Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/DvtRuGetiyDPnqSaMEdYhNF5X8E.roa
File:                     DvtRuGetiyDPnqSaMEdYhNF5X8E.roa (raw, json)
Hash identifier:          TxIvSknyHGhtc4GqJJe5JxnUTNYTaR0YTqkUV/EqM9c=
Subject key identifier:   0E:FB:51:B8:67:AD:8B:20:CF:9E:A4:9A:30:47:58:84:D1:79:5F:C1
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       018A4B0EA1C6F3467123420C67FE0BB6FC10
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/DvtRuGetiyDPnqSaMEdYhNF5X8E.roa
Signing time:             Thu 31 Aug 2023 10:06:04 +0000
ROA not before:           Thu 31 Aug 2023 10:06:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209437
IP address blocks:        2a0a:56c4:5::/48 maxlen: 48
                          2a0a:56c4:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4b:0e:a1:c6:f3:46:71:23:42:0c:67:fe:0b:b6:fc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Aug 31 10:06:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0efb51b867ad8b20cf9ea49a30475884d1795fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:ce:3b:48:cc:e0:c8:08:a2:f0:65:bb:01:
                    2a:82:37:27:37:de:8f:54:2e:87:04:ed:73:68:05:
                    d3:65:35:bb:76:8b:1a:3a:c0:65:c7:4c:2f:28:ec:
                    72:9b:3a:9e:d6:d3:ae:6a:a7:4b:61:ee:2b:d1:37:
                    c1:b2:e3:9b:9e:04:a3:36:12:0a:9e:58:95:93:a1:
                    18:00:b3:b4:71:32:48:32:cd:4b:7d:8b:d5:4b:45:
                    3c:90:e0:aa:51:bb:28:0a:0f:9e:e3:8e:88:38:fd:
                    ad:2f:5d:af:01:8c:da:af:f5:71:9b:52:cd:d9:22:
                    4f:da:87:96:c5:44:e5:f0:ab:6a:32:15:40:48:af:
                    a2:d1:3f:1d:78:36:77:20:56:20:d0:e8:be:ff:cc:
                    78:e2:e6:97:b6:29:cc:57:9b:fc:c6:a6:9d:22:e4:
                    79:7b:bf:05:62:ad:57:94:da:40:43:05:ed:3f:0a:
                    aa:d9:d0:47:7e:25:54:73:03:62:5f:0d:92:08:3c:
                    58:c0:84:32:88:7f:b5:e5:b9:f2:f6:b7:5e:84:6d:
                    47:8c:b3:d4:e1:60:b9:3a:5b:e5:bf:44:48:7e:34:
                    0a:6a:4c:2d:06:e5:54:e0:5b:d3:28:14:10:de:a0:
                    dc:3d:9c:b1:0a:2b:e6:26:d8:c4:1e:ac:81:a8:59:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:51:B8:67:AD:8B:20:CF:9E:A4:9A:30:47:58:84:D1:79:5F:C1
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/DvtRuGetiyDPnqSaMEdYhNF5X8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:56c4:3::/48
                  2a0a:56c4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:9c:8d:9a:fb:f8:43:f6:57:1a:c9:00:e9:5f:39:7e:9b:
         aa:9c:a0:1d:7c:63:cb:73:1a:d3:c6:ce:13:6b:ce:bb:83:f8:
         c9:1a:59:c8:5e:df:0a:17:65:8d:44:bb:1a:1b:d4:4a:d3:b0:
         77:d4:e4:b4:ae:0f:b8:fc:36:dc:3d:a9:50:92:55:a0:e7:60:
         15:3a:60:18:ab:95:15:f9:64:ac:aa:3c:c6:f9:23:5d:d8:b3:
         03:91:8b:14:b9:ae:47:7a:bc:34:c4:1d:5d:1b:c7:da:b3:80:
         92:b3:f0:54:2b:7f:00:a5:b3:7f:f8:ef:38:bc:f1:89:f5:3e:
         1c:63:2c:ee:1b:a0:9a:69:78:0d:fc:0a:36:7e:9e:bd:6b:d3:
         a5:f8:90:64:5e:be:ad:19:b7:eb:4e:30:c1:aa:6a:c1:bd:2f:
         a3:1d:dd:89:08:da:50:47:71:85:0d:59:22:ee:59:ac:0f:e1:
         e2:15:e2:b7:84:f9:b8:02:f8:36:46:81:a8:e9:89:33:1a:3b:
         a3:bc:2d:24:ae:da:3a:eb:aa:91:80:9f:25:47:40:1e:02:9c:
         a2:fd:6a:79:ce:ed:f0:46:54:6f:d9:41:20:b4:6a:ee:0b:c4:
         61:4c:c2:c8:b4:f3:aa:4b:30:25:6a:e5:ea:b5:34:ad:d4:9d:
         40:a2:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----