Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa
File:                     1-outoDrLpSFnxiIqbVdjAOsS2bY.roa (raw, json)
Hash identifier:          tGOuXvz2aU59awb6JFh8Rmago0d5ZfIHVREHLHX1Elk=
Subject key identifier:   FA:8B:AD:A0:3A:CB:A5:21:67:C6:22:2A:6D:57:63:00:EB:12:D9:B6
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       01856CB85E61CD6123090F0F15DF718EAE8B
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa
Signing time:             Sun 01 Jan 2023 09:45:00 +0000
ROA not before:           Sun 01 Jan 2023 09:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15474
IP address blocks:        130.208.0.0/16 maxlen: 16
                          2a00:c88::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:5e:61:cd:61:23:09:0f:0f:15:df:71:8e:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Jan  1 09:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa8bada03acba52167c6222a6d576300eb12d9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:a9:09:f8:ed:4e:39:0e:10:e9:ad:1b:dc:
                    16:14:d2:62:c0:ff:01:31:8e:d7:07:9a:02:61:66:
                    0b:8a:f3:8c:d8:94:cd:a3:c6:6c:9d:d0:55:47:8f:
                    bf:9a:fb:4c:e0:77:66:14:df:1a:fc:e6:4f:4d:53:
                    2b:2c:ae:18:51:07:b2:05:5e:c7:a7:85:c1:4b:2c:
                    2c:6a:65:4e:58:db:c6:51:68:4f:ba:60:4b:ab:b6:
                    f2:b8:db:38:dc:2c:cb:49:85:9d:a0:e1:75:c9:4c:
                    2f:45:91:70:88:cc:6c:04:50:48:cb:fb:78:2b:f5:
                    86:6c:68:7f:bf:df:29:de:56:bd:2d:94:ca:a0:c5:
                    bb:5d:b6:5c:90:b7:f8:46:69:df:96:5f:55:22:20:
                    34:37:5d:65:a2:de:a3:9e:70:dc:b0:e0:16:17:14:
                    04:ae:ad:f9:d6:6c:dd:d1:6e:c4:82:d1:c1:87:b7:
                    67:fc:8e:b3:b8:dc:0b:7d:62:64:71:5f:87:44:a6:
                    32:39:5d:50:d2:6d:c2:6d:a0:68:14:20:ff:4e:85:
                    2c:4f:73:61:65:ec:86:e3:a1:af:c2:05:0e:65:db:
                    ab:c4:71:6e:6a:7c:a4:16:0a:a2:10:dc:9e:3d:ca:
                    79:9a:5e:10:33:21:1f:3b:a4:d3:0d:c2:f3:d2:b0:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8B:AD:A0:3A:CB:A5:21:67:C6:22:2A:6D:57:63:00:EB:12:D9:B6
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/1-outoDrLpSFnxiIqbVdjAOsS2bY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.208.0.0/16
                IPv6:
                  2a00:c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:19:e3:6f:3b:70:dd:88:1d:f7:4b:df:35:8c:a5:e4:08:
         35:62:6e:34:2c:94:70:69:6f:98:82:95:fe:8d:b0:6c:da:01:
         f2:bc:f1:53:b9:f2:15:85:a9:6f:17:be:d7:f1:0c:08:76:40:
         b9:17:45:38:c0:be:6b:06:c6:a7:2d:f1:de:e7:ec:b0:3f:73:
         79:e0:2c:13:57:84:b2:98:81:c3:15:1c:13:29:fa:4b:47:d0:
         b8:cc:15:c3:fa:06:4d:e2:fe:5d:ba:12:12:36:09:6c:0e:71:
         55:64:7f:21:62:ec:b5:06:8c:8e:cb:43:bf:ad:80:f8:d4:f5:
         9d:0b:37:a8:fd:61:8e:32:a4:a0:60:40:d2:98:6e:54:96:01:
         34:90:ed:c2:c9:95:f7:db:b7:4f:40:60:32:94:bc:23:63:e2:
         35:94:a9:fc:9a:e1:bb:0f:26:f0:0e:dc:ea:2a:b1:68:68:12:
         7a:11:47:13:be:9a:81:c8:a9:b1:f7:3e:e4:89:eb:d9:c3:ee:
         20:34:55:74:d6:3a:7f:4d:3f:05:4c:82:2c:fb:39:15:a2:c1:
         bf:70:1a:45:20:17:55:8c:77:ed:f4:2b:10:74:cd:cb:8e:ac:
         27:ac:74:e5:c6:b1:ae:0b:51:ad:db:9e:ce:d1:40:87:3d:5f:
         04:11:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----