Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa
File:                     _Uzfk_M_AvH91n9u7mgA8bBQGWg.roa (raw, json)
Hash identifier:          dw11uZUXLvF4Vwa2n21st3Fa7T1CYmTwsy9PXuTM3gs=
Subject key identifier:   FD:4C:DF:93:F3:3F:02:F1:FD:D6:7F:6E:EE:68:00:F1:B0:50:19:68
Certificate issuer:       /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial:       01866F610EB649542360643275A70052E73B
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa
Signing time:             Mon 20 Feb 2023 15:11:17 +0000
ROA not before:           Mon 20 Feb 2023 15:11:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        2a11:7e01::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6f:61:0e:b6:49:54:23:60:64:32:75:a7:00:52:e7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
        Validity
            Not Before: Feb 20 15:11:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd4cdf93f33f02f1fdd67f6eee6800f1b0501968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:7f:33:42:fb:b7:9a:5a:93:d9:a0:e4:ad:
                    16:ac:63:2d:1a:0a:ff:26:46:da:b2:a3:1e:93:86:
                    5f:f2:aa:1a:db:54:d8:5e:a0:d3:3f:40:e6:d6:77:
                    15:8f:9b:9b:a2:2e:2b:e7:d8:37:c8:2c:8d:63:a7:
                    c7:41:85:25:86:65:d0:93:10:58:6f:6d:56:ca:c1:
                    1b:0b:3c:52:2b:fb:1f:0b:a2:4d:4b:9e:51:99:10:
                    1e:25:90:98:27:2a:73:c3:02:33:1a:f1:8a:75:e4:
                    01:96:d8:3b:2f:26:63:07:ba:fe:1a:2e:4f:fc:aa:
                    c3:c8:b4:ba:12:27:5f:fe:be:d4:b1:35:d4:00:6e:
                    bf:57:a5:01:c1:76:61:ce:d1:70:e5:d1:64:05:98:
                    2a:ea:4f:f2:53:25:12:03:f2:f0:c5:25:e0:23:3c:
                    83:65:39:d0:37:69:16:0d:ca:8b:51:9e:06:28:f8:
                    70:d9:3a:c3:de:cb:a3:33:1c:96:17:a2:6c:fc:a3:
                    93:ca:4e:3b:42:aa:89:d8:59:42:c0:03:33:15:b8:
                    d4:82:15:83:f7:35:b6:61:b6:07:ac:27:05:a1:ac:
                    42:5b:2e:64:3d:ae:3a:e1:a1:5e:65:66:b8:4f:3f:
                    6f:da:52:bd:6e:4c:a2:5e:10:7d:e0:24:1b:46:55:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4C:DF:93:F3:3F:02:F1:FD:D6:7F:6E:EE:68:00:F1:B0:50:19:68
            X509v3 Authority Key Identifier:
                keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:7e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:55:3f:42:cb:59:b9:5f:2b:d7:27:c1:5d:52:e5:a7:70:
         52:85:c9:5a:c3:90:f2:bf:b0:16:ea:36:59:91:94:70:01:fb:
         fe:cc:cc:e9:54:f0:02:76:1c:1f:23:23:5d:44:f0:23:64:15:
         09:2e:f5:99:e9:66:4c:95:cc:ec:05:04:72:3c:88:27:03:3a:
         e1:ca:b3:8e:18:ce:ee:ab:63:d9:dd:46:1a:05:e6:bc:12:36:
         b4:77:1e:9d:66:cf:63:49:c3:f6:89:cd:3c:ab:b8:43:d1:20:
         02:8b:8c:8d:0f:b9:f0:f0:b8:bb:08:1d:da:16:1b:1e:64:16:
         4c:b7:c5:49:50:c6:8b:88:b2:1c:20:e3:f4:3d:25:1d:f3:ba:
         3a:b4:4a:8a:29:fb:7d:a1:9e:e0:80:b9:97:04:92:ea:93:51:
         15:96:1d:f9:6b:e1:d7:9d:f5:82:6b:04:f8:36:62:ae:d3:b3:
         13:e7:47:c0:13:eb:80:79:1a:0c:99:69:89:15:f8:9c:b8:b3:
         53:e2:a1:57:47:a1:e5:ab:f6:7f:8c:b3:a7:fc:5e:0e:5d:12:
         13:0d:47:d6:2e:7c:f0:07:78:58:19:9a:d8:3a:6b:a1:c9:2b:
         51:58:81:a0:7a:4f:f6:73:20:87:bb:4f:4b:aa:c3:56:97:33:
         86:4f:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----