Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/7uFP5FWJdbNN_K-g1sN53OK3mBc.roa
File:                     7uFP5FWJdbNN_K-g1sN53OK3mBc.roa (raw, json)
Hash identifier:          /28IHjyd8tm5jzLEIKCJ+mPlgZXeD927qPwHzLItEeE=
Subject key identifier:   EE:E1:4F:E4:55:89:75:B3:4D:FC:AF:A0:D6:C3:79:DC:E2:B7:98:17
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       01856FCBBF9B89707416F6626BABBAD9F775
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/7uFP5FWJdbNN_K-g1sN53OK3mBc.roa
Signing time:             Mon 02 Jan 2023 00:05:01 +0000
ROA not before:           Mon 02 Jan 2023 00:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212970
IP address blocks:        2a0e:e704:45::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:bf:9b:89:70:74:16:f6:62:6b:ab:ba:d9:f7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Jan  2 00:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eee14fe4558975b34dfcafa0d6c379dce2b79817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:18:2c:4c:e1:de:db:fc:4c:d7:83:ce:4c:
                    be:a6:d1:e6:74:86:cb:69:12:de:82:2d:27:13:d8:
                    04:03:dd:cc:fc:fb:6e:93:63:c0:09:63:16:e0:ed:
                    04:30:94:3a:25:00:e8:f4:42:e5:6f:3f:7e:a5:e3:
                    cf:16:c2:1c:d7:1f:31:3a:4f:e4:29:b4:bd:e8:a9:
                    69:4c:8d:c7:69:d7:ff:d4:7b:da:cd:f3:3a:c1:d3:
                    73:1d:83:51:ce:49:88:e2:ab:c8:a0:b6:b2:19:25:
                    5f:74:ec:21:62:73:f3:12:65:a1:77:43:16:65:54:
                    65:4e:e4:a5:f0:3b:c3:2b:ce:e1:59:c0:32:ee:a8:
                    73:2d:5d:5b:c0:bf:cc:ef:9c:b0:e3:dc:e5:a3:25:
                    d1:f3:0f:74:9b:f9:7d:4c:30:88:20:72:05:08:92:
                    c4:ba:5f:a7:3d:de:18:e1:d5:96:83:3d:18:84:bf:
                    09:97:c6:6f:49:13:46:b1:ca:3d:f7:54:98:2f:d2:
                    93:a9:7f:9c:4d:74:f2:57:91:c7:79:c5:84:e4:16:
                    13:ec:56:40:26:e7:ed:91:85:11:b0:5f:dc:1b:b9:
                    a0:23:a2:02:21:78:81:fc:59:73:a5:4c:09:a7:d3:
                    6e:77:7e:83:76:02:ee:1b:25:dd:93:d2:2b:89:12:
                    37:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:4F:E4:55:89:75:B3:4D:FC:AF:A0:D6:C3:79:DC:E2:B7:98:17
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/7uFP5FWJdbNN_K-g1sN53OK3mBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:e704:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:fe:67:e9:32:19:b9:a0:47:30:5f:24:fc:6d:45:c6:f7:
         3a:4f:fe:d5:d0:de:a5:aa:4d:62:cc:c9:bc:7c:12:fd:b9:d4:
         b9:9a:87:dd:1b:9d:64:fc:ae:f9:ea:65:5e:35:26:2c:d6:6b:
         f7:b4:47:06:fe:a4:38:db:7d:89:96:b7:5f:3a:55:72:27:29:
         ef:0d:c5:a9:73:48:57:50:a3:20:ba:e6:d6:ed:2f:12:16:ff:
         52:f8:b5:52:b1:bc:d4:b3:54:08:94:bd:a2:a7:24:e5:4f:f6:
         bc:e5:55:b0:95:60:85:1d:17:76:6f:df:58:96:11:07:ac:9c:
         69:14:10:04:c7:42:66:50:9f:8c:5a:12:93:91:95:b6:02:b1:
         f0:0b:24:9a:4d:1f:3c:9f:f4:3c:5d:a6:3f:48:1a:e0:03:08:
         1b:21:c4:c1:c5:34:bf:72:4c:b4:dc:03:0a:40:c5:c2:52:d9:
         d9:50:32:c3:03:ab:83:30:eb:39:db:69:89:38:fd:15:6a:4b:
         dc:df:4d:ab:c2:75:02:24:0b:4c:a5:3c:49:70:8f:c6:6b:2c:
         c2:21:4e:e1:71:e4:b2:6d:21:c1:9f:83:05:5e:aa:8b:49:88:
         55:e8:ba:da:a4:a1:fb:f3:29:91:f2:7d:cd:c4:a7:cf:b2:da:
         01:63:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----