Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/2fOvhoHFgbkupojtll4uhvWo3PM.roa
File:                     2fOvhoHFgbkupojtll4uhvWo3PM.roa (raw, json)
Hash identifier:          wfgNxv3fNvjVbfgkxc3coDH51Ks6aCMw5LkyjuDTkbk=
Subject key identifier:   D9:F3:AF:86:81:C5:81:B9:2E:A6:88:ED:96:5E:2E:86:F5:A8:DC:F3
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       018577288308887EDF838FE900ED57DA4495
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/2fOvhoHFgbkupojtll4uhvWo3PM.roa
Signing time:             Tue 03 Jan 2023 10:23:41 +0000
ROA not before:           Tue 03 Jan 2023 10:23:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42378
IP address blocks:        2a01:190:15fe::/48 maxlen: 48
                          2a01:190:15fd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:77:28:83:08:88:7e:df:83:8f:e9:00:ed:57:da:44:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  3 10:23:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9f3af8681c581b92ea688ed965e2e86f5a8dcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2d:7f:f9:45:c2:8c:d7:bd:93:67:b0:86:09:
                    ac:49:8a:df:e2:a9:c8:16:8f:09:e3:3a:df:f6:46:
                    e6:c9:b9:db:71:ef:c5:47:81:e1:8f:ef:50:11:44:
                    fe:0d:6a:c9:11:8e:28:b8:9e:ef:d2:82:ce:f4:13:
                    45:03:de:6d:f2:be:ff:b2:dd:54:12:2c:df:4b:03:
                    c4:9b:dc:5e:45:fa:9d:0c:c6:97:1d:ff:91:c1:df:
                    44:fa:1e:dc:4a:da:b3:d6:05:cd:b6:f1:10:ad:aa:
                    78:4f:59:a7:74:87:4a:15:73:04:1d:19:68:c3:ed:
                    f3:b5:4b:52:88:48:a4:3d:3a:f8:91:07:28:3b:e0:
                    23:4c:de:aa:56:9a:06:fb:5e:c8:78:ca:29:57:5d:
                    9b:17:61:d9:b0:16:68:4c:3f:ab:1e:bc:d7:3d:66:
                    55:b2:e7:89:42:ea:99:db:06:80:44:e6:4b:87:9c:
                    0f:97:f9:60:72:e5:53:ed:1f:49:ce:7e:e6:56:62:
                    ed:34:cf:02:d2:82:a1:4a:b4:ad:46:91:ce:0a:b8:
                    21:d5:af:0e:5b:06:73:3d:35:95:eb:9f:5e:4a:33:
                    61:25:a5:a8:a2:c5:e4:30:dc:4b:ea:76:2c:39:5f:
                    01:fb:6c:1b:bc:cf:46:78:a0:58:7e:26:5c:63:85:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F3:AF:86:81:C5:81:B9:2E:A6:88:ED:96:5E:2E:86:F5:A8:DC:F3
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/2fOvhoHFgbkupojtll4uhvWo3PM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:15fd::-2a01:190:15fe:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:48:88:df:63:a1:78:69:29:a9:78:28:5a:b0:12:b6:f3:
         f8:18:d9:5f:3f:65:95:99:3a:0d:a5:11:71:ec:1d:2b:a8:69:
         9a:54:63:b6:1a:50:50:9d:be:b1:ca:c2:93:ff:39:8d:d6:92:
         e0:c7:ab:9a:8c:24:64:a6:af:dd:ca:be:ff:6a:50:c2:4d:71:
         59:38:8e:c8:95:b0:88:c5:cf:30:1a:7c:7a:07:d3:62:8e:f6:
         1a:9c:c3:1b:71:7f:3d:17:44:18:6c:56:61:79:27:0c:7d:d4:
         a8:ab:f9:ad:83:9f:c8:76:2f:8b:39:22:fa:50:77:6a:9e:92:
         5f:57:c6:7d:a9:34:9e:cb:08:4a:bf:09:3c:de:94:a7:6b:7d:
         27:04:26:cb:3d:90:b0:d7:c9:d2:9a:ef:4d:85:60:b2:09:db:
         2c:f4:29:e9:aa:6c:f2:38:55:cc:f7:08:d7:b2:e9:a8:98:2b:
         5b:23:40:3d:2d:b3:d2:6c:bd:b3:e2:04:ce:54:e8:d1:7a:5c:
         59:33:19:1f:8f:8a:0c:cd:96:a8:b9:a3:65:db:cf:07:e8:3b:
         91:a6:25:57:8e:ab:28:44:c4:25:8e:c8:02:fa:bc:28:93:bc:
         ef:cf:a9:70:0a:da:1b:17:41:9c:d0:2f:49:58:ea:17:e4:2a:
         15:39:08:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----