Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lRCOkjvWGcf8WsjPXxxMHaUo4Gs.roa
File:                     lRCOkjvWGcf8WsjPXxxMHaUo4Gs.roa (raw, json)
Hash identifier:          Z4VV8zdjvqvIlX5jRht4V+zmHLbET+k8GQXXcnX2/4g=
Subject key identifier:   95:10:8E:92:3B:D6:19:C7:FC:5A:C8:CF:5F:1C:4C:1D:A5:28:E0:6B
Certificate issuer:       /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial:       01859580C52BE56AA1797C38C558E13EF7EA
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lRCOkjvWGcf8WsjPXxxMHaUo4Gs.roa
Signing time:             Mon 09 Jan 2023 07:48:42 +0000
ROA not before:           Mon 09 Jan 2023 07:48:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50673
IP address blocks:        2a0d:f300::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:95:80:c5:2b:e5:6a:a1:79:7c:38:c5:58:e1:3e:f7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
        Validity
            Not Before: Jan  9 07:48:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95108e923bd619c7fc5ac8cf5f1c4c1da528e06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:14:06:f9:bc:64:df:5e:41:40:9f:62:3e:
                    c0:e6:a2:de:a3:fe:23:0e:fd:cd:da:6b:41:74:a4:
                    81:82:e7:da:d8:a6:de:ce:26:45:0e:15:1d:a5:3c:
                    5c:d7:ca:05:f2:5d:41:0a:da:f1:6c:f2:49:ca:25:
                    23:39:6d:ce:5e:19:e4:cb:5f:e9:2a:70:7d:35:69:
                    31:9c:4e:d0:26:ba:e0:f8:18:3b:5f:86:20:96:5d:
                    5d:56:ff:da:43:26:c5:3b:11:fe:17:8f:44:89:20:
                    ba:22:de:df:6a:4f:08:14:16:f7:98:3f:c0:58:62:
                    dc:a0:e4:2b:bc:a8:85:2e:de:83:1c:65:ad:cb:13:
                    17:cf:f4:96:26:69:78:d3:7e:97:94:5c:cb:c9:6c:
                    ac:b5:ce:8e:ba:9c:02:a9:15:39:dc:ea:84:39:ff:
                    28:23:57:85:8e:06:22:ce:6f:a8:0c:83:89:cd:97:
                    3a:4a:c0:53:e2:b5:ae:89:2a:1d:ed:38:37:d1:ff:
                    d1:2d:8a:d1:03:90:db:34:9b:53:8b:90:4a:e6:dc:
                    79:a5:7f:1b:41:6f:39:c1:d5:9c:4a:26:80:06:a4:
                    82:a9:ed:ae:9d:ba:e6:f9:d7:13:fc:e1:1a:5f:26:
                    f3:84:8d:c9:4d:05:bc:ae:2e:4d:01:d5:6e:cc:b5:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:8E:92:3B:D6:19:C7:FC:5A:C8:CF:5F:1C:4C:1D:A5:28:E0:6B
            X509v3 Authority Key Identifier:
                keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lRCOkjvWGcf8WsjPXxxMHaUo4Gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:f300::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:8c:7c:51:0a:8b:68:9b:9b:32:1e:27:8f:e4:9d:56:b3:
         cd:1c:de:59:4f:f4:1c:c9:cb:56:1a:27:2a:7e:64:15:58:2e:
         02:77:73:a5:57:2a:9a:c8:98:75:98:e7:53:34:1a:ac:f5:95:
         1b:5d:65:a7:60:66:d5:a1:09:63:b2:56:9a:a7:59:f2:03:d2:
         52:c2:4e:f8:0c:6e:d2:da:fb:98:56:b3:70:90:ce:90:0b:bb:
         ea:a4:b4:3f:3e:4b:6a:43:63:1d:74:bd:86:99:1a:9e:90:6b:
         af:38:14:41:0d:cb:f6:63:1e:bb:c0:d2:f2:6c:19:27:10:52:
         db:25:22:66:a5:79:70:0c:7c:63:eb:a4:5e:1f:3a:e6:0b:5f:
         5b:20:34:23:0c:47:90:bc:0f:bd:5b:94:a9:c0:4f:ff:90:47:
         44:79:ac:af:e5:83:ec:0e:70:f4:1e:af:6a:38:d8:38:d1:02:
         a9:3b:79:d8:f1:17:8d:76:da:cb:eb:98:ed:bb:96:03:b2:f3:
         c7:08:6e:23:2c:8d:89:bf:57:ed:a1:b0:fb:66:53:a5:65:20:
         e6:00:6f:12:5b:57:84:4c:e3:a5:c5:6a:9b:13:9b:62:0a:7b:
         1d:38:a1:c0:bf:3e:36:f1:bd:dd:b5:76:dd:6f:ab:cb:20:bc:
         87:2e:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----