Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/B-4iWThfkgpHpy6fxiflkqkiATE.roa
File:                     B-4iWThfkgpHpy6fxiflkqkiATE.roa (raw, json)
Hash identifier:          HDZs9A3+BikfIXerKG2rthP7l/LssuKaQGNaLibYD4M=
Subject key identifier:   07:EE:22:59:38:5F:92:0A:47:A7:2E:9F:C6:27:E5:92:A9:22:01:31
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01856BDC6D46A4E70C24D3D4CDDCFFA18C6C
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/B-4iWThfkgpHpy6fxiflkqkiATE.roa
Signing time:             Sun 01 Jan 2023 05:44:46 +0000
ROA not before:           Sun 01 Jan 2023 05:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     131668
IP address blocks:        2a0f:607:1051::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:6d:46:a4:e7:0c:24:d3:d4:cd:dc:ff:a1:8c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jan  1 05:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07ee2259385f920a47a72e9fc627e592a9220131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:61:bf:48:30:16:58:2e:98:9e:80:d8:a9:
                    92:37:9d:71:7d:f9:63:fd:ca:c9:e0:23:1e:48:1c:
                    d4:e8:89:f9:51:16:79:d1:f1:64:0b:a4:01:ef:ac:
                    cb:74:2d:85:4e:d2:f2:12:1e:7f:f9:e4:fb:22:df:
                    0e:30:4e:fd:dc:c1:e7:58:bf:2c:47:f7:03:2a:c9:
                    8e:df:68:c2:e5:71:24:13:2f:d2:5b:92:5d:87:e5:
                    52:dd:ed:43:1a:13:20:70:b0:85:12:21:85:bc:e1:
                    49:5b:4b:1c:31:1c:08:0d:16:b2:7e:74:38:5a:2b:
                    32:d0:40:ad:a5:b4:b4:78:62:1a:83:fe:70:52:f6:
                    e2:1a:bb:1b:22:23:49:da:33:ef:e4:d0:15:8e:52:
                    f9:13:23:46:14:da:64:63:a3:e2:11:33:6f:81:f8:
                    82:b2:5d:5f:73:b6:05:31:1e:ed:a5:09:13:cb:5a:
                    72:62:08:fc:cd:29:45:2b:cf:c6:79:a1:e0:76:f3:
                    97:81:5b:d5:79:6a:2d:9c:27:63:87:aa:67:f7:bd:
                    fd:d7:5d:59:2f:1a:72:5c:54:04:5d:0a:35:cb:39:
                    be:90:c3:a8:4a:7d:c0:94:e6:53:9b:4e:ba:31:a2:
                    97:16:d0:cb:28:40:b2:40:0f:d1:d9:fb:80:3a:07:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:22:59:38:5F:92:0A:47:A7:2E:9F:C6:27:E5:92:A9:22:01:31
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/B-4iWThfkgpHpy6fxiflkqkiATE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:607:1051::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:b4:eb:0d:04:b7:0b:d9:bb:5c:6f:8b:33:32:eb:74:f1:
         a1:e0:52:bb:97:af:07:30:ea:dc:65:b8:9f:31:8f:1a:6f:41:
         ee:ad:5a:9a:17:4e:d4:87:0a:a2:da:e8:62:6d:a6:e2:dc:d1:
         ca:64:29:66:89:1b:c1:73:ee:cb:bd:dd:fd:62:e2:18:a6:44:
         89:de:bf:4c:a8:d8:42:e8:fc:a1:c1:5e:23:0c:a1:65:8c:26:
         73:7c:10:86:3d:c1:75:fc:d8:15:7b:68:e5:6c:c4:5e:e4:38:
         78:98:36:36:39:82:68:d4:04:e2:e7:2e:3a:81:97:4a:4e:6d:
         c2:6f:3a:47:0f:a3:9e:81:9c:cb:45:f8:bc:95:06:88:6a:33:
         c5:f2:3a:92:5e:fa:ee:ad:cd:60:0e:13:e0:9d:f9:41:1c:1c:
         e7:69:ee:82:45:54:f2:02:36:2b:b9:81:32:d8:38:fc:5e:95:
         33:2b:83:0b:d9:70:35:dc:bb:07:62:5d:12:b7:0c:23:c3:42:
         2b:e8:48:78:44:0a:9a:be:46:98:f2:ff:47:17:f9:aa:04:fb:
         08:f2:a1:d0:07:36:51:d9:8c:f2:76:47:5d:f2:71:13:a1:e6:
         f2:44:32:24:23:c0:5f:67:90:be:4d:ff:6a:20:f1:d3:59:d4:
         13:57:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----