Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JP1ulzst9grN-LoQ1zEGh9agMME.roa
File:                     JP1ulzst9grN-LoQ1zEGh9agMME.roa (raw, json)
Hash identifier:          csMoJoNxG4MJSadE5Tq1Gdo2pilplPIcNmlGb/Dz3Qo=
Subject key identifier:   24:FD:6E:97:3B:2D:F6:0A:CD:F8:BA:10:D7:31:06:87:D6:A0:30:C1
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBC41637B0D80B564876566BF976DC
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JP1ulzst9grN-LoQ1zEGh9agMME.roa
Signing time:             Mon 02 Jan 2023 05:37:06 +0000
ROA not before:           Mon 02 Jan 2023 05:37:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201697
IP address blocks:        2a00:f826:7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:c4:16:37:b0:d8:0b:56:48:76:56:6b:f9:76:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24fd6e973b2df60acdf8ba10d7310687d6a030c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:61:e0:48:70:87:bc:b4:6a:d8:3e:4e:c3:
                    91:fd:f7:86:b9:6d:70:bb:c7:ae:d0:ba:55:d1:6f:
                    86:fd:61:a7:46:ff:00:ce:06:49:4c:4f:22:44:77:
                    06:b9:68:74:8b:08:4f:52:41:d7:06:f8:a2:2f:4a:
                    3e:47:7e:ed:9d:b6:cf:c8:c2:5a:c2:ce:c8:33:37:
                    91:38:2a:1a:fb:24:34:1c:da:b4:0a:0c:10:09:61:
                    7d:f4:5c:d4:21:bb:3f:59:79:9d:0d:f9:33:63:6c:
                    30:55:04:98:52:57:46:7e:a2:67:48:ac:06:8e:a9:
                    8d:13:1d:b5:f0:74:c8:9d:ed:28:12:e3:27:93:0b:
                    50:32:5b:24:13:ff:16:fb:70:ea:24:70:86:3e:25:
                    04:23:be:8a:36:b9:f4:41:5b:13:a7:bd:28:7e:b7:
                    2e:1c:40:4c:08:69:2d:77:26:33:27:b3:8f:41:a1:
                    c5:a6:96:ff:38:be:7b:db:a7:75:b9:88:9e:72:0b:
                    00:91:c7:3a:cd:ae:e7:03:2d:84:2f:0d:2f:7a:7f:
                    12:25:2b:ca:40:65:c0:38:6d:b2:64:7b:8c:6a:87:
                    55:e5:0c:ad:df:ef:04:7d:fe:06:a8:7b:a9:8b:7a:
                    bb:21:1f:d7:a1:4c:d2:fe:68:10:f3:3f:6e:b5:19:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:6E:97:3B:2D:F6:0A:CD:F8:BA:10:D7:31:06:87:D6:A0:30:C1
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JP1ulzst9grN-LoQ1zEGh9agMME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:f826:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:27:2a:1c:cd:e2:a7:e7:f5:e3:87:0c:30:14:5d:dd:d6:9e:
         fa:a4:61:d1:19:20:7a:07:8b:b8:b8:6d:0c:13:93:7c:39:09:
         e1:70:ec:a0:d3:82:d1:f7:d6:3b:cf:3e:a3:0b:81:46:2a:ac:
         76:12:8a:e6:94:ae:41:ad:57:7c:2b:f7:13:12:b5:5a:6c:fa:
         a7:d0:0a:0c:37:da:cd:b2:88:5a:3f:e9:8a:01:a7:69:6d:15:
         4a:46:03:7b:ae:48:7c:40:3a:f0:04:18:91:7d:cc:86:4f:65:
         68:e8:0a:d7:ea:e6:78:c1:ef:7a:36:74:3a:61:d9:0a:46:11:
         db:80:cc:18:36:0e:43:26:d4:31:e3:d5:62:10:2b:96:ff:ca:
         72:6a:59:79:92:c4:ec:15:1f:39:5a:a3:4c:1a:a9:06:49:f0:
         37:4e:ed:d3:6a:c2:17:10:53:59:44:95:5c:e5:71:2d:ea:6b:
         b9:f4:23:15:3e:4e:0f:db:07:cf:8c:71:0a:bf:df:5d:6c:f2:
         79:1b:90:9e:99:95:38:93:30:14:22:2e:2a:e3:f6:19:75:77:
         a7:fe:43:fa:95:06:71:2d:36:3b:e2:5d:6b:cf:69:d8:96:12:
         ba:e3:6d:f0:38:07:b6:a5:10:4a:83:f4:92:28:f6:1b:be:19:
         e2:8c:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----