Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/D4-l6p4nLpOCnPF-xulKkpOUIiI.roa
File:                     D4-l6p4nLpOCnPF-xulKkpOUIiI.roa (raw, json)
Hash identifier:          aeX2mq7ct73ktXqcBfFhB+H3qUonuTQRHGWT+EG1jjQ=
Subject key identifier:   0F:8F:A5:EA:9E:27:2E:93:82:9C:F1:7E:C6:E9:4A:92:93:94:22:22
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       01875B2A284D3E60993F025B90A5336A7A85
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/D4-l6p4nLpOCnPF-xulKkpOUIiI.roa
Signing time:             Fri 07 Apr 2023 10:01:42 +0000
ROA not before:           Fri 07 Apr 2023 10:01:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210562
IP address blocks:        2001:67c:8cc::/48 maxlen: 48
                          2001:67c:b10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5b:2a:28:4d:3e:60:99:3f:02:5b:90:a5:33:6a:7a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Apr  7 10:01:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f8fa5ea9e272e93829cf17ec6e94a9293942222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:b1:b3:ff:44:91:13:23:ae:3d:e0:8c:8d:
                    88:1f:6c:c1:be:f9:2e:51:7d:c2:0d:ae:98:ac:ad:
                    23:81:86:37:84:80:cb:46:a9:05:e8:1c:68:a5:eb:
                    4c:87:02:ac:f7:61:c2:de:9e:54:cd:8e:8e:3c:46:
                    84:f7:ae:66:37:b3:2b:b0:06:59:18:d3:24:12:3f:
                    f4:9f:96:0f:06:6c:19:c7:b2:0f:0e:6a:b9:76:2b:
                    5a:f0:c8:1b:ca:c1:e9:5f:1e:09:b2:4c:bb:bb:4d:
                    2b:2a:c5:d6:65:3b:c6:7a:b9:85:f3:7e:43:48:ca:
                    13:48:fe:0e:75:51:45:cb:05:e4:e5:da:10:26:f0:
                    c9:09:3c:92:83:e9:e0:2a:1c:e9:03:06:3a:1a:4c:
                    a1:40:cf:73:47:63:51:1e:dc:c2:b5:9e:aa:3a:a1:
                    78:6d:aa:87:31:52:f4:7e:b9:1e:fc:20:e9:09:12:
                    78:0a:b9:21:6f:16:32:74:f6:77:d4:e4:cc:d2:38:
                    08:de:0b:82:79:62:48:e9:1b:d8:93:9a:cd:c6:c5:
                    fd:7a:03:74:a0:79:03:38:45:cf:c0:dc:4c:0e:35:
                    40:2a:64:d0:c5:48:d7:96:d4:d4:6a:60:eb:c1:74:
                    b0:19:f3:79:93:1d:43:ca:35:56:26:a3:84:db:45:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:A5:EA:9E:27:2E:93:82:9C:F1:7E:C6:E9:4A:92:93:94:22:22
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/D4-l6p4nLpOCnPF-xulKkpOUIiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:8cc::/48
                  2001:67c:b10::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:07:94:8f:64:9a:f8:26:34:e9:98:2b:8b:d4:b9:46:87:
         d5:b0:c0:ac:b2:c8:36:a9:0e:76:a4:d4:83:9e:7e:fe:24:93:
         ac:bb:fe:de:4a:9b:4a:bb:83:e5:5e:31:7a:6c:d4:d0:96:c6:
         0d:dd:a0:f7:23:27:d4:41:28:82:c3:6d:e7:a9:cc:50:fd:c0:
         21:5b:1e:d1:a3:ba:cf:a7:a6:44:f6:c4:99:ac:62:3b:d2:f8:
         45:30:ba:b1:4d:01:1b:8e:05:c6:0d:b1:0e:42:fa:6b:b3:23:
         86:6f:a2:05:24:d7:cd:3c:5d:75:56:b4:5d:5b:9c:6d:81:69:
         9b:8d:f2:d8:a5:d3:4a:01:e3:e3:95:0e:88:9f:7d:43:ee:eb:
         64:58:8b:37:22:3c:28:47:3a:04:6a:6b:6b:2f:c7:f0:f0:6c:
         20:25:2e:d0:f7:7a:90:dc:81:6c:65:e5:74:e0:2b:75:58:0d:
         43:2d:f4:8b:f2:31:74:d7:47:84:90:a2:2f:3c:29:81:9f:5a:
         ef:fb:09:36:66:57:14:c4:00:44:a1:d5:3c:b4:6c:6d:a8:51:
         60:9f:47:ce:80:d1:97:64:b1:7e:f7:c0:3f:64:2e:03:c1:d0:
         98:b2:39:6b:23:bc:30:26:c6:55:f5:d8:19:14:c7:98:12:ac:
         61:3b:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----