Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/MfzV-snDaHNa7z7J-tS8lYuGjjM.roa
File:                     MfzV-snDaHNa7z7J-tS8lYuGjjM.roa (raw, json)
Hash identifier:          Q5oNIq5osWvUIoRPyN6AScGdybKJxtiw5T7xYD50ui8=
Subject key identifier:   31:FC:D5:FA:C9:C3:68:73:5A:EF:3E:C9:FA:D4:BC:95:8B:86:8E:33
Certificate issuer:       /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial:       0186B65F38ACA28FD422E59B1DE5692C063B
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/MfzV-snDaHNa7z7J-tS8lYuGjjM.roa
Signing time:             Mon 06 Mar 2023 10:02:19 +0000
ROA not before:           Mon 06 Mar 2023 10:02:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        2a11:7e06::/32 maxlen: 32
                          2a11:7e01::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:5f:38:ac:a2:8f:d4:22:e5:9b:1d:e5:69:2c:06:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
        Validity
            Not Before: Mar  6 10:02:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31fcd5fac9c368735aef3ec9fad4bc958b868e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:fb:ee:a0:f6:fa:c7:81:27:64:e3:8a:2a:
                    ef:dc:99:4e:c0:ae:26:99:fc:10:aa:99:d5:de:53:
                    b0:b9:59:fd:b6:53:e6:26:d9:30:6e:d9:d4:e6:e8:
                    37:06:19:2a:f4:d5:8a:a6:01:e1:66:3f:57:2a:b6:
                    45:fa:6f:5b:85:04:3a:65:96:fa:75:2d:2c:90:ff:
                    0b:cd:5c:81:bd:1d:28:78:de:ca:b2:8d:43:19:b8:
                    77:7c:cf:4b:fa:09:c3:11:0a:ec:15:7e:4e:93:23:
                    0c:9f:f0:7d:f6:5e:55:b8:39:24:eb:75:ac:87:f5:
                    e1:d1:16:f2:4b:ce:90:b5:22:d8:9b:63:22:bb:e0:
                    70:e0:91:39:cb:e4:40:ae:9c:44:5d:66:06:cf:7e:
                    96:ab:84:d9:87:7b:b1:18:93:74:d3:76:15:16:82:
                    87:8b:f0:00:30:42:0a:21:9d:a3:b3:da:a5:83:31:
                    85:d8:4d:06:ac:18:a7:e2:12:08:2c:60:7d:42:2f:
                    0f:04:72:6a:b7:6e:92:52:2b:95:35:b1:c8:d8:0a:
                    c7:37:1e:2b:23:df:0d:96:f5:41:79:26:9f:e9:d1:
                    4a:7e:72:4f:a9:b2:b8:0b:b9:6a:58:7f:39:1c:5a:
                    4c:1e:20:76:de:fe:94:02:13:eb:b1:7e:7f:4e:27:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:D5:FA:C9:C3:68:73:5A:EF:3E:C9:FA:D4:BC:95:8B:86:8E:33
            X509v3 Authority Key Identifier:
                keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/MfzV-snDaHNa7z7J-tS8lYuGjjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:7e01::/32
                  2a11:7e06::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:e0:56:8f:4c:24:91:17:f2:72:6a:61:a1:5e:84:40:81:
         68:6d:49:fa:eb:15:0f:9a:63:16:a8:3d:69:a2:42:d4:65:4b:
         1b:c9:89:e6:4d:1f:49:4e:30:92:80:47:49:f5:e1:e5:2d:c4:
         df:f0:8b:f1:43:08:3c:1a:36:3c:bb:b3:1a:94:c2:e6:81:ee:
         9d:13:dc:da:c2:85:ea:3f:89:d5:bc:90:ab:4e:fe:67:a3:39:
         14:16:c6:27:a2:e7:bb:84:99:6e:1a:b5:8a:6b:8e:c9:58:cc:
         b2:b7:27:78:30:a1:ba:56:79:10:b5:e7:80:c3:c6:1a:3d:bf:
         2a:8f:3b:2d:19:28:a5:61:d2:79:27:63:4b:be:08:bb:68:c5:
         d1:f5:4c:43:75:1a:a7:f5:9b:ab:af:f6:69:2e:d0:58:75:cf:
         e0:7d:7b:59:1f:d4:12:0d:f3:46:d6:70:a8:4d:54:46:e6:5e:
         b1:94:70:3d:1b:97:fc:ae:a9:50:0d:70:3e:e7:26:56:ca:cb:
         c4:0f:05:02:bd:cd:27:ff:b7:d9:4d:20:a4:aa:b3:81:33:ab:
         c2:4c:da:d6:4b:3d:80:be:0b:e9:a6:b5:ff:03:c6:3c:70:32:
         ea:41:f8:7d:99:ea:88:43:b8:dd:75:8a:11:28:9a:1a:56:47:
         62:ba:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----