Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/UIRxT3HxNZEwfFfDjIXeWgj-rCA.roa
File:                     UIRxT3HxNZEwfFfDjIXeWgj-rCA.roa (raw, json)
Hash identifier:          qeJtYg11SwBjEfaKM1KHfRdeSBMOC7j6CmqWBJmsq4I=
Subject key identifier:   50:84:71:4F:71:F1:35:91:30:7C:57:C3:8C:85:DE:5A:08:FE:AC:20
Certificate issuer:       /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial:       01856F8BA5034F676C913683E7FC295672EE
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/UIRxT3HxNZEwfFfDjIXeWgj-rCA.roa
Signing time:             Sun 01 Jan 2023 22:55:00 +0000
ROA not before:           Sun 01 Jan 2023 22:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212044
IP address blocks:        2a06:bbc2:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8b:a5:03:4f:67:6c:91:36:83:e7:fc:29:56:72:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
        Validity
            Not Before: Jan  1 22:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5084714f71f13591307c57c38c85de5a08feac20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:a7:85:3d:d1:89:1b:76:04:d2:ac:ed:0b:
                    31:ba:ec:5f:19:81:de:97:39:9f:60:37:e9:79:ab:
                    ff:37:eb:36:c7:62:61:09:22:ed:72:bf:8a:90:78:
                    ae:21:ab:45:12:5f:ed:aa:61:f1:4c:b7:b3:1e:dc:
                    08:2a:10:9f:ac:ad:58:66:c9:8a:63:c2:ec:ee:d0:
                    00:79:81:4b:f2:02:21:ec:71:77:3d:76:14:71:cc:
                    63:16:6d:94:d3:e0:85:69:c4:4b:41:e5:ca:e9:9f:
                    4a:10:53:83:a2:74:c1:83:16:b5:e8:b2:4d:71:e8:
                    1b:bc:9c:03:3a:c3:58:8a:f0:6b:59:c2:29:dc:c8:
                    ea:c0:bd:20:6f:d3:dd:b2:a2:fc:60:76:6d:c3:39:
                    a6:7e:bc:a8:e9:83:ad:f4:13:b7:4c:9d:9f:72:6f:
                    cb:6a:42:4f:58:f3:b7:80:b4:f0:6a:f0:b6:36:6b:
                    b2:78:7d:ea:ad:35:7f:29:b5:6a:c5:69:72:6f:c0:
                    ee:eb:89:02:f8:ee:9d:49:6b:35:c4:77:d3:41:ce:
                    ec:62:db:87:c1:44:a6:93:7b:b0:82:18:38:7c:22:
                    4e:c8:6b:29:9e:d7:10:81:30:7c:76:05:67:fb:c9:
                    dd:52:91:45:12:2f:d6:91:48:42:c5:77:a9:3f:c3:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:71:4F:71:F1:35:91:30:7C:57:C3:8C:85:DE:5A:08:FE:AC:20
            X509v3 Authority Key Identifier:
                keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/UIRxT3HxNZEwfFfDjIXeWgj-rCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:bbc2:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:fe:20:36:00:df:ef:82:40:49:b9:7e:94:44:3b:4f:5b:
         0a:bb:4a:15:46:1c:29:a8:9e:a1:0d:68:4d:a1:4e:56:9d:e2:
         02:b3:4b:25:ab:b3:81:b4:03:5a:0a:20:7e:21:00:72:16:21:
         8a:ad:0e:fa:d8:43:25:be:0c:13:f0:cf:ed:ce:d4:03:59:ed:
         93:92:59:6e:74:90:19:6e:49:10:8a:00:5b:5e:a6:83:02:28:
         31:7f:eb:cb:0f:f8:aa:54:0a:c2:7b:30:8b:0b:ad:b7:bd:d5:
         10:7f:8e:46:9b:11:8b:41:59:cb:e9:e2:b2:65:bf:db:b5:a6:
         2c:79:a3:4a:22:13:e3:b5:ca:57:ec:85:8b:50:f3:86:83:77:
         f9:42:a6:73:88:85:26:db:10:47:e0:6d:84:16:eb:c7:50:1b:
         96:91:68:e5:c6:a7:a5:14:a5:7b:b8:f8:af:11:bf:d6:ff:07:
         9f:ea:33:6b:ba:31:28:35:b9:91:e1:b7:85:a9:f4:7b:8a:be:
         4f:ac:9c:1b:31:19:bf:33:26:e8:ea:fa:50:08:7b:00:10:f5:
         0c:d4:86:d1:25:83:68:5c:13:9f:31:8e:82:50:da:72:de:14:
         00:b8:7d:1b:f9:38:d8:9a:5e:66:bf:a4:63:97:27:a2:12:d7:
         70:db:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----