Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/zIIaxvIeFSlxQ-f0RP14TboVXwo.roa
File:                     zIIaxvIeFSlxQ-f0RP14TboVXwo.roa (raw, json)
Hash identifier:          zHVoDaAcQZrXDOYlouTiJ9AK1o8pTDohkhlmVMB0iZY=
Subject key identifier:   CC:82:1A:C6:F2:1E:15:29:71:43:E7:F4:44:FD:78:4D:BA:15:5F:0A
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       0186E9EED6BA51E02B9E691B7F581B038F31
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/zIIaxvIeFSlxQ-f0RP14TboVXwo.roa
Signing time:             Thu 16 Mar 2023 10:19:49 +0000
ROA not before:           Thu 16 Mar 2023 10:19:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211579
IP address blocks:        2a0f:5707:24::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e9:ee:d6:ba:51:e0:2b:9e:69:1b:7f:58:1b:03:8f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Mar 16 10:19:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc821ac6f21e15297143e7f444fd784dba155f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:fd:7c:df:29:31:30:5b:5b:48:60:be:28:
                    c3:6a:ce:21:b3:f8:ad:f4:ab:82:91:f9:c5:b7:aa:
                    1d:4b:01:f9:41:f6:b2:8c:e0:a0:d4:b0:89:d0:ba:
                    ea:2f:17:2b:33:9b:97:f9:cb:c0:36:97:c8:9d:26:
                    29:88:14:3b:cc:50:e3:b1:d5:13:e3:6f:4c:ff:d0:
                    3b:e0:d5:c5:e2:47:03:1f:a2:e9:b8:d9:62:18:98:
                    96:ee:04:ee:7d:f0:6f:ae:d9:e3:b1:79:9d:41:07:
                    b9:72:60:c6:a3:3e:d9:55:c2:7a:52:a6:c6:cb:df:
                    63:4b:fd:cd:d8:0f:8c:15:37:c3:68:9d:44:46:99:
                    74:fa:5d:3c:94:91:00:1e:0d:07:e5:ea:86:0e:34:
                    13:8f:31:2c:60:74:5a:45:35:fe:22:79:55:60:48:
                    e1:2d:60:fb:f6:20:35:4d:74:9f:19:c9:cf:9e:1f:
                    42:53:61:11:ed:8c:a9:7d:94:7c:38:6a:36:4f:01:
                    0d:ba:ab:99:25:91:71:60:35:0c:26:62:a9:8e:06:
                    4c:61:51:0a:01:0d:fe:84:1d:0a:34:7b:f1:3b:6d:
                    9e:52:2f:6f:04:48:96:e9:23:20:74:2d:d8:76:41:
                    56:2f:13:3d:18:62:fe:88:9c:97:9c:9f:c6:cd:fb:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:82:1A:C6:F2:1E:15:29:71:43:E7:F4:44:FD:78:4D:BA:15:5F:0A
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/zIIaxvIeFSlxQ-f0RP14TboVXwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:6b:54:a5:92:52:42:64:24:27:36:5c:83:96:ad:5a:92:4a:
         1b:73:11:5d:7c:92:b3:9c:5c:c4:dd:d9:e1:0a:35:53:a6:b9:
         48:af:61:6a:66:75:2c:e2:7c:28:ee:e9:75:5a:4b:1b:20:4d:
         3d:57:13:e8:f0:97:0b:cf:c3:22:1f:b9:b4:02:4d:5d:7a:f4:
         50:e1:51:f5:72:21:78:4d:31:d2:d4:3f:a5:e7:1f:df:30:3c:
         93:a0:8f:9a:f9:61:ef:18:bc:df:56:f9:f2:0e:37:dc:f7:9b:
         f3:23:2d:56:07:0f:bc:df:e5:91:47:8c:68:74:4a:c7:0c:bb:
         c8:23:30:22:dc:7c:99:e2:9c:4e:0e:b1:8e:da:bf:31:b8:7d:
         4b:cf:b4:dd:9e:51:f3:00:70:ce:b0:d0:1b:68:6b:77:14:c6:
         23:21:2b:fa:3d:bb:27:dc:d3:9c:8e:3b:8a:95:6e:e8:54:31:
         6e:a7:7e:58:4a:8a:29:7a:cd:cc:99:0a:8e:1b:bf:c0:96:34:
         cf:f5:6a:ce:59:9b:bc:39:e4:3a:2c:bc:68:d4:97:89:e0:fd:
         93:cd:2b:8b:d5:a5:f4:e2:2a:56:b1:26:79:da:1f:6a:ea:6d:
         e7:75:d0:3c:f1:ac:bd:45:d4:3a:ca:b2:fc:f1:f2:ad:b0:ea:
         71:50:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----