Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa
File:                     zej-kJR4FefqDTLDtYq0r_AsUbY.roa (raw, json)
Hash identifier:          nIbqfVaLjBMpmJgoXLdRJXDa6mUrtLF7n4hNbWacUKw=
Subject key identifier:   CD:E8:FE:90:94:78:15:E7:EA:0D:32:C3:B5:8A:B4:AF:F0:2C:51:B6
Certificate issuer:       /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial:       018572E81112F01D5FE97E1583CC5008A759
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa
Signing time:             Mon 02 Jan 2023 14:34:49 +0000
ROA not before:           Mon 02 Jan 2023 14:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:fc80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:11:12:f0:1d:5f:e9:7e:15:83:cc:50:08:a7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
        Validity
            Not Before: Jan  2 14:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cde8fe90947815e7ea0d32c3b58ab4aff02c51b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:a5:8e:ab:80:c6:ae:36:98:5a:a1:1b:c8:
                    b4:a8:2b:71:91:c1:80:30:28:a0:f8:e5:a9:48:75:
                    49:45:fc:b1:5b:2f:68:3d:3e:12:d7:c6:3a:e3:73:
                    00:86:b5:b2:10:e1:54:40:0a:c2:f2:9e:d6:d9:38:
                    eb:52:39:f1:d3:51:30:d6:39:10:8c:eb:8f:23:b1:
                    67:f4:92:18:3f:84:81:65:51:c0:c7:c9:02:be:1a:
                    7c:aa:8d:94:39:91:c3:c0:9a:f0:eb:c5:4d:d4:1e:
                    bf:ea:f8:7e:6e:64:9c:43:5c:b0:b5:7f:f5:ce:8f:
                    60:03:c1:9d:6e:98:f9:38:1b:63:be:c8:de:38:54:
                    5b:69:c9:9c:55:00:df:24:0e:b5:f4:0a:75:ee:2e:
                    20:42:7c:0c:87:72:86:5d:6b:9b:9e:46:4c:d9:e5:
                    42:4f:a8:16:05:5f:61:52:0f:47:fc:fb:ec:36:39:
                    cb:fb:dd:77:a9:40:a3:ec:d4:ec:53:a4:d9:60:64:
                    2d:ba:6b:7f:78:a6:55:e3:1c:1c:98:03:32:60:ac:
                    b8:72:78:51:dc:f4:7b:59:71:c7:2e:bb:ca:52:d2:
                    98:3b:92:4b:75:4d:e2:09:9b:3c:e7:55:54:2b:24:
                    5d:ca:d4:4d:cd:08:85:d7:00:8c:e3:3e:67:95:53:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E8:FE:90:94:78:15:E7:EA:0D:32:C3:B5:8A:B4:AF:F0:2C:51:B6
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/zej-kJR4FefqDTLDtYq0r_AsUbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:fc80::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:26:e6:67:95:43:a3:b3:0f:8d:d9:3e:51:b9:4d:ba:d0:
         c4:14:65:d5:62:74:c5:6f:84:5e:71:da:0c:c9:c4:04:96:15:
         33:e1:df:28:72:4b:43:0a:4f:68:89:3f:69:22:50:5f:f7:38:
         a4:35:a7:0b:43:84:9b:60:6a:8a:ca:71:c8:ae:17:d5:dd:c2:
         61:d3:3a:f3:9b:4d:16:fe:4f:54:36:c2:ba:64:89:f6:78:6f:
         4f:a9:b9:ed:e8:61:a7:b2:31:81:dd:f8:68:98:9d:89:31:9c:
         7c:5e:bd:cc:6b:6b:3f:4a:75:c9:78:2a:53:bc:ab:c7:8d:d9:
         8c:0e:00:97:12:dd:b2:cc:89:6c:f4:4e:b9:93:9e:05:bb:43:
         34:bd:f6:7e:c8:fb:5f:51:62:7d:43:d7:b9:88:e4:2d:33:4b:
         c1:9b:ce:3b:8a:de:f9:c3:5f:ac:c2:8f:dc:62:f8:3c:05:0a:
         0f:ab:e7:67:43:96:47:eb:36:13:15:c7:89:de:04:64:ae:68:
         03:26:fe:a1:fc:e4:2e:7e:1a:52:7c:32:48:c0:64:c8:d6:67:
         7a:cb:62:3d:27:b1:c4:e9:2c:99:2d:ec:0d:78:e9:b5:cf:9e:
         48:44:21:dd:30:b0:e8:8a:ea:ae:bc:95:26:14:0d:6c:3d:25:
         90:79:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----