f:8d:59:c5:b2:
         e6:2b:18:02:05:59:2a:a3:68:de:05:e5:83:bd:c2:f5:31:e0:
         40:4a:cd:5d:df:8a:62:ef:1e:21:3f:3a:5a:6c:09:13:1a:74:
         f6:cc:4a:1a:f0:1b:d2:7e:c9:c4:f9:31:e2:59:7d:d5:39:1c:
         17:43:98:6b:0a:cd:be:4b:40:07:ad:e1:9c:e5:a0:78:26:31:
         b6:98:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----