Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa
File:                     1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa (raw, json)
Hash identifier:          MQvx9uCUW8Xpk4RlstS2yWl+C+FzoFko3UaSd9RG6GI=
Subject key identifier:   D7:FF:A6:90:23:77:B8:9E:60:39:09:F7:35:59:E4:01:3F:31:8A:CF
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       01857042ABE314CAF83BA2DAAC522E9A8D38
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa
Signing time:             Mon 02 Jan 2023 02:14:55 +0000
ROA not before:           Mon 02 Jan 2023 02:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203038
IP address blocks:        2a0a:3507:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:ab:e3:14:ca:f8:3b:a2:da:ac:52:2e:9a:8d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Jan  2 02:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7ffa6902377b89e603909f73559e4013f318acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:e1:e7:80:c4:1f:12:68:aa:70:a4:fb:55:
                    a0:c5:4b:76:db:cc:ee:9a:79:02:53:ae:1d:42:ad:
                    5d:30:f7:35:2c:7e:c5:4c:f2:40:ee:a4:ca:91:1d:
                    49:63:4a:23:c2:4f:bd:42:86:49:fa:88:4c:82:72:
                    6a:23:54:9f:c9:80:e2:25:2b:56:fd:db:47:6e:2c:
                    43:cc:c4:40:87:9f:1a:2a:25:56:28:98:51:3e:81:
                    1a:cb:5f:04:09:fc:0a:f8:c7:d9:22:c7:cc:91:80:
                    b0:65:3c:29:7c:a5:70:e0:04:01:da:51:e9:1f:e6:
                    63:a4:37:d5:27:ee:19:12:65:ae:82:f7:08:42:22:
                    79:35:10:fa:87:33:af:4e:6e:81:d6:33:ca:07:a5:
                    84:7c:32:ee:d4:63:b7:45:ec:e4:c9:61:0d:89:be:
                    37:99:d5:73:d6:39:77:3d:77:1d:ab:32:c5:df:2b:
                    6f:4b:df:7b:1d:1f:08:ca:d6:c5:a3:92:4c:55:d5:
                    23:db:01:41:87:75:b2:cc:c7:69:b7:f8:75:30:fe:
                    0e:cc:c3:b7:68:56:29:96:ed:c1:51:ef:fc:ce:03:
                    ae:51:1b:70:37:2b:fe:a5:79:d6:ae:25:6d:73:e2:
                    7b:3b:57:b3:57:10:2b:2f:6f:c2:8d:f7:a4:fa:8d:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FF:A6:90:23:77:B8:9E:60:39:09:F7:35:59:E4:01:3F:31:8A:CF
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:3507:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:34:d0:98:69:44:94:ca:ea:d9:d8:ea:85:db:88:90:5f:38:
         12:c1:53:32:f8:af:4d:c4:52:d3:30:ba:1c:0d:49:3d:ce:5e:
         34:3a:86:7e:38:e9:7c:d1:dc:d5:3f:91:cc:70:6b:7a:03:60:
         f0:9c:c4:fe:cf:82:b4:59:48:51:51:5b:61:9e:e8:48:d2:5a:
         bf:5e:58:b3:e4:dc:84:e2:96:b9:84:76:ef:ee:40:69:eb:14:
         61:55:a2:15:d9:ed:88:3f:09:42:ac:ad:47:48:83:c3:cc:1f:
         93:31:72:59:47:98:29:da:81:8e:c6:2b:ef:44:97:14:5c:48:
         70:ef:33:0f:7e:f0:82:90:2d:13:8c:fa:e3:1a:9f:56:4a:c7:
         06:a6:3c:e8:28:e9:4a:4a:38:7d:e4:00:46:3e:ef:aa:d1:b7:
         07:26:d1:bb:b4:2e:8d:41:85:4f:25:cc:4b:f5:5e:da:c3:b2:
         52:3c:b7:0d:ca:87:3f:80:ec:54:ca:e0:a0:6b:79:d9:74:11:
         fa:2a:19:a3:35:71:73:a0:ad:a4:2c:3c:fb:17:33:9e:73:ef:
         7a:b1:d3:a6:41:49:c6:f4:f4:88:69:50:b1:8c:cf:b7:ee:59:
         46:dc:07:f1:7d:d2:79:da:ac:88:3f:42:63:1f:41:c2:fc:18:
         9e:cf:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----