Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6c3b4BnhiYZffWcxyrAtVwnKS8o.roa
File:                     6c3b4BnhiYZffWcxyrAtVwnKS8o.roa (raw, json)
Hash identifier:          Szt96IHjftAxbRV4n9ko0F2jnXc94A9kVS1H8Pewt8Y=
Subject key identifier:   E9:CD:DB:E0:19:E1:89:86:5F:7D:67:31:CA:B0:2D:57:09:CA:4B:CA
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       01856FF97249958941962477B687AAF533ED
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6c3b4BnhiYZffWcxyrAtVwnKS8o.roa
Signing time:             Mon 02 Jan 2023 00:54:56 +0000
ROA not before:           Mon 02 Jan 2023 00:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204084
IP address blocks:        2a06:d900::/30 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:72:49:95:89:41:96:24:77:b6:87:aa:f5:33:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jan  2 00:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9cddbe019e189865f7d6731cab02d5709ca4bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:2c:a3:6d:61:89:32:4a:32:de:4c:d8:06:
                    c5:a7:6d:d3:cb:34:65:4e:5a:58:a1:8a:eb:2f:a6:
                    9c:0b:eb:31:b6:44:b5:5f:47:e4:23:f6:66:9d:82:
                    5b:71:de:98:14:97:15:35:4f:6d:78:fb:a1:5a:af:
                    82:3d:8f:36:79:78:86:c1:a7:ed:06:3f:09:c2:32:
                    e8:87:81:31:32:7b:a0:e5:55:d7:ce:b7:3c:07:ad:
                    2f:f6:1b:36:c0:ad:d0:da:97:4c:4e:90:33:da:cd:
                    1d:22:d1:fa:70:24:62:6e:97:be:50:f5:21:a1:eb:
                    e8:14:57:fc:05:90:65:8b:8e:9c:87:cf:8d:e0:fd:
                    ec:3d:25:a4:ad:f2:94:01:ea:c9:ac:b6:b2:e1:36:
                    4e:97:01:71:8c:24:41:e1:8a:a2:af:de:bc:98:83:
                    d2:9c:33:39:cd:4c:36:ac:1f:41:59:23:60:98:9d:
                    3a:52:88:d9:b5:93:58:d4:df:07:4d:46:d3:b4:96:
                    17:ac:6c:bf:65:89:d1:2c:ab:be:fb:3f:1d:9c:4e:
                    90:40:7a:0e:78:48:8c:72:ef:08:4a:1e:82:39:7f:
                    1d:8a:c2:99:d3:09:af:c6:94:07:00:d2:b0:3e:4a:
                    05:fa:69:ed:a2:ee:b8:42:b4:26:19:ff:a0:dd:f7:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CD:DB:E0:19:E1:89:86:5F:7D:67:31:CA:B0:2D:57:09:CA:4B:CA
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6c3b4BnhiYZffWcxyrAtVwnKS8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:d900::/30

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:77:0e:1d:94:b7:c6:d9:46:68:66:3e:30:93:6c:65:ea:
         28:15:36:20:c7:8d:76:f6:48:17:8a:e5:e8:dd:db:ea:86:5e:
         b8:c6:ec:02:78:96:d0:00:e9:d2:0a:18:c0:15:e5:59:b6:4a:
         b9:6f:60:16:22:c0:b6:b3:11:f3:b7:69:a5:af:e1:d5:7c:3b:
         c1:e1:be:23:0e:fd:7c:3b:ca:0a:55:f9:c8:19:3a:9f:a4:69:
         80:47:e8:13:a0:53:80:e1:c5:4c:e2:99:b2:0f:1c:b7:77:10:
         5e:a6:dc:9d:9b:31:0c:06:16:59:01:ed:45:51:d8:94:83:0a:
         0e:3f:05:b2:9a:8d:2c:57:da:5e:1e:9d:88:8c:9d:6e:58:4d:
         e2:a5:6e:21:21:84:d1:87:16:f9:e6:91:77:fe:45:08:1f:4d:
         0c:4b:7c:af:f5:cf:39:94:01:b1:9c:24:07:ba:6b:0f:cf:4e:
         34:db:60:01:b1:be:3c:88:e7:06:7c:af:0d:74:1e:df:5e:4f:
         81:51:18:82:a3:80:14:0f:1d:66:c9:65:35:51:c7:42:2d:ee:
         53:e9:bb:7e:d1:75:fc:8a:ae:30:c7:5e:e5:43:95:71:a2:97:
         d9:bb:be:70:c4:ef:67:68:82:f5:a8:d0:b6:e5:93:81:1f:6a:
         58:da:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----