Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZnfHVj9g1vBUM6qbvjBpbHNdZbc.roa
File:                     ZnfHVj9g1vBUM6qbvjBpbHNdZbc.roa (raw, json)
Hash identifier:          n+/cltovTQ7rrYjuEpBmoZIfKoNPzoo3kND2qxJ4QUc=
Subject key identifier:   66:77:C7:56:3F:60:D6:F0:54:33:AA:9B:BE:30:69:6C:73:5D:65:B7
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       0188E8CA5F654BE6C105166126C38A1E8CA1
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZnfHVj9g1vBUM6qbvjBpbHNdZbc.roa
Signing time:             Fri 23 Jun 2023 15:05:56 +0000
ROA not before:           Fri 23 Jun 2023 15:05:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199613
IP address blocks:        2a0f:7803:ff70::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e8:ca:5f:65:4b:e6:c1:05:16:61:26:c3:8a:1e:8c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jun 23 15:05:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6677c7563f60d6f05433aa9bbe30696c735d65b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:36:ac:d3:7c:b7:4a:44:c8:e1:ee:29:35:
                    98:61:57:02:7d:72:b7:a2:7f:e7:78:aa:e1:fe:ef:
                    8b:7e:c6:56:97:d6:c1:42:15:01:cd:fd:20:d7:08:
                    c4:ed:8e:08:c1:9d:af:59:c5:19:53:71:51:02:e0:
                    44:1a:57:5f:4f:35:cc:7e:f9:6a:87:9a:59:54:8b:
                    a2:6d:bc:a3:7e:94:7d:db:e2:1a:04:5b:1e:b0:84:
                    7b:71:16:fb:31:12:0e:25:d4:5a:4d:6a:60:95:48:
                    e5:f5:ff:22:d4:da:e8:2c:45:54:62:e3:18:64:62:
                    7e:1d:03:db:dd:1c:1b:a1:d0:ac:80:d8:8c:ed:e6:
                    91:ef:5b:e2:aa:6f:dd:f7:29:36:eb:f1:7f:fd:65:
                    6c:1f:31:f6:4a:a9:21:2e:5c:89:0c:69:ee:29:d7:
                    ac:e1:c3:ac:4e:6c:22:40:3f:a0:88:d3:b1:3f:c2:
                    47:fb:9d:ee:a3:74:cb:e2:47:ac:7a:b9:89:3c:ec:
                    b3:25:12:e8:7f:82:46:df:19:c3:ee:30:c3:79:c3:
                    32:71:d4:37:e9:1b:a2:06:c4:09:6a:fe:51:d9:44:
                    61:94:75:69:96:b5:ba:7f:68:26:75:ea:10:a0:98:
                    91:e7:65:9e:bf:57:af:c6:37:e3:98:b4:34:3c:ab:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:C7:56:3F:60:D6:F0:54:33:AA:9B:BE:30:69:6C:73:5D:65:B7
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZnfHVj9g1vBUM6qbvjBpbHNdZbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:ff70::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:94:a1:e0:72:19:b8:8f:06:9f:24:b4:11:10:2c:01:cf:ad:
         b2:22:b8:40:db:8c:4c:69:65:a1:ae:fe:42:02:79:d3:57:79:
         8a:77:b6:44:b5:85:e5:1d:c2:8e:8c:93:1a:d1:69:d3:e4:63:
         42:e4:4d:52:f9:07:34:13:79:40:b0:bf:ec:f3:6e:84:1b:6a:
         c1:6c:6e:5f:93:12:05:25:7f:82:cc:1e:9e:eb:65:01:95:aa:
         41:83:fe:82:7f:5e:ab:72:1f:07:78:77:21:5e:3b:76:51:07:
         59:5e:11:91:3a:3b:30:07:06:74:48:48:80:4e:71:be:cf:dd:
         19:99:78:e2:64:16:01:27:9e:1d:2b:7c:ae:43:c1:75:08:7c:
         c7:20:ca:de:11:d2:e6:0f:3e:46:69:e4:ea:9a:e3:de:7f:24:
         48:7f:a1:15:0c:2b:6a:5f:f0:1b:86:fc:1e:b6:65:5d:9e:67:
         96:24:d1:62:57:ef:52:29:fe:01:7b:36:67:ea:60:66:cd:0b:
         ef:57:5b:d0:61:e0:b4:c8:02:8f:fc:c1:54:a4:fb:c1:5b:48:
         73:27:e2:c4:c9:f6:41:2a:a4:c8:69:7a:43:73:7f:f4:60:b4:
         27:f9:87:d7:e4:8c:c8:7a:b7:3f:cb:27:0e:6c:06:43:56:19:
         74:47:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----