Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/avCHvrQVpvw_Axfes3Ba0k-5iyk.roa
File:                     avCHvrQVpvw_Axfes3Ba0k-5iyk.roa (raw, json)
Hash identifier:          CDl4Wu+kFlDYH5ckbisASK7RCUt0LfaHLs5u6kLCP8M=
Subject key identifier:   6A:F0:87:BE:B4:15:A6:FC:3F:03:17:DE:B3:70:5A:D2:4F:B9:8B:29
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       018A1962435ECF909B36D9C5A6BB9149723A
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/avCHvrQVpvw_Axfes3Ba0k-5iyk.roa
Signing time:             Mon 21 Aug 2023 18:36:24 +0000
ROA not before:           Mon 21 Aug 2023 18:36:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47689
IP address blocks:        2001:67c:81c::/48 maxlen: 48
                          2001:67c:b90::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:19:62:43:5e:cf:90:9b:36:d9:c5:a6:bb:91:49:72:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Aug 21 18:36:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6af087beb415a6fc3f0317deb3705ad24fb98b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:03:ea:0b:15:af:99:58:e1:73:b4:ff:4d:
                    67:73:59:dd:90:9c:66:b2:c5:13:55:2d:e4:c9:4d:
                    ae:86:ee:d8:77:2b:61:67:2b:d6:c4:aa:fd:51:ed:
                    7f:6e:06:d3:b7:50:b0:cc:8c:42:c3:f0:e8:da:a4:
                    e0:1c:f7:ad:f9:89:61:45:f4:18:84:62:93:a3:db:
                    ea:49:87:f6:fe:62:69:36:06:06:04:67:80:21:df:
                    ce:99:df:d6:b7:2d:3d:5e:5b:89:db:34:31:4b:53:
                    36:90:aa:0d:9f:0b:74:61:f8:df:69:7b:74:08:0c:
                    1b:75:68:27:a9:69:5f:36:c5:fe:d6:59:8a:fa:2a:
                    47:12:6e:b6:ba:a2:0a:b0:aa:71:d3:64:f9:57:d1:
                    ef:65:d7:83:8e:74:4d:75:64:8a:3c:04:0c:cc:5e:
                    d6:e7:1d:2b:00:51:97:77:4a:e0:87:59:2a:f4:0a:
                    62:20:da:c4:ec:97:ae:9d:80:02:bc:39:fc:91:22:
                    4b:93:cc:cd:56:ee:a1:92:db:9e:b6:fe:81:79:97:
                    30:1d:4c:4e:47:7b:7e:c7:94:78:09:f8:45:5c:63:
                    0b:37:64:1b:fc:4a:b8:74:94:05:23:79:c1:36:c5:
                    c1:f8:b8:8d:72:11:e2:00:bd:a0:f7:70:4a:cc:37:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:87:BE:B4:15:A6:FC:3F:03:17:DE:B3:70:5A:D2:4F:B9:8B:29
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/avCHvrQVpvw_Axfes3Ba0k-5iyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48
                  2001:67c:b90::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:d1:5e:e8:b4:13:64:36:12:ff:db:8e:c0:8a:be:f2:1f:
         08:07:32:15:7e:5c:23:4c:63:74:0b:9d:08:26:97:f9:ed:ec:
         2e:c1:af:29:08:6b:c7:56:56:3e:8b:47:4c:15:8e:05:da:ba:
         b1:e2:e0:b5:ff:c5:8a:f0:8e:12:4b:93:13:44:c7:fc:a8:5d:
         eb:ec:02:33:27:6c:9f:c5:ec:f4:c9:d7:dc:70:24:18:2c:26:
         d8:a6:01:1e:04:f8:67:ae:e3:d2:da:bc:a5:de:75:39:13:46:
         44:00:4e:23:47:78:02:24:5d:1c:b9:6b:62:2c:73:9e:64:11:
         a8:3d:dd:ca:fc:90:cd:d2:b5:ac:15:d0:e5:69:c2:06:7d:d0:
         7a:83:92:a8:26:f7:34:61:65:71:07:6b:2a:cd:17:c2:02:95:
         85:2c:a1:8e:8c:b6:f9:3e:35:76:66:a0:30:37:e4:f2:26:28:
         c2:70:05:e8:b2:cb:55:64:d2:10:6f:53:8d:26:54:c3:0f:ca:
         2e:db:dc:57:65:aa:13:aa:d6:be:6a:e5:ae:d0:2e:33:e3:8c:
         30:93:74:d3:21:b2:4e:1c:3a:a3:15:10:70:17:62:31:cb:f9:
         35:db:ff:3b:97:8c:57:c2:52:6b:25:b9:af:5d:88:4e:2f:48:
         2b:a9:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----