Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/7lIy0doEHPm_jAK6lHn1WNy4XcM.roa
File:                     7lIy0doEHPm_jAK6lHn1WNy4XcM.roa (raw, json)
Hash identifier:          gZj08wnjYXnEHId7jkS/slSRMtZMT6MXwd3yWL6dqvY=
Subject key identifier:   EE:52:32:D1:DA:04:1C:F9:BF:8C:02:BA:94:79:F5:58:DC:B8:5D:C3
Certificate issuer:       /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial:       01856F023177D256241D758F7332D6952536
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/7lIy0doEHPm_jAK6lHn1WNy4XcM.roa
Signing time:             Sun 01 Jan 2023 20:24:52 +0000
ROA not before:           Sun 01 Jan 2023 20:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59829
IP address blocks:        2a12:b340::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:31:77:d2:56:24:1d:75:8f:73:32:d6:95:25:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
        Validity
            Not Before: Jan  1 20:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee5232d1da041cf9bf8c02ba9479f558dcb85dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:a9:9f:31:e4:bd:49:38:7c:4f:19:1a:83:
                    d5:21:7e:6c:c6:02:4f:12:ad:e3:ed:93:b8:f3:f6:
                    73:cd:17:75:21:22:af:4c:ec:64:3b:10:cb:f1:a7:
                    52:ac:16:bb:f7:7a:b2:4a:aa:22:1e:73:17:b7:20:
                    40:79:ed:89:f0:c6:c7:92:6a:1c:2c:a3:0c:83:e9:
                    fd:44:f1:15:b4:ac:d8:0f:ea:d6:ec:da:ed:c1:6c:
                    52:91:a5:db:8b:1f:ad:6f:f4:31:c3:47:37:df:44:
                    6f:58:5d:d5:5d:dd:bb:cc:1a:01:07:a4:49:df:71:
                    ac:f0:2d:eb:ca:e0:c2:c7:75:aa:c1:f0:2c:a3:de:
                    fd:3e:0e:19:b1:b2:66:9b:1e:1a:6d:ba:17:1d:66:
                    aa:e8:f1:8c:ba:d2:3f:67:8d:93:81:37:f2:70:a3:
                    28:a5:bd:22:6a:63:a4:4e:83:ec:03:40:fc:94:3c:
                    35:19:46:2a:63:83:45:c8:2e:54:e7:da:1b:45:6a:
                    20:7b:8a:4a:f6:52:5f:b5:fa:28:e4:97:5c:cb:f0:
                    5d:9a:82:c7:ee:89:d0:ad:ad:ce:e4:95:cf:0d:14:
                    a3:41:cc:5e:57:95:b8:26:0a:6c:97:3b:8e:23:f5:
                    26:c7:e0:ff:13:a5:71:20:7f:be:aa:bc:a1:e4:a5:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:32:D1:DA:04:1C:F9:BF:8C:02:BA:94:79:F5:58:DC:B8:5D:C3
            X509v3 Authority Key Identifier:
                keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/7lIy0doEHPm_jAK6lHn1WNy4XcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:b340::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:82:e2:42:04:98:80:09:46:e5:4c:06:8c:81:24:54:88:
         32:39:ad:7e:0e:53:b2:1b:8a:e1:70:31:d1:f8:a1:8d:a1:fd:
         f2:f8:7e:d0:7b:d0:be:c6:bd:a7:e6:82:92:e0:37:78:9b:53:
         af:10:66:38:88:55:5d:cd:b0:30:3b:65:9d:23:0a:09:0e:3f:
         29:e6:d6:88:02:f5:84:61:f6:ba:13:f5:4a:07:cb:4f:25:42:
         c3:c4:c1:c7:be:55:01:93:60:9a:f7:63:4a:43:df:de:d1:5b:
         6c:a4:87:5e:4d:25:df:60:d0:9d:2a:70:f5:cb:6a:4b:0b:62:
         ae:a7:b7:28:d5:8f:6c:29:63:0a:0e:b7:51:d5:bd:dc:57:be:
         c1:e8:b9:bf:31:49:2b:26:4c:c9:3c:d6:31:cb:69:63:f8:38:
         92:e0:c7:f2:52:ed:60:bf:3f:18:50:c7:91:5f:ce:ef:a7:90:
         5d:7f:12:8d:b7:ac:12:84:af:d2:33:b0:78:54:57:ee:6a:62:
         19:c9:de:ef:01:6b:9c:71:24:40:5a:07:3d:8c:58:76:31:0c:
         21:ea:b6:8a:93:af:e6:be:83:43:41:db:d7:cf:81:69:0a:b9:
         14:ce:55:d1:8b:84:fe:4e:f4:e2:62:a5:b4:2d:3c:e8:b2:b9:
         2a:58:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----