Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/icmnF87jU8rToFnqg_sdpN7E0qw.roa
File:                     icmnF87jU8rToFnqg_sdpN7E0qw.roa (raw, json)
Hash identifier:          AKIceH3Q3caoud7yjgYsryrArml6r1ce6HzZ0zEstYI=
Subject key identifier:   89:C9:A7:17:CE:E3:53:CA:D3:A0:59:EA:83:FB:1D:A4:DE:C4:D2:AC
Certificate issuer:       /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial:       01856C6EF961519B830AD519D23470DBF081
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/icmnF87jU8rToFnqg_sdpN7E0qw.roa
Signing time:             Sun 01 Jan 2023 08:24:50 +0000
ROA not before:           Sun 01 Jan 2023 08:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44194
IP address blocks:        2001:bf7:750::/44 maxlen: 48
                          2001:bf7::/32 maxlen: 48
                          2001:bf7:800::/42 maxlen: 48
                          2001:bf7:860::/44 maxlen: 48
                          2001:bf7:840::/43 maxlen: 48
                          2001:bf7:780::/43 maxlen: 48
                          2001:bf7:760::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6e:f9:61:51:9b:83:0a:d5:19:d2:34:70:db:f0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
        Validity
            Not Before: Jan  1 08:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89c9a717cee353cad3a059ea83fb1da4dec4d2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:70:ac:c4:b5:be:0e:11:bf:a2:64:d3:7e:
                    74:32:f5:15:04:28:4a:74:e2:86:38:47:7f:25:2a:
                    7a:bf:c6:24:41:7f:81:39:b8:29:e9:8c:9b:e0:5b:
                    11:6d:ab:e3:a4:53:9d:98:38:23:57:c4:9d:9d:ca:
                    3c:20:df:3c:83:de:d6:bb:6e:fb:1b:ca:e0:60:f6:
                    37:62:e4:90:cb:6d:4a:af:f6:bf:71:35:57:24:10:
                    c4:ed:e9:47:5d:84:29:0d:f7:bd:1b:98:14:d0:d6:
                    47:13:9d:b5:44:3c:9b:70:d6:74:ef:b5:a2:00:06:
                    19:4a:37:11:ee:08:84:9c:f6:35:5f:46:53:8a:08:
                    68:5d:a4:19:69:6d:95:60:ce:6f:4c:d9:d2:6c:e9:
                    54:8d:4d:d4:03:c2:d0:81:dc:6f:64:18:ad:26:da:
                    39:c8:8d:e9:f0:fa:30:29:5b:ec:82:6d:94:1a:77:
                    e7:d0:ba:c2:13:5b:0c:a7:15:f0:40:d3:71:8e:8c:
                    9e:dc:a0:7c:04:d8:04:7c:78:ee:fc:18:59:1c:13:
                    82:3e:62:99:29:a0:3f:f0:6f:ad:07:32:ea:90:98:
                    c4:92:d5:0c:ab:60:fb:4f:db:f0:5a:a6:12:f3:07:
                    c4:af:ca:f6:c9:4f:14:ac:4d:7d:63:68:7d:7f:94:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:A7:17:CE:E3:53:CA:D3:A0:59:EA:83:FB:1D:A4:DE:C4:D2:AC
            X509v3 Authority Key Identifier:
                keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/icmnF87jU8rToFnqg_sdpN7E0qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:bf7::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:fa:7b:e2:9c:7e:f9:99:fb:4c:a0:08:42:74:5a:99:3c:
         2c:c5:54:c6:71:ec:2a:6f:77:ee:17:07:e0:b3:d4:5b:00:1d:
         81:a2:da:7c:25:01:2a:79:47:dc:fd:a8:b1:cd:e6:26:78:8d:
         61:20:62:29:45:1c:9c:d0:5e:0b:fc:ae:97:e5:cb:69:9d:aa:
         52:e4:7d:d8:8e:5a:87:92:27:77:08:60:06:d9:5a:61:b8:95:
         b9:4d:c3:3c:e1:95:c5:13:78:5a:b9:b8:ca:51:78:33:61:99:
         89:a5:a3:21:75:a3:ca:a5:7c:fb:45:9a:1b:bb:98:5c:ca:46:
         26:df:c8:88:b8:dc:0d:66:b4:66:aa:ae:b6:17:78:c2:5d:08:
         97:9e:08:98:07:96:a8:e8:cc:4d:8b:63:8f:b8:ea:c8:2c:ce:
         96:70:09:d5:be:9f:47:e9:60:56:3b:33:b5:cb:1d:1b:e6:45:
         1d:6d:61:ce:c7:53:60:4b:96:45:56:39:a5:d5:05:2a:ae:57:
         ee:4d:0a:6b:80:0b:82:c9:2f:75:ab:9a:31:0c:b1:df:31:fc:
         b3:e0:4c:6c:dc:71:a7:71:52:55:71:90:ea:86:57:12:7f:6d:
         a5:dd:b9:2d:5f:ea:51:17:ed:1b:3d:f7:89:72:ac:ea:f1:fc:
         ef:31:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----