Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/rXhjUyNdufJhBkyGs9jtX-6LRXM.roa
File:                     rXhjUyNdufJhBkyGs9jtX-6LRXM.roa (raw, json)
Hash identifier:          5hkTbl2bQ03GjKlyE7PARxg4lvwRwUUhhSwdYV/Wzuk=
Subject key identifier:   AD:78:63:53:23:5D:B9:F2:61:06:4C:86:B3:D8:ED:5F:EE:8B:45:73
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       01856CAF022EF1268E28DF0C617FC42CB021
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/rXhjUyNdufJhBkyGs9jtX-6LRXM.roa
Signing time:             Sun 01 Jan 2023 09:34:46 +0000
ROA not before:           Sun 01 Jan 2023 09:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396253
IP address blocks:        2a03:b8c0:1b::/48 maxlen: 48
                          2a03:b8c0:1e::/48 maxlen: 48
                          2a03:b8c0:19::/48 maxlen: 48
                          2a03:b8c0:21::/48 maxlen: 48
                          2a03:b8c0:29::/48 maxlen: 48
                          2a03:b8c0:1c::/48 maxlen: 48
                          2a03:b8c0:24::/48 maxlen: 48
                          2a03:b8c0:2a::/48 maxlen: 48
                          2a03:b8c0:1a::/48 maxlen: 48
                          2a03:b8c0:22::/48 maxlen: 48
                          2a03:b8c0:15::/48 maxlen: 48
                          2a03:b8c0:20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:02:2e:f1:26:8e:28:df:0c:61:7f:c4:2c:b0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Jan  1 09:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad786353235db9f261064c86b3d8ed5fee8b4573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:b5:46:0f:8e:a6:5c:b3:c8:1f:96:6b:27:
                    db:6d:40:bd:b3:4b:81:4f:6e:24:45:84:4e:e4:48:
                    f8:f2:ee:40:de:f3:f4:2b:f0:d4:b7:96:93:61:f8:
                    60:a9:a2:ea:99:0d:51:cc:1b:43:e0:b2:6e:cb:12:
                    39:0d:39:94:3d:67:f1:59:4a:1e:1e:43:94:35:89:
                    57:a1:90:f2:55:2a:de:b7:10:ee:39:90:30:e3:2b:
                    eb:06:3a:d0:fd:59:11:88:6b:f7:ac:8e:a7:98:65:
                    6d:58:fb:ed:1e:5e:34:d1:2f:d9:49:cc:d3:52:d9:
                    12:a4:33:87:b4:c5:fa:2c:06:e6:91:4a:bb:66:1c:
                    8f:6e:e2:43:f4:f0:63:c5:e6:9b:d2:03:27:50:cb:
                    f4:2f:45:a2:4e:4c:00:b3:fb:e1:c2:d7:6e:50:da:
                    3e:21:d6:62:23:6d:cc:84:79:2f:b9:82:76:74:21:
                    7a:ae:37:8a:bd:95:7f:3d:24:81:31:81:22:73:e4:
                    bd:84:2d:ad:ae:6a:a9:2e:19:06:7f:6a:a5:80:96:
                    3d:88:6b:40:49:d0:5d:ce:0a:b9:05:8a:5d:a2:83:
                    bd:dd:41:f8:04:88:c7:f6:2c:47:1b:91:b2:6a:d8:
                    c9:be:e7:d3:69:ae:0c:49:af:36:29:3c:19:24:bd:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:63:53:23:5D:B9:F2:61:06:4C:86:B3:D8:ED:5F:EE:8B:45:73
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/rXhjUyNdufJhBkyGs9jtX-6LRXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:b8c0:15::/48
                  2a03:b8c0:19::-2a03:b8c0:1c:ffff:ffff:ffff:ffff:ffff
                  2a03:b8c0:1e::/48
                  2a03:b8c0:20::-2a03:b8c0:22:ffff:ffff:ffff:ffff:ffff
                  2a03:b8c0:24::/48
                  2a03:b8c0:29::-2a03:b8c0:2a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:ea:8c:d4:b1:53:31:16:b8:9d:ab:aa:a7:64:42:b2:e2:
         bb:a4:6a:d5:6a:34:28:06:c1:95:cb:27:4b:b2:fe:59:79:c1:
         eb:07:2e:31:da:f4:d6:2d:4c:04:57:be:06:90:29:e5:fd:21:
         eb:4f:06:e7:e7:c3:b8:61:f4:1c:50:f2:8f:a9:4c:6c:1e:cb:
         6d:a9:6f:fb:06:0c:2f:c5:06:ad:bb:44:a9:02:97:99:1a:0d:
         3f:84:42:1d:7e:03:35:ed:81:32:cc:b6:56:83:e2:2a:3a:e4:
         3c:c6:8b:43:75:8c:ee:1f:ad:46:3c:f1:18:2c:bf:49:9e:58:
         cd:e7:9c:7d:34:8e:0d:5b:cb:66:c8:b1:52:1b:60:a2:15:6c:
         7c:f0:33:c3:84:9a:3b:bc:0f:9a:da:21:f8:e9:d5:c4:3a:44:
         3c:01:d5:8a:25:81:f7:97:1b:a0:ff:c5:88:d4:35:40:58:9c:
         c2:56:cb:ae:1d:23:84:b4:74:79:be:73:18:09:b9:80:e6:61:
         71:b4:f6:fa:d7:4c:67:b5:ee:2d:f9:08:67:5b:82:72:54:93:
         c7:86:78:e6:19:51:b5:f3:7b:b8:16:96:ad:6d:55:7f:ad:6c:
         15:cd:13:50:b0:6f:39:db:5e:77:71:0b:68:99:5c:5d:49:d9:
         66:d7:52:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----