Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa
File:                     fShzjAcBmYMcGnvI7VUzrfXZCdY.roa (raw, json)
Hash identifier:          BChLo9PPhJT0O35j6ZcAKEIQs+ZTSksPXHdp4m592BI=
Subject key identifier:   7D:28:73:8C:07:01:99:83:1C:1A:7B:C8:ED:55:33:AD:F5:D9:09:D6
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       018627DA653DB293A27D9914344AA90DB5EB
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa
Signing time:             Mon 06 Feb 2023 17:51:09 +0000
ROA not before:           Mon 06 Feb 2023 17:51:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56762
IP address blocks:        2001:67c:81c::/48 maxlen: 48
                          2001:67c:b8c::/48 maxlen: 48
                          2001:67c:b90::/48 maxlen: 48
                          2001:67c:b88::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:da:65:3d:b2:93:a2:7d:99:14:34:4a:a9:0d:b5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Feb  6 17:51:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d28738c070199831c1a7bc8ed5533adf5d909d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:f5:3f:f3:8a:4c:54:a4:ab:f3:e8:6f:d8:
                    cd:09:71:aa:ae:75:27:c5:e3:b9:18:63:78:f8:0f:
                    4b:92:2a:6e:c6:18:f9:0e:f9:26:74:c5:c3:0f:f6:
                    2c:f6:9a:af:b0:06:8b:c9:4a:c7:e1:dc:84:28:7a:
                    da:a9:c1:b0:39:68:bf:2d:75:a2:a4:c9:06:02:dc:
                    a6:bf:17:cc:7d:15:25:0f:b0:09:e4:86:e8:17:82:
                    47:60:64:1c:54:7a:1c:ed:11:a7:16:ed:4f:6b:70:
                    99:88:eb:bf:0a:4b:53:84:48:1c:26:cf:11:92:aa:
                    0c:ff:bd:b2:39:7f:c8:0e:a0:a4:fd:ba:2b:8b:74:
                    c0:f6:8d:db:a5:a2:84:c8:f3:be:3c:17:18:01:a5:
                    0e:3e:03:a0:63:8c:3a:d3:c1:21:d9:7c:01:59:9c:
                    f3:8f:b6:45:ed:7c:13:74:dd:47:f8:f4:5f:1b:60:
                    f5:e8:70:1a:1a:3e:3a:d3:45:e7:07:e5:d2:22:98:
                    ea:07:b2:0d:70:cb:99:69:b5:7b:65:9a:1b:96:66:
                    1f:1b:77:54:20:32:93:61:d0:ef:ef:5e:d6:2f:87:
                    4c:a6:3c:d9:b6:2c:c6:32:0b:06:bd:db:d0:1f:72:
                    5b:e3:00:43:cd:ac:81:2a:bc:41:f5:ee:fa:fe:39:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:73:8C:07:01:99:83:1C:1A:7B:C8:ED:55:33:AD:F5:D9:09:D6
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/fShzjAcBmYMcGnvI7VUzrfXZCdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48
                  2001:67c:b88::/48
                  2001:67c:b8c::/48
                  2001:67c:b90::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:f0:98:05:9f:0b:7a:80:b9:54:66:a4:e8:e4:92:7e:90:
         60:90:22:5f:46:65:c4:22:40:74:e2:a5:5b:59:32:77:fd:b4:
         18:56:04:5f:0c:59:c4:38:d5:b3:bd:e0:36:22:12:a3:97:96:
         7a:b2:f9:5a:97:99:4e:f9:c9:ff:59:b0:e0:e4:94:b2:b1:f7:
         7f:c7:77:6f:5d:b5:da:33:a5:f0:fe:b6:b3:67:24:f1:5f:7e:
         ea:29:7c:a0:d5:51:49:18:0e:26:c6:0b:4d:7b:aa:ad:fc:78:
         ac:88:94:21:74:df:4f:e6:05:75:49:34:a4:c2:3c:90:83:f8:
         f1:34:15:bb:fa:5f:a3:48:04:e9:7c:2b:a6:30:16:68:1d:75:
         e1:57:b4:77:df:a9:0a:8e:ab:f4:da:65:6e:dc:63:99:f3:87:
         7d:35:e2:6e:fe:ac:87:62:96:00:2b:4b:62:88:bd:06:07:e7:
         09:99:f9:86:47:d8:2a:7d:b3:43:bd:d8:25:8f:90:7f:f8:89:
         80:d6:b5:36:16:b3:97:e1:3b:96:8b:92:be:ed:2a:73:3a:1e:
         4d:61:fa:b2:37:65:82:5c:e8:ee:7f:96:e8:90:0d:37:17:b6:
         2a:da:3e:ca:57:5e:8e:b3:21:24:15:25:e0:4f:6a:77:93:cf:
         a8:3e:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----