Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/0ta1lMCbhQpu3FR0Z33YFMN5t9o.roa
File:                     0ta1lMCbhQpu3FR0Z33YFMN5t9o.roa (raw, json)
Hash identifier:          l0TzFpcZN9ua5DOZxwGRIYANy2OnZT2THyj92faJL24=
Subject key identifier:   D2:D6:B5:94:C0:9B:85:0A:6E:DC:54:74:67:7D:D8:14:C3:79:B7:DA
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01856C5CA6616D368A76D01CD4C9919B0CCD
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/0ta1lMCbhQpu3FR0Z33YFMN5t9o.roa
Signing time:             Sun 01 Jan 2023 08:04:49 +0000
ROA not before:           Sun 01 Jan 2023 08:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207488
IP address blocks:        2001:678:c10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:5c:a6:61:6d:36:8a:76:d0:1c:d4:c9:91:9b:0c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jan  1 08:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2d6b594c09b850a6edc5474677dd814c379b7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:97:c9:3e:de:9f:78:e9:55:64:3a:60:9f:
                    0a:b2:76:22:b8:5c:b0:3c:1f:93:2f:8c:65:e1:d0:
                    c5:9b:47:c4:7c:ad:b4:0d:d7:8f:ae:a5:69:48:47:
                    e8:8f:9b:c8:1d:8d:03:ac:69:0f:1a:8c:6e:45:a5:
                    f2:17:d0:15:50:96:42:83:55:ce:89:fe:24:e5:92:
                    74:8f:ab:3f:43:47:9d:f2:e6:00:a7:97:95:6c:ab:
                    dd:9b:0c:a2:c8:16:be:a9:f0:a7:e0:a5:b4:da:01:
                    fb:fe:a9:09:10:77:9e:10:4a:6e:06:a2:ec:da:b4:
                    df:de:dc:3c:3a:fa:ec:fb:91:76:77:59:73:ec:43:
                    47:48:d3:b7:ce:66:4a:97:a7:c4:69:f3:4d:d2:14:
                    e7:c0:ba:bb:27:07:a8:c8:16:2a:75:29:63:fa:36:
                    68:86:0f:cf:8b:ac:ac:af:67:1b:38:83:f7:3b:a2:
                    6b:94:4e:07:f1:02:32:8b:4c:ce:17:bb:4a:6b:96:
                    9b:cc:18:64:99:31:40:79:08:46:37:37:7d:ca:30:
                    68:5b:bd:27:6e:d9:7e:43:39:5a:f3:67:47:ad:f2:
                    2f:be:1c:72:e7:0c:cd:d0:a0:e0:d4:28:70:b4:25:
                    9b:f1:12:3b:72:78:d1:9e:a8:cc:a3:b6:66:e0:df:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:B5:94:C0:9B:85:0A:6E:DC:54:74:67:7D:D8:14:C3:79:B7:DA
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/0ta1lMCbhQpu3FR0Z33YFMN5t9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c10::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:13:7d:c6:4b:5b:27:23:f6:85:4a:ef:a7:ca:a5:fc:4b:e5:
         00:07:55:ba:68:fb:a7:ee:ad:91:ff:05:ae:23:3d:30:c9:7a:
         db:e6:85:da:ad:da:1a:79:6e:ad:1c:6c:07:80:b4:68:61:10:
         d4:ec:c7:5e:c6:34:bf:8a:36:6a:de:23:f0:26:2d:7f:42:4b:
         4a:46:7b:63:a9:c3:7d:a7:75:45:1d:45:52:c0:3e:5d:97:8f:
         da:00:03:84:2e:8e:91:09:23:35:4e:ab:c4:46:ee:a3:2b:f9:
         49:b6:34:60:a7:e5:32:97:2b:ac:8c:8e:e2:16:af:82:e7:d2:
         6f:5b:09:ec:e9:4b:c5:21:0b:2b:23:b5:e8:81:6c:9f:8a:c9:
         68:3c:5d:33:5b:fe:b1:3e:c4:20:3a:7c:ae:3c:21:e4:9f:96:
         1e:4e:fb:52:d5:f3:ee:87:84:d4:59:5e:5f:5a:42:8e:2c:73:
         27:f0:75:b7:9c:ab:dd:96:05:9a:6e:94:62:0d:bb:cc:81:fe:
         fa:67:c7:fb:91:53:18:7e:d2:ff:fd:de:4b:15:a4:fe:73:2b:
         24:ce:f9:48:93:2d:c7:85:dd:9a:5d:9d:ff:c7:f0:fe:6f:be:
         ba:10:4f:d4:11:0a:c2:57:66:f6:c2:b1:b1:5c:68:99:de:de:
         77:93:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----