Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/7kG3-HE3F2d_j7rOICwP_Rwibeg.roa
File:                     7kG3-HE3F2d_j7rOICwP_Rwibeg.roa (raw, json)
Hash identifier:          1uErN2eBRLsgZ/y8eVXbAvCS8XaA5s2tBS1Wlvap5wk=
Subject key identifier:   EE:41:B7:F8:71:37:17:67:7F:8F:BA:CE:20:2C:0F:FD:1C:22:6D:E8
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       01856EB926C6A1C1A5BDAC61FBEE991E7A4A
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/7kG3-HE3F2d_j7rOICwP_Rwibeg.roa
Signing time:             Sun 01 Jan 2023 19:05:05 +0000
ROA not before:           Sun 01 Jan 2023 19:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133752
IP address blocks:        2a00:c6c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:b9:26:c6:a1:c1:a5:bd:ac:61:fb:ee:99:1e:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Jan  1 19:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee41b7f8713717677f8fbace202c0ffd1c226de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:e4:83:c7:f2:a9:b6:ec:d1:b2:7c:e9:05:
                    ff:7e:12:2c:d6:73:a5:d0:b0:4f:81:d8:72:b8:57:
                    cb:e4:72:be:5b:5c:a2:ac:81:75:75:78:67:ff:a9:
                    2d:54:6c:72:92:44:ea:8c:8c:bb:ba:fd:20:df:4e:
                    a2:31:f3:9b:9e:a2:71:a0:8f:80:04:1c:79:52:9a:
                    5a:f3:71:a1:d2:61:ab:2d:6e:a4:ae:a0:57:a7:b9:
                    5b:c9:d7:6d:db:4f:69:78:a3:30:42:0f:59:70:eb:
                    b1:5e:d2:2c:9d:a6:6a:b8:6d:c7:2f:5b:d3:94:3a:
                    75:a7:9e:05:26:80:57:37:cb:a6:4e:42:9f:24:af:
                    ce:37:03:70:3f:35:57:35:06:7f:c0:bc:a3:c3:b0:
                    47:2c:a5:c1:72:6f:17:2f:36:51:52:5b:c4:24:8c:
                    a6:fb:b4:a6:d0:f5:2f:54:fc:ff:ad:8d:47:b5:89:
                    c1:bf:5f:9b:af:34:ed:ec:8e:ae:79:70:c5:ec:f6:
                    4c:4f:62:dc:de:63:82:a8:c7:6e:6e:56:b6:dc:c6:
                    a7:e0:2d:1f:c9:c2:05:8a:e3:dc:59:85:31:46:ac:
                    ec:ab:82:23:12:46:47:44:6f:e6:c7:b5:d4:6e:95:
                    ef:c3:56:84:d0:28:fd:94:f3:24:b8:91:c5:16:ce:
                    c4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:41:B7:F8:71:37:17:67:7F:8F:BA:CE:20:2C:0F:FD:1C:22:6D:E8
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/7kG3-HE3F2d_j7rOICwP_Rwibeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:c6c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:13:f2:43:36:95:4f:a4:b5:78:e3:c9:b4:fa:8b:a9:d3:e1:
         ea:c7:4e:c6:82:9d:0a:41:f1:cb:01:dc:31:2f:a3:81:58:d4:
         59:8f:f2:9a:45:da:df:12:8c:48:e9:0d:30:6d:e6:78:8e:1a:
         18:7c:04:d5:6a:2b:73:e1:3a:9a:c9:7b:e9:fd:b7:dd:49:9d:
         23:a7:23:50:b3:1c:53:3f:9a:0c:65:67:bf:39:f6:bd:9d:8a:
         98:53:0c:94:9f:86:58:48:42:63:e2:a6:b5:92:63:4d:c2:8c:
         8d:6a:54:07:f6:3b:51:8f:62:dd:35:c1:f4:62:cb:58:67:61:
         36:2e:70:e7:5e:61:89:e3:09:ab:7a:e2:66:6b:2d:8d:fa:88:
         01:df:6a:14:01:c8:41:d9:48:03:84:ac:ac:9b:9e:af:a6:a1:
         c0:96:54:fc:84:a1:fd:00:41:ea:df:e1:a0:30:e0:ef:99:f4:
         2b:74:d3:e6:55:f9:72:ca:c6:61:b5:dc:4f:ba:43:99:af:1c:
         68:19:88:07:1d:13:d4:88:87:7c:f2:39:95:c4:7a:64:17:16:
         80:5b:73:f1:6f:9a:d7:56:1f:8f:08:d6:57:b2:74:8d:40:9d:
         3c:d5:7f:ae:82:9a:59:dd:3b:fa:43:c5:7b:1b:7a:ff:94:14:
         03:56:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----