Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/_26Ea8hXd9oaN-OGcT_b5N85PJo.roa
File:                     _26Ea8hXd9oaN-OGcT_b5N85PJo.roa (raw, json)
Hash identifier:          rCEkJX+eJBQiRA5amRJThxVMbMY9sZhVSXGLzPVVfEQ=
Subject key identifier:   FF:6E:84:6B:C8:57:77:DA:1A:37:E3:86:71:3F:DB:E4:DF:39:3C:9A
Certificate issuer:       /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial:       0185F8498DF98FF64B39083525539B13832B
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/_26Ea8hXd9oaN-OGcT_b5N85PJo.roa
Signing time:             Sat 28 Jan 2023 12:10:48 +0000
ROA not before:           Sat 28 Jan 2023 12:10:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205929
IP address blocks:        2a06:89c4:c000::/48 maxlen: 48
                          2a06:89c3:5010::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f8:49:8d:f9:8f:f6:4b:39:08:35:25:53:9b:13:83:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
        Validity
            Not Before: Jan 28 12:10:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff6e846bc85777da1a37e386713fdbe4df393c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:b0:36:e7:c9:73:7e:8e:11:49:6f:35:62:
                    6a:38:fa:f5:56:61:af:69:43:e5:8c:94:4a:80:9c:
                    f3:64:8b:39:ab:57:d9:cb:f7:23:ef:5a:80:03:e5:
                    bc:90:46:b9:d4:d9:92:61:1e:a0:e6:6f:f4:5e:82:
                    74:72:33:b8:e7:17:e2:4e:ef:a5:fa:e0:f8:b6:07:
                    eb:da:8d:42:80:7c:ee:03:b3:1d:eb:7d:55:ae:83:
                    1d:ed:54:63:d8:2a:01:40:f0:b6:80:ae:b4:d6:39:
                    09:cf:00:9c:a0:b7:c1:41:15:cd:b9:fe:5e:af:3e:
                    80:e7:2a:08:3b:3d:b4:f7:c0:c5:a8:94:a9:16:54:
                    1e:e5:38:c6:3c:b1:b6:cd:09:df:d1:ad:35:2c:6d:
                    79:55:36:ff:f5:dd:9f:59:0c:63:5e:46:1e:2f:a6:
                    d4:40:c3:fc:d3:ee:b2:ba:24:69:1d:67:03:b2:e3:
                    7c:67:07:b4:66:65:15:60:e0:3d:23:c1:95:fa:63:
                    88:c1:53:9a:5e:f8:6e:2a:73:13:e2:de:df:a4:5b:
                    2b:32:6d:e3:93:3e:89:5a:80:2c:56:b4:56:b7:e1:
                    66:45:0e:b4:6c:74:b9:06:c2:98:ff:59:5a:bf:3c:
                    fc:74:09:8f:bf:65:80:aa:0f:d7:3e:af:db:ab:dc:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6E:84:6B:C8:57:77:DA:1A:37:E3:86:71:3F:DB:E4:DF:39:3C:9A
            X509v3 Authority Key Identifier:
                keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/_26Ea8hXd9oaN-OGcT_b5N85PJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:89c3:5010::/48
                  2a06:89c4:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:8d:fc:f8:4c:81:fe:39:8b:76:df:e6:3d:5f:4b:48:9b:
         1f:2a:90:b3:5d:7b:5c:2d:e1:10:36:f5:39:33:ed:39:82:66:
         1c:b4:5a:c2:77:09:30:3f:c4:29:f3:73:9d:53:bb:f4:35:93:
         ad:fa:65:19:bd:2c:62:63:78:15:0c:af:a9:f4:a3:ca:0f:0a:
         2f:da:4a:f5:c2:84:fb:24:eb:3f:20:0d:d2:1e:ea:51:a0:9e:
         e6:60:67:17:a2:46:42:96:b0:6e:44:f3:7d:44:9f:48:46:a1:
         73:28:af:71:aa:e1:86:0c:a7:00:ce:a3:bc:00:1e:bc:14:8e:
         6d:25:91:f3:9e:4d:7b:58:ef:a1:d5:7b:0f:f6:97:0b:c1:9c:
         1f:67:b0:3b:d6:cd:58:6d:92:11:8f:7d:a9:3f:2c:bc:bd:e8:
         e6:8a:47:3d:e3:fd:43:a0:6f:99:41:c5:3b:84:6e:3f:73:8f:
         5d:7e:08:6e:59:fc:d4:17:79:03:78:1c:ff:4f:8c:af:bd:81:
         92:6e:7f:45:1d:44:52:ac:07:cb:80:cd:0d:13:e0:09:f5:cd:
         6e:3a:72:ee:85:a3:7f:f3:25:d1:f8:04:40:6a:9c:64:6a:08:
         0f:3f:66:de:70:ee:b9:30:38:b8:3a:ef:81:f8:48:cf:b7:55:
         27:fb:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----