Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eA4lxS8pp14zQWgWJeSNGKOViWw.roa
File:                     eA4lxS8pp14zQWgWJeSNGKOViWw.roa (raw, json)
Hash identifier:          xqLwjnS418fs70fjVqarjju07uo99MyGInvMbsNPTzI=
Subject key identifier:   78:0E:25:C5:2F:29:A7:5E:33:41:68:16:25:E4:8D:18:A3:95:89:6C
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       0185704295F2F36D60BA63D4E88C72548338
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eA4lxS8pp14zQWgWJeSNGKOViWw.roa
Signing time:             Mon 02 Jan 2023 02:14:49 +0000
ROA not before:           Mon 02 Jan 2023 02:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        2a09:da00::/32 maxlen: 32
                          2a0d:e841::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 16 May 2023 10:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:95:f2:f3:6d:60:ba:63:d4:e8:8c:72:54:83:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Jan  2 02:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=780e25c52f29a75e3341681625e48d18a395896c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:4a:54:cc:d6:2b:df:98:12:67:e3:08:91:
                    cb:13:2c:37:f8:d0:dc:68:c0:fe:d0:42:27:1c:58:
                    da:27:b4:bb:e7:cf:14:c9:09:7c:6b:89:5e:4d:8f:
                    89:d4:c5:c1:8e:34:74:3c:77:10:aa:eb:4a:0f:ed:
                    d9:8d:72:ec:22:ef:04:b0:b0:35:3b:f7:02:86:c5:
                    3c:a3:43:62:2a:71:b9:49:fe:2f:2a:d2:8d:bb:cf:
                    3f:b5:37:61:01:38:09:2b:02:90:c9:52:6b:55:8d:
                    ad:61:57:ba:64:c7:8d:70:4b:9e:a0:7a:20:ec:87:
                    0d:5e:8a:9c:d7:81:b4:ba:82:0e:30:8e:72:da:22:
                    d9:58:f7:ab:da:5a:7e:3c:ef:8b:11:98:f1:61:93:
                    fd:0b:1a:e8:84:bc:f0:0d:e8:6d:4b:6c:7c:e6:49:
                    bd:6b:64:e4:d6:21:84:11:7a:84:6a:c7:f7:fe:87:
                    1b:0c:3e:de:3a:b0:b3:dc:34:d9:71:78:07:3b:9f:
                    7e:8c:56:cd:ca:93:fd:3c:ef:32:58:32:60:cf:ea:
                    bd:97:cd:5b:43:5d:fd:a0:94:e0:66:ae:e7:68:3c:
                    57:7e:3f:1b:43:6f:a2:e2:b6:f3:89:14:8a:4b:bd:
                    d4:7f:0a:a4:30:b7:aa:3b:25:6f:5f:17:d8:a1:70:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0E:25:C5:2F:29:A7:5E:33:41:68:16:25:E4:8D:18:A3:95:89:6C
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eA4lxS8pp14zQWgWJeSNGKOViWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:da00::/32
                  2a0d:e841::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:4e:bf:6a:c9:f3:78:f3:be:55:4d:01:6e:d2:31:bc:c0:0b:
         5f:0d:25:3c:59:27:28:0b:fe:66:e4:da:23:5f:22:8b:5b:fc:
         3c:21:cd:0c:41:d9:d6:61:4f:10:5a:f3:e7:26:f5:e1:16:2d:
         d4:63:de:6b:79:61:5d:c3:b8:98:9b:18:e9:94:9d:b1:ab:18:
         b3:97:ad:ab:05:44:f8:c6:30:97:1a:0e:ee:25:4e:9d:93:3b:
         24:a9:3f:b7:54:bd:9c:97:7a:bc:85:f5:90:76:73:ea:a5:a9:
         60:81:6f:47:74:9b:ae:ea:de:06:d2:b5:61:60:a3:f5:27:09:
         5a:a2:f7:1a:73:bf:b8:56:b7:00:ad:13:e4:7e:7a:ca:9f:9a:
         38:18:49:2f:6f:68:54:f7:ce:2c:b4:a5:41:d8:b5:19:39:ff:
         0d:ab:6d:c1:45:75:d4:58:2d:ab:81:a8:d4:0c:c3:61:37:3a:
         59:6a:8e:82:fe:fc:7f:3b:be:08:72:d3:13:8a:26:c6:d6:4f:
         fb:19:d8:78:4b:f3:bb:59:1d:ad:5c:09:5f:59:54:57:12:d9:
         99:a9:56:b3:ab:85:0a:23:45:38:2e:4d:8f:43:48:23:5c:60:
         ef:37:e4:d4:c4:02:1b:67:b2:77:17:af:7e:01:76:f1:d9:a2:
         66:95:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----