Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa
File:                     1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa (raw, json)
Hash identifier:          aXXeWqrHRcK21dNj0fPj9blQl4aCaSMh2ZQCnP3WMX4=
Subject key identifier:   FA:C3:23:87:13:D5:ED:CF:58:E5:28:E9:6B:58:73:4A:65:73:B4:AF
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       01856B00AAFE0D231DFEE3DE3B9B5A9E9A93
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa
Signing time:             Sun 01 Jan 2023 01:44:43 +0000
ROA not before:           Sun 01 Jan 2023 01:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a07:e02:41::/48 maxlen: 48
                          2a07:e00:19f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:00:aa:fe:0d:23:1d:fe:e3:de:3b:9b:5a:9e:9a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Jan  1 01:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fac3238713d5edcf58e528e96b58734a6573b4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:6f:d2:14:98:ae:5d:c8:16:4d:2c:e2:ec:
                    e6:6f:1b:7d:c1:58:41:f2:c2:68:5d:84:5e:ac:ce:
                    a8:c8:5a:a8:5b:1c:56:b0:37:1e:c3:fb:24:88:26:
                    55:03:3d:91:ce:17:7d:99:75:e3:1e:9a:f5:52:5b:
                    37:24:88:25:78:26:eb:82:25:5d:fe:b4:eb:8e:81:
                    a2:59:2e:df:e0:99:ca:a8:32:58:8d:4f:ea:22:8e:
                    6b:0e:22:9d:4c:7b:44:a1:c6:89:e9:1d:0b:3c:8c:
                    40:81:a0:2c:03:a6:19:8e:5d:5b:e6:6d:eb:05:0f:
                    8a:7f:17:4b:69:fb:47:27:cf:95:e1:b5:9e:4a:18:
                    8a:39:93:f5:59:e4:c4:db:17:9c:ae:be:27:75:50:
                    42:65:21:b8:44:6d:8d:c1:bf:d6:4d:fc:c6:24:d6:
                    b9:9c:60:c9:34:38:27:a0:81:53:07:81:b4:df:36:
                    e1:11:3a:9d:8f:33:3b:a3:48:97:a8:dc:c3:8f:0f:
                    08:4d:89:98:54:a9:d2:7d:e1:5c:77:42:7e:81:e8:
                    b0:5d:0c:ce:0c:68:e8:bd:13:6d:e0:95:cd:db:f9:
                    60:64:6a:2f:76:83:84:16:df:a8:a9:a9:0a:1c:ff:
                    48:31:40:5b:15:b3:2c:18:f2:cf:98:2f:93:6b:b6:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:23:87:13:D5:ED:CF:58:E5:28:E9:6B:58:73:4A:65:73:B4:AF
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/1-sMjhxPV7c9Y5Sjpa1hzSmVztK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:e00:19f::/48
                  2a07:e02:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:5c:f2:ac:c6:76:be:97:60:32:1d:1e:64:88:b0:21:dd:
         de:6c:1d:22:da:02:7a:00:25:31:86:0d:de:78:9e:d8:26:49:
         29:d9:56:d3:38:bf:89:27:bb:75:2b:34:0f:06:1b:c9:6f:00:
         08:d9:6f:28:3a:e9:77:2c:64:4f:af:22:00:28:f5:cf:c9:4a:
         ce:6a:48:ee:03:00:7a:12:7e:50:f3:90:7d:11:82:52:31:ae:
         6c:d1:87:df:bf:ac:02:bb:64:18:60:7a:f4:5d:12:2c:de:6f:
         79:bd:b5:31:f3:84:8e:b8:2e:6e:e2:ca:59:2a:b2:90:db:d5:
         af:ad:c7:35:ae:51:ac:32:9c:ca:c6:d7:f0:5b:b1:51:b3:b8:
         9b:58:4d:f5:e7:cd:9e:e8:57:e4:84:87:3b:c0:ea:d3:5d:d9:
         3e:23:f9:9d:1d:61:ec:3a:e0:44:e8:62:f5:1e:7e:33:2f:e1:
         da:a5:07:62:e7:65:8f:e9:cd:8b:bd:75:08:53:df:aa:a2:03:
         0e:c4:0c:df:e6:45:c1:04:9d:ce:19:1b:68:fe:84:2e:6e:85:
         ae:ab:3d:40:11:1a:e7:92:11:a3:ad:a7:8a:c0:aa:72:da:51:
         f2:e7:58:a9:fd:0d:d1:e8:b2:52:2e:0b:7a:d3:b2:fe:5c:4b:
         6f:f9:ee:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----