Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa
File:                     f0xm_2MEl4eERnkxnMNZnav5hew.roa (raw, json)
Hash identifier:          IcHbNRzP/R4i50A1KaGHbvRiF9OwtrmO0BNUM/apUcE=
Subject key identifier:   7F:4C:66:FF:63:04:97:87:84:46:79:31:9C:C3:59:9D:AB:F9:85:EC
Certificate issuer:       /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial:       01856C65D8D5BCA75AF61364334F54DF083E
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa
Signing time:             Sun 01 Jan 2023 08:14:51 +0000
ROA not before:           Sun 01 Jan 2023 08:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212135
IP address blocks:        2001:678:efc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:d8:d5:bc:a7:5a:f6:13:64:33:4f:54:df:08:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
        Validity
            Not Before: Jan  1 08:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f4c66ff63049787844679319cc3599dabf985ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:01:e8:20:28:cd:aa:1f:de:a7:32:6a:3d:
                    54:31:be:1f:34:07:5f:a2:99:c9:55:6f:7c:4e:dd:
                    7c:15:93:db:bc:e6:aa:56:3c:01:34:49:b2:42:eb:
                    53:bc:50:9e:b7:8e:ab:77:52:c2:fb:37:5f:47:da:
                    12:96:ce:e8:33:97:7f:ef:b4:6e:36:71:f8:8f:2c:
                    3c:04:c5:7b:e4:68:cc:bf:1b:9f:a9:a5:8e:34:9b:
                    2d:6b:81:f0:12:8a:1c:30:7c:10:2d:7d:1f:69:71:
                    cd:5a:5e:6d:78:0c:4a:ac:f3:33:8a:be:e0:e1:23:
                    8d:cc:24:36:a4:a1:16:f0:60:07:d0:b9:17:50:e1:
                    6e:2b:8d:ca:63:ba:af:63:4e:df:7a:c6:e4:dc:89:
                    2d:1c:29:e4:fc:07:5a:cd:30:2f:53:e5:4b:c7:6e:
                    9c:f5:32:ca:26:3c:17:b4:a1:70:7d:33:28:00:ed:
                    d2:6c:3b:17:35:02:23:1b:06:04:31:3b:d7:4f:39:
                    25:79:ee:95:05:dc:14:b1:5b:f0:a3:07:50:a5:66:
                    00:b6:ce:13:a2:7b:dd:52:80:c5:1a:04:b6:56:4e:
                    dc:7a:48:dd:7b:a3:8b:63:ce:e4:ba:ae:4e:53:89:
                    0c:99:54:b6:97:28:9f:66:c7:d3:f6:0f:e3:50:cf:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:66:FF:63:04:97:87:84:46:79:31:9C:C3:59:9D:AB:F9:85:EC
            X509v3 Authority Key Identifier:
                keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:efc::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:86:5e:e4:d7:30:aa:53:7a:e4:8d:62:23:2a:28:fb:0f:
         50:c9:4c:7f:a5:ff:3c:e0:39:b7:48:4f:2b:c6:f4:d1:ea:64:
         bd:49:11:c6:12:13:59:67:b0:f9:e9:ee:88:fd:db:fc:f6:60:
         9b:ff:70:3a:33:d6:10:95:a2:49:1e:4c:d0:4f:6e:14:83:d3:
         ba:96:50:a8:c8:17:6b:25:71:cd:ab:ba:6e:35:c0:94:08:12:
         9e:f5:76:23:67:ba:64:0b:42:9d:e4:15:05:36:65:61:fd:d9:
         79:ed:ca:92:25:33:ff:84:07:01:f3:dd:24:37:55:cd:1a:a6:
         a0:bd:c5:08:10:6d:e2:e7:b3:e5:4f:f3:ee:d2:2c:47:89:19:
         8d:5b:d6:79:c5:42:9c:a2:62:78:1b:63:65:e0:d0:18:96:9c:
         b2:a1:17:f9:87:2b:09:e8:2a:97:dc:74:b7:8e:fc:b0:94:33:
         81:64:f0:0f:5f:c5:30:8e:c5:b1:36:9f:d7:24:87:48:5e:78:
         4b:6d:6a:2f:f5:4b:f9:fe:37:8b:aa:49:cf:05:9a:d6:81:04:
         09:20:6a:da:d3:a6:c2:22:34:10:f1:64:7c:a0:16:1a:e8:fb:
         30:31:ed:fd:cb:1d:09:ca:31:af:54:e0:bb:51:39:37:f4:e0:
         c7:37:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----