Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D0enRxvXPyAYdMHpeQdX1ac0b9Q.roa
File:                     D0enRxvXPyAYdMHpeQdX1ac0b9Q.roa (raw, json)
Hash identifier:          qxYVKkUmLO0QmXrfTvD95/DUWSqnbyeyfuIZb5Pm03w=
Subject key identifier:   0F:47:A7:47:1B:D7:3F:20:18:74:C1:E9:79:07:57:D5:A7:34:6F:D4
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C31964ACCBF7A5B8E4B7F9CC6BA687
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D0enRxvXPyAYdMHpeQdX1ac0b9Q.roa
Signing time:             Mon 02 Jan 2023 09:14:49 +0000
ROA not before:           Mon 02 Jan 2023 09:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200398
IP address blocks:        2a06:e881:9740::/42 maxlen: 48
                          2a06:e881:9720::/43 maxlen: 48
                          2a06:e881:9710::/44 maxlen: 48
                          2a06:e881:9780::/41 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:19:64:ac:cb:f7:a5:b8:e4:b7:f9:cc:6b:a6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f47a7471bd73f201874c1e9790757d5a7346fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:12:e2:71:6a:d4:d8:30:e1:ec:54:22:d4:
                    13:c3:fd:de:cd:9b:57:1e:c9:ec:a1:ec:d3:32:7e:
                    06:fc:f4:c3:11:43:f4:e6:3f:58:e7:42:03:8b:a5:
                    22:4d:fd:47:b1:23:b9:b2:d6:71:c4:44:73:34:9c:
                    9f:c9:c6:87:32:6d:7a:5c:f6:6d:fb:b1:f6:d7:cf:
                    19:d0:d4:7b:b8:17:c3:e3:aa:2c:ea:2f:29:d5:e0:
                    53:c0:84:2e:64:de:25:ac:b4:a3:eb:09:4e:7c:7e:
                    ea:7e:8e:17:77:8c:5a:64:44:85:72:2e:db:fe:84:
                    69:0c:17:9b:2c:a5:2b:9e:d1:ec:5f:18:05:9b:25:
                    68:a4:2b:aa:69:4c:91:2e:f4:ca:71:74:c1:7f:0d:
                    0e:ec:cb:60:5c:37:48:57:8e:aa:e3:3f:d1:a2:7b:
                    e2:71:9f:b0:66:67:f5:15:e2:d6:63:79:6a:4a:37:
                    83:3f:2d:06:9a:b2:f6:aa:03:4e:94:4c:f1:cc:0b:
                    14:47:dd:7e:8a:24:e6:a9:66:6b:fc:1e:c5:14:f8:
                    ab:11:0a:94:69:3a:92:6c:c9:c6:ec:d5:e6:5d:b0:
                    dd:69:f6:53:f1:59:ee:0a:4d:e5:2e:ad:72:2e:ac:
                    46:5f:9b:6e:c2:49:65:a2:8a:50:86:f2:db:90:8f:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:A7:47:1B:D7:3F:20:18:74:C1:E9:79:07:57:D5:A7:34:6F:D4
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/D0enRxvXPyAYdMHpeQdX1ac0b9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:9710::-2a06:e881:97ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:45:eb:47:75:ab:6b:ca:21:c6:71:31:09:71:3d:1e:82:
         04:7c:d7:6d:6b:c0:93:69:2a:94:ee:f7:56:19:82:44:19:1f:
         1c:85:1e:c5:35:cf:61:4c:d3:16:ca:39:a7:9a:93:ce:3c:81:
         85:c0:ef:3b:67:5b:90:17:9f:32:e0:bb:65:ed:71:1b:ef:05:
         d5:05:bc:89:16:c7:cb:43:4a:04:03:c5:4d:b2:6a:c7:98:b0:
         4f:90:ec:23:59:e1:ec:c6:58:25:46:6d:0e:e0:c4:94:b5:66:
         ab:25:2e:61:d2:b1:8a:16:3d:6e:89:fb:58:ed:26:ba:03:e4:
         48:3b:4e:23:d8:9c:47:29:b7:94:69:13:32:a0:9a:2a:e4:9c:
         d3:10:34:ef:c1:d4:8d:28:ae:bf:c1:31:d1:17:65:aa:bd:1a:
         89:b5:5c:f1:35:f1:ed:90:b9:12:ce:e1:71:87:3c:b5:a7:22:
         ad:bd:bf:58:24:55:d8:f3:cd:31:83:7c:61:57:f4:72:1f:fb:
         58:df:3c:12:36:3b:11:12:9c:33:76:8e:33:6c:f4:52:d5:ec:
         a9:02:54:1f:c7:30:1e:f8:be:8e:e3:07:51:9c:49:18:09:4d:
         12:1c:e2:f8:0e:ac:c6:8a:54:e1:34:2a:ae:d1:64:a2:1c:e1:
         20:57:2a:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----