Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa
File:                     1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa (raw, json)
Hash identifier:          AOV2reGydZ9UV+G9hY8SFlQzCiJjIPfSzamixKsvFEI=
Subject key identifier:   F8:9C:87:DD:1A:4A:24:EB:7C:91:6C:9C:DC:9A:57:DD:6A:DE:33:1E
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01856F66F01E28674B8A30793248BCB0BE90
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa
Signing time:             Sun 01 Jan 2023 22:14:55 +0000
ROA not before:           Sun 01 Jan 2023 22:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12778
IP address blocks:        2a0e:ce40::/29 maxlen: 29
                          2a02:d80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:66:f0:1e:28:67:4b:8a:30:79:32:48:bc:b0:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan  1 22:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f89c87dd1a4a24eb7c916c9cdc9a57dd6ade331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:eb:a4:50:11:6e:e3:e9:8c:69:1c:45:53:
                    f6:0c:15:00:a1:da:b9:d0:e4:2f:9f:af:78:f0:98:
                    98:38:f8:67:3b:94:a8:54:d7:06:d6:e0:00:25:73:
                    79:b0:26:90:c4:0f:13:36:af:3f:0c:f5:86:b0:8d:
                    e2:2b:cd:dd:f9:29:5a:76:66:2c:c6:c9:37:a1:89:
                    85:d2:5c:da:f9:fb:58:21:8b:2d:36:da:2c:74:0f:
                    8f:93:ed:ed:49:e6:ad:dd:f1:70:a7:41:fe:24:58:
                    64:d7:64:e8:e0:2e:d2:e8:07:84:88:2f:5d:17:48:
                    26:97:f8:e4:6c:49:a5:dc:94:4e:ac:f7:bb:be:d8:
                    51:92:78:1b:27:3f:7e:36:c1:53:eb:c4:7f:d4:d2:
                    1c:38:4b:89:1d:6d:7e:06:49:01:ab:7a:43:ca:9b:
                    90:87:26:5d:78:ff:7a:b3:86:05:99:61:27:57:2c:
                    3d:fd:f3:69:fa:c1:8e:37:8e:c4:67:3a:de:25:2c:
                    5d:7b:78:ee:9d:8c:17:c8:18:4f:92:72:1b:a2:6b:
                    51:72:0c:a4:e5:e9:38:5d:e7:c3:81:c8:cd:cb:a5:
                    32:90:73:c7:74:99:49:68:54:e2:eb:47:50:b8:ae:
                    cb:01:26:b8:ac:4c:94:02:84:e5:03:38:e8:bb:59:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:87:DD:1A:4A:24:EB:7C:91:6C:9C:DC:9A:57:DD:6A:DE:33:1E
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d80::/32
                  2a0e:ce40::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:fb:91:0b:c0:c0:7a:a5:2a:89:27:19:35:62:42:c6:8a:
         68:95:83:0b:a9:ea:14:03:f3:e7:28:15:70:f8:2d:bb:5f:e0:
         0c:fc:f1:7a:9b:ab:5f:5b:2c:7a:48:92:64:a0:4d:a7:b3:3d:
         1c:44:be:0a:e2:4c:00:c5:3d:d0:fd:62:3b:16:18:a9:7d:97:
         68:24:a7:7a:d5:e7:cb:14:7d:40:52:f3:1c:87:fb:d9:c7:9e:
         25:25:af:6c:ef:02:a0:93:f8:f7:40:30:62:bc:bd:49:44:d5:
         cc:2e:b8:0a:1b:05:92:c9:31:33:30:b1:ce:f7:40:73:16:1f:
         52:2f:8f:b7:94:5a:5e:d2:b6:9a:64:5e:77:6d:ee:f8:94:ae:
         11:57:e7:97:a2:66:8b:26:57:1a:61:ee:31:44:b0:55:9a:81:
         89:99:d6:84:a5:44:1e:12:d4:0a:cf:67:4f:be:75:bd:f3:6e:
         fb:ae:0b:a0:93:24:c9:ad:aa:f7:e9:35:10:e7:84:4c:63:04:
         c3:90:46:bb:4a:66:e5:57:e4:68:3a:e0:93:a5:f1:1b:3f:50:
         b8:d7:c8:6d:8b:11:a2:7b:3b:e5:ec:1a:9a:a1:a6:ca:58:1e:
         4c:28:a5:3d:2b:e6:ef:40:ce:7e:fc:fd:54:87:c5:85:ce:f1:
         a8:52:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----