Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/6I16VJdK56cXt-xlsNzq4PNddiQ.roa
File:                     6I16VJdK56cXt-xlsNzq4PNddiQ.roa (raw, json)
Hash identifier:          O/J0SfqX5/gbKvt+pkgfcOhr9cn2oHT1zss/qPxu6M4=
Subject key identifier:   E8:8D:7A:54:97:4A:E7:A7:17:B7:EC:65:B0:DC:EA:E0:F3:5D:76:24
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       018572CCA5FD405F979668C8BBF512F3B510
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/6I16VJdK56cXt-xlsNzq4PNddiQ.roa
Signing time:             Mon 02 Jan 2023 14:04:52 +0000
ROA not before:           Mon 02 Jan 2023 14:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206128
IP address blocks:        2001:678:270::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:cc:a5:fd:40:5f:97:96:68:c8:bb:f5:12:f3:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Jan  2 14:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e88d7a54974ae7a717b7ec65b0dceae0f35d7624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:bd:87:90:28:17:d0:72:a3:60:9b:64:f3:
                    c9:56:ee:98:64:7f:53:69:0b:1e:77:b4:bf:dc:0c:
                    28:e9:34:b4:24:78:9c:a9:c6:41:b3:ab:96:63:16:
                    02:5b:99:d1:76:64:b2:c8:96:80:0b:15:30:e5:a9:
                    b3:68:f2:42:a6:b6:69:50:3e:23:a5:ff:78:68:2a:
                    63:0c:ec:de:5c:b9:3d:98:b6:90:34:6a:89:03:03:
                    7c:99:7d:2d:ac:0b:8d:4e:77:32:90:d8:1f:42:86:
                    ac:ec:85:83:b6:e2:d6:32:fb:d5:3c:13:35:f1:72:
                    13:b7:33:2b:0c:03:5e:fb:54:7a:80:9b:8a:51:f7:
                    5f:0a:ad:7b:07:13:33:69:d2:e5:0a:5e:d4:84:23:
                    8d:cd:9e:c8:8f:2b:6b:dd:8d:ab:52:f5:6c:d7:41:
                    ed:a9:45:d2:13:73:a2:7f:c6:04:31:4f:bd:2d:03:
                    fd:8e:c8:8d:c1:32:0e:ee:3f:50:34:e4:28:c4:5c:
                    51:2e:e9:c0:90:89:c6:a9:af:b6:d2:2a:9b:08:06:
                    45:16:a8:a7:93:a4:ce:e8:b4:69:9f:f2:18:b6:94:
                    54:5e:a4:43:a8:e6:58:e8:22:7a:c9:5c:af:97:42:
                    dc:d7:b0:c3:38:8a:96:29:f8:da:69:fb:f0:43:65:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:7A:54:97:4A:E7:A7:17:B7:EC:65:B0:DC:EA:E0:F3:5D:76:24
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/6I16VJdK56cXt-xlsNzq4PNddiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:270::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:f7:69:c9:27:48:2f:05:ee:a7:08:4c:e5:78:b4:b9:cd:
         9f:af:bd:9e:8d:00:2e:17:9c:e7:2a:b3:3f:56:d8:eb:90:cd:
         d9:e9:5f:17:17:03:88:75:c0:bc:1d:d4:10:3a:a2:1e:30:17:
         76:39:8b:4d:35:b0:b8:48:2d:d1:89:21:83:05:40:82:5a:99:
         b0:17:cd:b5:fa:21:3c:a1:b4:02:05:74:73:f4:e6:3a:e6:e5:
         70:9f:d5:ba:e8:45:11:e9:0b:35:8b:e1:70:59:dd:a7:4a:c2:
         d7:6f:0c:4b:08:78:9d:bb:9d:41:e8:eb:c0:89:0d:c3:64:b3:
         58:8c:66:c5:b6:9a:3a:27:85:5e:b2:51:2a:3c:e8:2d:61:69:
         8b:6e:29:49:23:30:d1:d1:a9:67:a9:40:78:be:cc:0c:45:37:
         3a:ca:e5:0a:bd:2c:8e:94:44:2a:5e:44:97:dc:f1:00:d4:d7:
         ca:f5:29:b3:7d:ca:f8:e8:b7:79:33:92:6d:9f:2a:5a:95:a0:
         c1:c7:fd:35:ad:a1:9e:1a:12:91:02:13:1a:3c:9f:b7:03:fd:
         2d:7b:26:7e:ff:52:8a:c2:97:09:e8:6d:48:2b:5a:63:d8:d5:
         cc:68:5e:67:4f:f2:99:ee:b0:2b:6f:56:b8:91:78:c7:20:16:
         76:77:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----