Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/W0eH2mmm-lEtgR_4uERLbHyZdUc.roa
File:                     W0eH2mmm-lEtgR_4uERLbHyZdUc.roa (raw, json)
Hash identifier:          bozagiu/zmrbpzCnAra3vxAeALQkuHCArT+T287wqt8=
Subject key identifier:   5B:47:87:DA:69:A6:FA:51:2D:81:1F:F8:B8:44:4B:6C:7C:99:75:47
Certificate issuer:       /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial:       01856FD4E8C90E1FF601D9FC3DD1934BDFAF
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/W0eH2mmm-lEtgR_4uERLbHyZdUc.roa
Signing time:             Mon 02 Jan 2023 00:15:02 +0000
ROA not before:           Mon 02 Jan 2023 00:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0a:580:f010::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d4:e8:c9:0e:1f:f6:01:d9:fc:3d:d1:93:4b:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
        Validity
            Not Before: Jan  2 00:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b4787da69a6fa512d811ff8b8444b6c7c997547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:b7:b8:55:77:94:35:08:a7:a1:ee:64:d0:
                    e7:f8:58:03:2e:63:fa:2f:32:bf:e0:48:80:45:53:
                    6b:75:0c:eb:f5:5b:bd:75:c6:80:49:43:dd:bc:62:
                    1a:58:4c:78:61:1a:44:f4:50:10:e2:c0:27:6c:78:
                    69:1c:6b:a5:d9:bb:ef:1b:12:77:18:6f:d0:c1:35:
                    3a:9b:96:5e:c4:c4:c8:0a:51:61:e5:1b:a9:b4:47:
                    0c:24:4c:01:a7:99:5e:34:c1:36:f6:34:89:e5:93:
                    32:43:50:f2:c8:7f:be:1b:a2:85:11:63:31:c8:bc:
                    a3:62:77:03:d2:a5:5f:7b:6b:24:18:56:fe:ca:28:
                    7b:0d:c2:3a:56:d9:15:29:8f:94:f9:00:0d:76:a2:
                    66:41:08:5e:36:97:e9:78:8d:0f:31:a1:08:02:46:
                    e7:9e:f4:67:63:b6:3f:6d:e3:4d:e2:b1:6b:1c:37:
                    6d:4d:97:23:da:b6:1a:b3:7a:c3:00:15:b9:53:a9:
                    a5:a9:39:2f:33:ef:75:da:6f:9f:61:4d:c5:55:d0:
                    64:ba:e7:01:36:c7:23:2e:9f:b1:f7:d6:e8:77:f9:
                    f9:af:57:61:d8:5c:0d:b7:d6:0b:d5:38:03:b4:20:
                    fe:a7:cb:30:a6:7e:1d:ae:d4:30:4a:8f:cb:7b:a2:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:87:DA:69:A6:FA:51:2D:81:1F:F8:B8:44:4B:6C:7C:99:75:47
            X509v3 Authority Key Identifier:
                keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/W0eH2mmm-lEtgR_4uERLbHyZdUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:580:f010::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:45:98:ac:97:f9:96:8f:bd:64:ee:28:84:fa:85:65:b8:
         46:37:0a:ea:28:04:b1:59:47:16:ab:e9:3f:85:4e:66:c8:78:
         f3:68:e2:7b:93:f5:28:fb:f2:74:67:b6:8c:1d:d0:c2:86:9c:
         2e:3d:e8:3e:1c:14:76:d8:0e:c4:10:4f:fe:9d:44:bc:e0:45:
         01:18:9d:2e:c0:0f:f2:34:90:f2:bb:4e:c6:de:f0:ef:05:4e:
         b9:a5:61:76:98:9c:25:dc:92:21:43:c2:8a:af:af:32:e0:e6:
         98:29:de:ad:c6:62:2d:c0:e7:f2:0f:9e:3e:7a:fe:12:e3:97:
         d6:59:b3:e2:44:5b:27:c0:cd:ff:97:bb:cb:5a:0b:4a:ea:78:
         49:8e:1c:0f:81:6a:e6:7f:14:20:cc:46:2c:89:72:a6:63:45:
         b3:34:73:48:6e:9a:aa:29:9f:6e:e2:61:e0:c8:d0:71:15:8a:
         41:90:5c:11:00:79:73:36:a5:53:75:fe:f9:f1:8a:f9:5b:e9:
         0c:d0:f5:44:5c:54:cc:bd:6d:8b:fd:80:f4:d8:62:0e:66:d2:
         b3:ff:7e:90:21:18:32:32:5e:e0:61:a0:92:bb:b5:a1:12:6e:
         59:82:ed:e8:b2:34:f4:57:02:a2:54:2e:81:ce:32:1a:37:e9:
         75:4e:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----