Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa
File:                     uB8blK51clmlqZIG3MgE-Kk1G5o.roa (raw, json)
Hash identifier:          xMwS5z1W356FPT+nDClX6H6zwMtl06jPqyIJ071az7U=
Subject key identifier:   B8:1F:1B:94:AE:75:72:59:A5:A9:92:06:DC:C8:04:F8:A9:35:1B:9A
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       01856D418CF3D9F865B8F2F2269257E8A0A4
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa
Signing time:             Sun 01 Jan 2023 12:14:50 +0000
ROA not before:           Sun 01 Jan 2023 12:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44753
IP address blocks:        2a01:190:15ef::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:41:8c:f3:d9:f8:65:b8:f2:f2:26:92:57:e8:a0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jan  1 12:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b81f1b94ae757259a5a99206dcc804f8a9351b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:e4:5c:24:9e:e6:98:91:1f:40:a8:b3:c0:
                    aa:d6:36:b2:7b:0e:3e:fa:a6:29:a0:4b:9d:4c:f2:
                    d5:c7:55:ff:1d:82:2d:d0:3f:ed:22:24:5a:78:29:
                    98:33:49:52:29:a5:43:65:db:22:67:4a:ca:d8:34:
                    c3:98:ff:e2:74:2f:c2:5d:bc:f9:2e:28:98:22:0e:
                    bc:b1:2e:20:bf:e7:38:09:cb:72:8a:85:e7:e7:86:
                    e5:1a:27:29:0e:9d:6b:7a:8f:80:65:d6:ed:7f:46:
                    b6:f5:45:51:2d:8c:b0:b4:2a:27:29:08:64:b3:f6:
                    4d:8f:0e:8c:07:9d:b1:5d:b9:f9:cb:14:ff:52:be:
                    58:fd:04:a2:d0:14:e3:4d:a7:36:0d:4e:06:7f:23:
                    80:c1:8b:4b:28:e8:4e:62:25:1e:e6:f6:7e:73:8e:
                    9d:83:f9:49:61:cb:bc:6a:5a:1b:cb:50:b5:6c:f7:
                    77:c9:68:bb:6b:9d:0d:19:64:6e:f7:3a:2a:f7:9d:
                    b7:c8:dd:da:4d:09:97:89:26:72:b1:b4:a1:15:4c:
                    b6:91:09:4d:2d:37:bf:84:ff:61:2f:d2:ed:b5:0b:
                    22:82:16:eb:1c:1a:ab:82:13:80:9a:20:a5:0f:bd:
                    ea:04:31:08:50:f4:5f:16:1e:f5:64:66:bf:f4:4e:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:1B:94:AE:75:72:59:A5:A9:92:06:DC:C8:04:F8:A9:35:1B:9A
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:190:15ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:22:89:52:7e:c2:02:0d:32:fb:b7:f9:b1:26:fb:e0:45:92:
         5b:09:aa:57:70:23:45:72:63:76:8a:73:aa:b7:ad:c4:bc:6b:
         5a:71:42:9c:38:4a:9c:fe:7e:0b:c9:89:3b:75:37:5d:72:11:
         87:5c:4f:c2:9a:de:72:f0:ff:93:de:ba:b1:fb:1a:f9:cc:b2:
         13:4d:dd:da:55:af:14:57:42:2d:61:ab:78:9c:6b:68:dd:87:
         1e:d1:ba:27:27:d8:2f:44:18:f4:d3:ec:52:39:1c:4d:cd:f0:
         8f:30:f7:b8:3c:25:da:ab:d2:58:e5:3b:cd:b0:a6:58:74:cd:
         49:17:3f:8d:5f:07:36:0c:3a:f8:57:14:6a:f1:83:a4:99:cd:
         2a:72:42:07:f8:78:a5:7c:a0:d2:1b:dc:d7:a8:b2:6e:5a:27:
         3e:47:ce:b7:fa:d7:4c:c7:be:48:78:94:25:50:dc:b9:70:ca:
         8f:9f:7f:a9:f9:2f:e9:82:32:86:94:ed:3d:23:c8:fd:21:67:
         3f:66:73:1f:85:94:23:0a:85:ca:83:87:2e:e5:a8:39:92:5b:
         c4:67:43:32:78:ba:3d:3f:de:50:f6:c7:e1:bc:87:51:ed:68:
         b8:68:00:10:37:91:93:28:51:c5:44:4d:30:7f:26:9d:da:e3:
         7c:ff:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----