Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BT7eoWJf54dpySlQc4phNvsQJjw.roa
File:                     BT7eoWJf54dpySlQc4phNvsQJjw.roa (raw, json)
Hash identifier:          Z9cgVXrtky38JprL01I5R80NNEuS+isFM9QNnzsGDwI=
Subject key identifier:   05:3E:DE:A1:62:5F:E7:87:69:C9:29:50:73:8A:61:36:FB:10:26:3C
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       01856E0AF1E04D6DE98DAAD62C2832E389DF
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BT7eoWJf54dpySlQc4phNvsQJjw.roa
Signing time:             Sun 01 Jan 2023 15:54:49 +0000
ROA not before:           Sun 01 Jan 2023 15:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        121.127.56.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0a:f1:e0:4d:6d:e9:8d:aa:d6:2c:28:32:e3:89:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Jan  1 15:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=053edea1625fe78769c92950738a6136fb10263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:a2:39:67:86:cf:74:ff:7c:58:07:63:8a:
                    d0:43:90:f3:4d:97:a8:61:d6:88:76:69:06:64:9c:
                    27:de:9d:26:a7:30:1d:63:a5:c6:73:22:2b:d4:2a:
                    90:6b:9b:c1:c9:a7:52:26:de:74:18:d0:4b:4d:c2:
                    66:7d:7e:d2:58:81:f6:6b:cb:82:c9:ad:9a:a7:52:
                    46:cb:8b:f0:1b:39:03:90:20:af:ba:4f:15:ca:91:
                    cf:b9:d4:f4:9a:fa:ee:4a:08:66:c6:f0:7b:3a:52:
                    5a:54:08:af:d8:c4:97:2b:ef:83:0c:1b:d0:36:68:
                    5f:09:c1:e5:89:67:04:4e:6d:ef:cf:3f:62:de:17:
                    7d:38:38:b2:b9:65:f2:ce:0c:10:24:d9:9d:9c:68:
                    c9:81:ab:c6:a4:de:f3:58:97:56:f9:77:22:d0:fc:
                    2c:3e:bf:2e:23:fb:c5:2a:0a:9c:f2:3d:82:ac:ca:
                    f7:be:af:1b:b3:92:fd:4e:25:f2:53:35:2b:c3:6e:
                    01:ff:7e:20:ef:28:f2:86:0e:be:08:4b:43:bf:a5:
                    0a:cf:06:4d:4e:f4:ce:9d:f2:d8:d0:13:ba:e7:da:
                    f4:27:a7:82:5d:40:30:0e:06:75:36:49:4c:95:b0:
                    38:bd:53:61:a3:8d:22:cf:17:9b:fc:b7:17:f0:b7:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:DE:A1:62:5F:E7:87:69:C9:29:50:73:8A:61:36:FB:10:26:3C
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/BT7eoWJf54dpySlQc4phNvsQJjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.127.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:cb:87:c9:95:ad:ed:c1:48:1f:2c:14:ba:da:01:cb:f0:
         f7:bf:e9:5a:1f:a6:5d:8c:df:ae:87:d3:3c:a1:b7:07:0d:dc:
         8b:90:e6:dd:12:ce:ea:0b:25:a1:fe:3f:36:6c:ad:4f:f5:4c:
         6e:8d:86:f7:44:fb:5c:97:89:5b:6d:bb:61:77:cb:58:f5:a0:
         6b:ad:a1:87:ea:4a:fd:16:16:47:63:47:f6:90:b8:10:7f:52:
         5b:9d:44:ab:76:26:ed:77:cc:0f:d8:82:fc:d5:79:b2:f4:6b:
         58:7a:e7:ce:e2:3f:51:39:59:8f:72:d7:c2:6b:01:9d:96:70:
         d0:f9:f6:68:3f:68:af:22:80:c1:3b:44:55:56:d5:8d:c6:fb:
         7f:03:11:d4:77:56:2a:a1:23:f4:d2:e4:4b:e9:ee:2e:1a:00:
         5d:25:8b:d3:d3:84:8e:51:06:ff:b7:e1:61:02:e7:32:fc:7d:
         a4:70:81:b7:56:59:6e:2e:ed:48:3f:55:db:39:6f:44:4a:ac:
         c3:f9:63:ec:ce:11:19:c8:cc:76:c7:3d:bb:14:67:c4:fa:5b:
         35:69:55:1b:8a:2d:32:d0:7e:f9:f4:10:7c:50:40:77:2f:41:
         bf:3b:6e:53:86:fa:05:6f:78:d5:9a:ee:c2:c2:4d:56:1a:86:
         7c:2e:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----