Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/3SVM4MzgRvMYw5Fz6fDlooCJNUE.roa
File:                     3SVM4MzgRvMYw5Fz6fDlooCJNUE.roa (raw, json)
Hash identifier:          o2hax+JQg0hfzXzUXsoxlPeH6S1UzxcIfuWWj+iPyWs=
Subject key identifier:   DD:25:4C:E0:CC:E0:46:F3:18:C3:91:73:E9:F0:E5:A2:80:89:35:41
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       01856D01911F40FC0196C13F4132F9837CD5
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/3SVM4MzgRvMYw5Fz6fDlooCJNUE.roa
Signing time:             Sun 01 Jan 2023 11:04:57 +0000
ROA not before:           Sun 01 Jan 2023 11:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21433
IP address blocks:        2a02:ee80:4251::/48 maxlen: 48
                          2a02:ee80:4250::/48 maxlen: 48
                          2a02:ee80:4250::/47 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:01:91:1f:40:fc:01:96:c1:3f:41:32:f9:83:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Jan  1 11:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd254ce0cce046f318c39173e9f0e5a280893541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:d8:0b:a2:42:09:09:99:30:40:9b:59:db:
                    52:9d:4c:6f:6a:4f:55:13:66:a0:33:82:92:f9:6f:
                    e1:5c:62:3c:e0:48:5c:9d:1d:f2:86:84:3c:97:e6:
                    47:76:51:80:d1:85:9a:12:24:56:e4:60:c1:00:3b:
                    8e:9d:14:94:9f:eb:28:1f:c6:4e:35:db:77:74:6c:
                    cb:32:99:4e:95:35:2e:21:8d:ef:a0:00:bf:03:f5:
                    f0:f7:c6:4a:4e:40:91:34:6b:74:7d:eb:34:09:71:
                    1c:dd:33:15:32:cd:9b:cf:c9:f1:2c:56:88:b7:70:
                    41:a9:80:e4:d4:d5:a1:a7:46:93:e9:3a:68:41:ba:
                    ca:a3:04:8f:05:77:5b:07:24:12:f1:f7:3e:2e:34:
                    30:74:4e:a1:14:27:4a:a9:1e:d9:79:c7:7f:0d:64:
                    ea:6d:07:43:86:90:f8:6c:15:d8:fe:ba:b2:9f:44:
                    8b:c5:8e:39:66:35:46:22:be:23:c2:32:da:77:62:
                    2e:29:cb:99:3c:f3:b1:3f:82:b7:65:4a:5b:be:a5:
                    ef:74:c1:cf:9f:01:1b:b6:8d:1b:44:8f:a9:3e:9f:
                    cc:c3:92:9d:a6:21:24:7d:9e:76:86:c9:35:74:3e:
                    d5:6a:3b:f5:19:2e:13:fe:9b:e4:70:56:94:70:86:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:25:4C:E0:CC:E0:46:F3:18:C3:91:73:E9:F0:E5:A2:80:89:35:41
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/3SVM4MzgRvMYw5Fz6fDlooCJNUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:ee80:4250::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:2b:1a:65:1b:aa:77:7b:b5:8c:e5:d9:0a:f7:61:d3:72:
         56:04:93:81:85:13:5a:05:65:6f:1c:40:e7:88:b1:8a:cb:90:
         ff:21:d5:31:ca:3d:2f:9f:98:32:6c:1b:53:50:d4:b0:32:e3:
         bf:0e:fe:8f:ae:d2:89:f4:56:0f:d9:be:e7:48:43:0e:6f:bd:
         9e:99:b8:19:64:11:a8:33:94:25:7d:6a:c2:fb:69:07:5f:7a:
         4a:7b:a7:cf:02:8c:cb:d2:9c:bc:df:bf:ea:a6:11:b8:b3:bb:
         ee:d7:d7:e1:ca:d7:2a:17:27:02:0e:aa:67:f3:79:0a:ae:2e:
         5a:52:39:da:43:19:89:d9:3f:e5:3c:84:82:43:6e:b5:61:b1:
         b4:74:4b:de:d2:cb:a4:90:8d:9b:66:84:b5:76:0b:24:6c:03:
         4a:b8:2b:35:30:30:53:d1:51:5f:42:7f:fa:35:94:93:b8:e8:
         b2:7b:11:d9:f6:01:97:86:88:b0:87:d5:ab:7e:85:20:59:76:
         38:c7:c1:b3:f0:3f:b1:15:48:36:14:c4:80:6c:7a:63:36:65:
         fe:e5:0a:c9:2c:3a:d9:64:30:d1:7a:c5:36:02:d5:47:6e:3f:
         61:03:92:ea:58:21:47:86:82:59:a5:9a:6b:be:43:d4:8b:bb:
         7d:dc:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----