Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/T7D16faZITdv6v_KmJQq0MygYKM.roa
File:                     T7D16faZITdv6v_KmJQq0MygYKM.roa (raw, json)
Hash identifier:          wL3dLHe5rGCBcjOOKwUgaBGH1ULnqtRNDhQJIS2pPxM=
Subject key identifier:   4F:B0:F5:E9:F6:99:21:37:6F:EA:FF:CA:98:94:2A:D0:CC:A0:60:A3
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C32B25E997B8C4ABDFFE12943663F8
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/T7D16faZITdv6v_KmJQq0MygYKM.roa
Signing time:             Mon 02 Jan 2023 09:14:53 +0000
ROA not before:           Mon 02 Jan 2023 09:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212364
IP address blocks:        2a06:e881:8502::/48 maxlen: 48
                          2a06:e881:8500::/48 maxlen: 48
                          2a06:e881:8501::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:2b:25:e9:97:b8:c4:ab:df:fe:12:94:36:63:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4fb0f5e9f69921376feaffca98942ad0cca060a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:f3:dd:79:b6:07:c2:4b:59:7a:f4:21:f0:
                    3a:99:10:6a:e4:78:81:26:f7:a8:f9:8f:95:2f:b3:
                    e5:c2:d8:99:8c:a7:7e:a3:d0:e9:63:55:48:28:bc:
                    44:06:b6:39:ea:fd:a6:cc:b5:50:ff:ee:f3:2c:5b:
                    14:20:96:36:ff:6e:e9:f5:e7:9b:c3:a5:2d:6d:7d:
                    4f:f3:58:16:87:39:3e:7e:1b:13:ff:c7:5f:83:82:
                    3d:c7:87:2b:3d:d8:0f:d1:2e:d9:30:a2:65:de:59:
                    5d:36:8a:7e:c9:3c:17:c1:00:84:55:d9:04:ed:58:
                    d7:a1:b7:ea:df:b1:20:65:45:d7:5d:63:4a:b2:da:
                    68:b2:3f:03:cd:bc:b0:db:1b:7b:a9:d4:5d:4b:62:
                    8c:5e:c2:8e:76:f0:f0:3c:7a:3c:97:c6:9a:cb:2f:
                    f0:30:f5:ba:96:2b:20:78:8f:fb:53:b3:50:fe:fa:
                    2a:2c:49:97:64:81:ce:03:3b:03:fa:34:b0:a7:c2:
                    dd:f1:19:16:0f:27:0b:1b:38:45:86:00:a8:a2:a5:
                    0d:f9:ee:1c:c0:32:96:41:cc:bd:5d:ac:91:35:64:
                    14:b0:6c:83:59:d3:14:28:c8:e2:15:e1:b8:76:90:
                    d2:f1:04:67:65:b4:00:da:4e:6b:16:7b:cb:b9:a7:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:F5:E9:F6:99:21:37:6F:EA:FF:CA:98:94:2A:D0:CC:A0:60:A3
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/T7D16faZITdv6v_KmJQq0MygYKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:8500::-2a06:e881:8502:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         75:be:07:55:2e:05:6a:40:b6:c5:d3:7c:4d:11:92:84:dd:20:
         9c:8e:f2:07:01:61:62:b1:ce:26:0e:e1:28:a5:05:73:d1:8a:
         22:b9:44:7e:5a:76:c6:a3:6a:03:be:d9:dc:35:32:f6:bd:d7:
         e0:87:10:a9:40:0d:63:7d:b7:e8:fe:1b:4b:8d:87:75:26:3f:
         26:3e:9e:5e:e0:7f:81:4d:88:1b:ff:1e:be:22:2a:8e:5c:b7:
         8b:1b:ce:7b:68:4a:6c:26:4e:f8:d6:e1:99:c7:82:53:b3:55:
         ea:65:c3:71:ad:e4:cc:d9:da:f8:cf:c2:42:4e:6a:52:95:f2:
         b7:af:7b:f5:d8:e3:5f:01:87:13:e1:d4:20:35:d7:c0:a3:a4:
         7b:59:3d:4a:bf:a5:8c:17:79:27:93:22:71:30:12:9f:86:50:
         a1:d0:e0:3b:b0:37:f9:a1:fb:0c:cb:e0:e2:ea:66:08:c8:d9:
         7d:79:1f:ff:02:ac:0d:19:37:e0:64:66:8b:55:fe:83:fc:25:
         ef:39:69:2b:1e:60:5a:f7:24:6a:0f:8f:db:39:a4:8f:2b:1a:
         25:2a:8e:52:b0:a8:6a:7f:3d:f2:ee:20:05:76:4d:71:bc:1c:
         e3:3b:43:9a:9f:a2:11:5e:e2:d4:72:b6:4f:b6:f3:e8:3e:62:
         45:fc:c5:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----