Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/swmNm-2E65-bg_AeOkFTg3MPvpw.roa
File:                     swmNm-2E65-bg_AeOkFTg3MPvpw.roa (raw, json)
Hash identifier:          +6kCtfoG1KlLiAY/b3+J0xSOweCIyucXjxyMlLOFtbg=
Subject key identifier:   B3:09:8D:9B:ED:84:EB:9F:9B:83:F0:1E:3A:41:53:83:73:0F:BE:9C
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018BA62CCEA576BAEB5037DE1F656013178F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/swmNm-2E65-bg_AeOkFTg3MPvpw.roa
Signing time:             Mon 06 Nov 2023 19:47:16 +0000
ROA not before:           Mon 06 Nov 2023 19:47:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61400
IP address blocks:        2a0c:aa40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a6:2c:ce:a5:76:ba:eb:50:37:de:1f:65:60:13:17:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Nov  6 19:47:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3098d9bed84eb9f9b83f01e3a415383730fbe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:a7:3b:a4:c8:d6:ac:39:3a:65:a9:50:9b:
                    d7:21:cc:db:06:17:21:6a:73:04:95:2e:08:5b:1b:
                    d1:e6:78:ab:9a:d9:23:7f:b9:89:6a:dd:56:0c:a0:
                    6a:18:1b:9c:c6:e5:33:e5:3e:b0:cb:66:3e:2b:b3:
                    ac:fc:50:08:78:ba:f7:06:6b:dd:2b:02:c4:35:b8:
                    aa:50:40:32:e5:88:a2:d4:79:49:1b:06:b4:bb:2c:
                    d6:af:90:e1:f8:bb:5f:5a:90:f1:f2:35:fb:46:38:
                    f0:e2:78:81:ab:64:40:bc:39:6b:49:ac:03:2f:55:
                    e1:a2:77:dd:09:24:31:06:48:1f:59:c3:91:a6:ee:
                    0a:19:60:3e:8e:72:11:2e:b2:28:2f:b5:c2:f0:a3:
                    a9:a3:07:3f:6c:37:6a:4e:4e:ec:bd:04:7f:19:4f:
                    89:82:d9:f7:22:3a:4b:c1:11:17:8f:c1:61:92:63:
                    e1:fe:2b:ce:92:99:52:40:7d:30:43:83:01:34:1c:
                    52:c1:4f:a3:60:2a:df:a3:40:98:cd:26:ca:a7:f1:
                    9a:63:1b:ca:fc:56:3f:a1:4a:b3:a1:d7:5b:79:2e:
                    b6:b9:d7:a6:23:a9:8a:f3:08:57:b1:28:ce:c0:4c:
                    2f:91:86:b6:80:4a:28:6c:eb:91:6f:be:1c:55:74:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:8D:9B:ED:84:EB:9F:9B:83:F0:1E:3A:41:53:83:73:0F:BE:9C
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/swmNm-2E65-bg_AeOkFTg3MPvpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:aa40::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:de:74:81:a8:24:31:7f:6b:88:cd:a8:33:72:aa:48:ba:
         1c:0c:2c:7b:57:56:b3:43:bb:19:b6:a8:51:d1:16:ff:9b:76:
         a9:15:82:9b:eb:f8:13:0c:0c:9d:20:86:7f:e5:47:1e:bc:6f:
         2b:ad:39:c8:bd:64:04:10:d7:41:8c:b6:dd:9e:94:cb:e2:e6:
         bb:16:1d:2f:24:b3:62:17:3c:e4:e1:3d:de:b4:be:97:17:38:
         f2:11:45:2a:cd:5d:67:e5:1a:a4:11:c3:e9:dd:9e:c9:2c:b1:
         5d:a7:9b:f8:b4:12:c6:65:86:97:1e:5a:76:4c:eb:cd:3a:49:
         9e:99:bd:31:25:dc:3c:15:92:e3:39:52:d1:d8:bc:f5:fb:74:
         ab:71:b4:b3:2f:4e:11:ef:63:70:03:78:8b:26:85:10:40:bb:
         e2:ce:63:fb:ac:4b:66:be:a3:6d:3d:9a:d8:e2:79:3a:2e:7c:
         64:07:59:d9:e3:7a:ee:de:ef:de:30:3e:98:06:10:ac:8b:e0:
         11:5f:3e:fa:78:5d:f1:ed:3d:26:20:49:35:56:e7:e7:8d:b6:
         1c:b0:bf:48:b2:1c:57:90:e1:ff:47:4c:95:0f:3b:54:9b:57:
         28:50:62:53:21:9f:62:14:0b:40:99:31:03:b3:81:a3:df:cd:
         ff:c7:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----