Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/J_j15Bimfc4b2mO2sU0ntFR6YvU.roa
File:                     J_j15Bimfc4b2mO2sU0ntFR6YvU.roa (raw, json)
Hash identifier:          83ooynvqQyWGBFm/BYre8Orm+cu9tjJ3eZgBiW30m8k=
Subject key identifier:   27:F8:F5:E4:18:A6:7D:CE:1B:DA:63:B6:B1:4D:27:B4:54:7A:62:F5
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C313B394663962C3BD272DB2E6020D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/J_j15Bimfc4b2mO2sU0ntFR6YvU.roa
Signing time:             Mon 02 Jan 2023 09:14:48 +0000
ROA not before:           Mon 02 Jan 2023 09:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a06:e881:73ff::/48 maxlen: 48
                          2a06:e881:650f::/48 maxlen: 48
                          2a06:e881:9200::/45 maxlen: 48
                          2a06:e881:9300::/44 maxlen: 48
                          2a06:e881:9700::/44 maxlen: 44
                          2a06:e881:9600::/48 maxlen: 48
                          2a06:e881:9700::/48 maxlen: 48
                          2a06:e881:9701::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:13:b3:94:66:39:62:c3:bd:27:2d:b2:e6:02:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27f8f5e418a67dce1bda63b6b14d27b4547a62f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:4c:71:e6:74:2a:ca:e1:55:95:8b:00:c0:
                    de:bf:b9:31:eb:a2:29:42:9e:05:bb:71:b2:37:49:
                    c2:96:7c:00:b2:80:35:b1:fc:8b:c5:bb:ef:99:6a:
                    83:67:e9:ce:a7:5f:21:ec:d4:18:7d:24:89:dc:52:
                    f3:98:9e:c0:b3:c1:4b:59:9d:f7:b4:88:ed:3a:f4:
                    b4:25:f2:fd:fb:b5:2b:26:db:ed:e2:20:08:39:6b:
                    80:10:54:90:44:f6:e3:95:84:e1:c3:72:75:70:90:
                    50:7b:9d:2f:c1:24:b1:2f:06:fd:e7:c9:37:d2:57:
                    36:e0:cf:c0:46:0d:d9:9a:ff:2d:fb:38:86:e8:f1:
                    5c:d4:e4:64:ad:99:4f:10:f1:91:43:80:c9:eb:da:
                    7a:39:12:a1:9b:b3:48:ae:41:6b:56:9f:2f:86:db:
                    6f:c6:83:ef:63:a4:e1:73:05:77:79:a6:f2:43:fe:
                    ac:36:09:23:ca:d1:ae:3f:fe:ac:e8:f0:4f:bc:85:
                    1f:68:e0:8c:fe:e1:74:55:66:67:36:26:82:f6:20:
                    83:56:2f:ed:fd:8c:5b:4d:5f:93:8e:be:5e:e6:36:
                    be:63:a4:c6:f5:41:ae:b2:77:6a:a7:59:8b:b1:2d:
                    e6:c2:2e:9b:ed:9b:59:44:fc:8d:df:ff:e1:83:53:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:F5:E4:18:A6:7D:CE:1B:DA:63:B6:B1:4D:27:B4:54:7A:62:F5
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/J_j15Bimfc4b2mO2sU0ntFR6YvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:650f::/48
                  2a06:e881:73ff::/48
                  2a06:e881:9200::/45
                  2a06:e881:9300::/44
                  2a06:e881:9600::/48
                  2a06:e881:9700::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:04:ef:b7:01:a6:ea:a8:15:d3:26:a7:1a:c7:32:33:4d:
         c8:5c:94:e2:05:9b:b7:0a:b8:82:05:10:0f:00:f7:e3:6d:bd:
         53:c7:48:2c:21:d9:e2:a2:67:8a:72:a8:0d:7a:81:dd:50:3b:
         db:55:0c:1f:a0:eb:63:1e:85:df:95:ec:21:e0:7f:83:ce:80:
         85:03:be:e8:ca:9f:3a:e6:a2:31:ea:e9:9c:1d:4e:19:cd:d6:
         15:65:82:07:4b:d3:a0:cb:49:ba:bb:55:63:c3:8b:26:82:3d:
         bd:50:bc:90:f3:6e:fd:84:c7:62:9f:ac:b1:5f:b9:2f:49:fd:
         fd:28:3d:c7:2e:38:18:d9:01:98:45:c9:0a:24:b1:bf:9d:ea:
         1d:12:07:26:c7:ea:93:5a:88:27:f3:de:02:f8:d9:72:cc:be:
         9d:a4:04:5e:53:1b:f4:11:55:cc:c4:fa:c6:57:15:1b:ac:49:
         d9:d5:15:a4:da:86:25:21:79:df:e5:3e:ac:8a:74:c3:9e:fc:
         34:ee:2a:a9:82:03:eb:2c:64:ad:40:de:98:a3:73:fb:9b:4d:
         20:c4:59:7c:4c:f7:22:ee:4a:9e:4b:9c:5f:24:05:76:e4:0d:
         2b:44:ae:49:fe:e4:ba:de:8d:b2:e0:74:ad:15:14:13:79:77:
         74:10:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----