Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ORcEgUidPa7d4FXdZiY9mTEz57k.roa
File:                     ORcEgUidPa7d4FXdZiY9mTEz57k.roa (raw, json)
Hash identifier:          Jlx0Q3FXTQw2DzXIgYhmzJlQmPT2VzY61J/9fOjUJxY=
Subject key identifier:   39:17:04:81:48:9D:3D:AE:DD:E0:55:DD:66:26:3D:99:31:33:E7:B9
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01856BDC718AFF8FB85B4212BBAD4A0DD394
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ORcEgUidPa7d4FXdZiY9mTEz57k.roa
Signing time:             Sun 01 Jan 2023 05:44:47 +0000
ROA not before:           Sun 01 Jan 2023 05:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210769
IP address blocks:        2a0f:607:1300::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:71:8a:ff:8f:b8:5b:42:12:bb:ad:4a:0d:d3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jan  1 05:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39170481489d3daedde055dd66263d993133e7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:51:c4:5e:c2:04:f1:92:96:8a:81:17:5c:
                    54:c7:26:a0:bd:4b:d1:12:f0:4d:ff:3e:26:a0:13:
                    64:3e:bf:68:a5:60:0e:59:d6:88:fa:05:32:c0:46:
                    b4:ed:ea:f2:46:5d:1c:69:1b:9a:16:95:a9:44:b9:
                    9d:b2:02:36:76:6a:7d:93:4e:dd:09:ba:a0:2e:0b:
                    fe:38:60:3a:a9:8c:ed:28:33:e3:96:a6:26:8d:77:
                    da:3a:79:e3:34:4d:42:47:ab:b9:f4:64:bb:19:8b:
                    9f:e1:37:3b:4b:d6:07:b8:40:26:92:b6:53:8f:f4:
                    2a:33:49:c6:b5:35:ba:c9:5d:cd:01:06:1e:39:30:
                    6d:71:bf:61:3e:1c:ca:a0:04:8f:f6:d3:9b:96:ba:
                    11:e7:d5:e4:7d:da:f3:c9:d6:35:c3:62:96:f2:3e:
                    06:32:df:09:cb:97:a8:d4:78:c1:1e:8f:02:b6:6f:
                    d7:4b:1e:9e:02:6b:95:8a:fc:22:81:7e:02:3b:bd:
                    d3:98:31:f1:fa:bf:46:12:73:ad:4a:c8:02:0c:33:
                    b0:46:b9:32:eb:a7:ee:e4:8b:a9:57:d4:5d:1c:0f:
                    92:7a:68:5e:01:e2:69:dd:ed:c7:d9:81:c0:1d:67:
                    d6:6b:28:5e:2a:ba:4e:70:ca:1b:d9:ee:a2:b5:bd:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:04:81:48:9D:3D:AE:DD:E0:55:DD:66:26:3D:99:31:33:E7:B9
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ORcEgUidPa7d4FXdZiY9mTEz57k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:607:1300::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:bc:72:4f:17:7e:fd:a0:08:0b:2c:b9:1f:0d:d8:26:a5:
         29:64:7a:35:47:70:52:c3:8f:aa:ba:73:0c:2b:57:f9:08:84:
         87:5e:7b:97:91:6f:05:93:10:0a:8e:ed:b3:80:57:89:25:1f:
         37:77:15:e6:77:61:cc:19:03:7b:9b:76:39:02:22:4a:40:af:
         55:2a:c3:df:4f:9c:ef:52:82:47:89:68:4f:33:a3:66:40:4d:
         3d:02:f1:a4:fb:e6:ad:3e:85:a6:e4:75:07:65:61:e4:39:e6:
         72:8e:f3:e9:89:89:a6:cc:08:fa:8d:07:4c:8d:f5:93:23:21:
         ae:38:90:36:a5:6a:55:9b:06:80:47:c3:3d:47:db:9d:7f:f9:
         5f:67:ed:fb:3b:e3:69:e3:94:f5:64:d4:8d:ba:50:d6:3d:7d:
         29:77:0e:97:e1:98:44:7d:63:d7:eb:c3:ae:8f:58:92:e2:32:
         9a:e5:1c:e7:d7:68:af:02:e2:c7:44:8c:ff:c0:6f:5a:04:e1:
         13:e4:cc:2f:4b:83:c6:75:65:04:30:da:fc:b3:0d:b5:4c:a8:
         45:8a:9f:44:e7:3c:0d:99:dc:31:ff:11:1f:40:a3:0f:73:13:
         76:28:ae:a5:e1:3b:9c:ba:8b:31:29:c7:dd:4e:db:81:2d:d1:
         00:7a:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----