Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/cxQOFBY3zSheBWv5Mjl1Q_vdgZI.roa
File:                     cxQOFBY3zSheBWv5Mjl1Q_vdgZI.roa (raw, json)
Hash identifier:          hVTmebibEjbrFS49j4CSlHhX+R6p0sSzu4WqwLDlTaM=
Subject key identifier:   73:14:0E:14:16:37:CD:28:5E:05:6B:F9:32:39:75:43:FB:DD:81:92
Certificate issuer:       /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial:       018BDCE29FF98C8418ABD6FC967B1B82B7F3
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/cxQOFBY3zSheBWv5Mjl1Q_vdgZI.roa
Signing time:             Fri 17 Nov 2023 10:45:21 +0000
ROA not before:           Fri 17 Nov 2023 10:45:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0c:7b83::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:e2:9f:f9:8c:84:18:ab:d6:fc:96:7b:1b:82:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
        Validity
            Not Before: Nov 17 10:45:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73140e141637cd285e056bf932397543fbdd8192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:90:ac:3f:1e:b5:24:1f:84:3b:55:4d:d4:
                    be:cb:6e:45:af:89:80:d3:e6:3a:e1:e0:b6:6c:08:
                    dd:34:0f:f4:fc:01:d7:8e:66:98:35:ae:71:ac:dd:
                    dc:0c:7e:31:9d:b6:cb:b8:16:7c:a1:7d:0b:6c:11:
                    7c:ca:88:35:88:31:5e:b8:dc:6c:32:e1:ed:39:d2:
                    9d:ab:28:88:c6:4c:bd:3f:94:c3:c5:e9:9d:8b:78:
                    8a:82:d9:89:fd:ae:33:c7:af:94:19:52:a4:b2:f3:
                    ea:6e:14:10:23:6a:6f:da:62:77:3b:5e:a1:4c:2f:
                    71:bc:0a:65:f1:86:c1:6d:62:47:58:04:60:56:21:
                    82:4b:57:a1:56:12:d6:bb:a9:57:9c:e0:3a:73:ed:
                    6d:ea:c5:fb:d6:a2:ce:b9:e5:60:cb:0e:30:a1:fc:
                    6b:86:b1:04:9b:3d:6f:6f:d5:3e:3b:37:0b:a7:9c:
                    69:2a:76:56:c9:20:35:4c:34:1e:ae:9e:c4:e9:b0:
                    67:0b:aa:a9:d6:e7:8f:4a:9a:3c:15:ec:b4:2e:a6:
                    16:d9:50:1b:33:f0:d5:74:56:5b:c3:b8:67:c3:ff:
                    0d:9b:e2:d9:39:b9:d7:48:ee:46:01:eb:8e:18:0e:
                    55:d1:3f:67:ad:cf:a6:00:40:83:db:52:fb:88:3c:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:14:0E:14:16:37:CD:28:5E:05:6B:F9:32:39:75:43:FB:DD:81:92
            X509v3 Authority Key Identifier:
                keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/cxQOFBY3zSheBWv5Mjl1Q_vdgZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:7b83::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:2a:4a:6f:44:7d:56:67:a2:c4:5b:af:c7:30:04:20:d9:4b:
         47:42:58:47:0b:0d:02:b8:f9:fa:92:0a:74:67:a9:cb:ae:62:
         0d:e7:d9:55:e8:58:f9:18:46:aa:28:0e:72:aa:9d:7b:ae:56:
         68:92:03:d2:40:65:5c:ce:cb:9b:0d:af:e0:10:83:76:2e:cb:
         2c:b8:92:aa:34:c8:48:12:ac:59:e3:83:1d:5b:30:d6:bb:3a:
         0a:ce:8e:7d:d5:60:6e:1a:90:d4:df:76:39:49:09:88:57:0f:
         c7:2a:ed:9b:9d:6b:23:6b:e1:3d:fa:a0:ec:86:d6:37:71:37:
         e0:47:bc:8a:59:3f:da:e1:6e:ae:4b:02:ae:e3:26:10:75:f6:
         f5:f2:33:49:e0:3a:71:d1:14:48:9b:da:26:92:06:a5:33:ea:
         c8:9f:ea:90:7d:02:ca:59:c7:8b:82:de:8e:27:da:80:ba:3c:
         75:aa:ca:fb:80:57:c6:83:4c:75:7d:ed:b0:21:9e:81:45:e8:
         3e:50:8e:24:78:60:93:e3:4e:6a:e9:1e:04:64:e0:9f:e2:7c:
         9d:d8:56:ec:10:4b:f3:03:9f:52:6e:f4:5d:b0:b0:5b:02:4e:
         0b:e0:ab:69:ae:f9:f0:2f:b7:15:ee:5a:d0:11:24:39:b4:ff:
         91:1e:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----