Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/7a1FEjdIP0QlJzA3GyzUDd9jF3I.roa
File:                     7a1FEjdIP0QlJzA3GyzUDd9jF3I.roa (raw, json)
Hash identifier:          x/Fe2Waj8GPKIzcp16vTFY0r/5IL3YjX7wbsF/RHGIc=
Subject key identifier:   ED:AD:45:12:37:48:3F:44:25:27:30:37:1B:2C:D4:0D:DF:63:17:72
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01893A4029957CDB441FA50CA8BC744D54A4
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/7a1FEjdIP0QlJzA3GyzUDd9jF3I.roa
Signing time:             Sun 09 Jul 2023 10:43:50 +0000
ROA not before:           Sun 09 Jul 2023 10:43:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8895
IP address blocks:        2001:1490:106::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3a:40:29:95:7c:db:44:1f:a5:0c:a8:bc:74:4d:54:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jul  9 10:43:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edad451237483f44252730371b2cd40ddf631772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:c8:db:f0:b2:a8:9c:0e:37:56:b5:e0:17:
                    e4:f2:fd:f4:d6:f9:81:ca:2c:93:a1:ae:a4:a8:90:
                    13:c3:c7:f7:a3:e0:48:c0:08:7b:58:70:cb:51:08:
                    2a:d8:97:ff:0e:c9:06:92:73:3b:27:b2:33:f0:ab:
                    39:1a:ea:18:00:f0:1b:ed:f3:09:43:4d:3d:62:48:
                    52:2c:03:05:7b:91:f1:fb:36:c7:f3:21:b5:10:eb:
                    c9:3e:05:84:25:43:7f:72:b2:40:d9:95:97:b3:bb:
                    60:b5:3e:f8:bb:09:1f:ac:52:ae:a0:27:80:7a:d9:
                    7d:ed:7f:f4:25:26:75:63:2f:11:5d:ba:89:61:a4:
                    40:8d:56:0c:f0:fe:1c:da:d0:58:6e:36:61:0d:c3:
                    b1:2e:03:51:5b:de:2b:0b:56:57:34:9e:42:b7:bf:
                    04:9b:17:78:d8:66:71:29:fd:60:3a:11:cb:3f:9f:
                    b1:1c:a9:46:3f:a9:87:67:75:61:19:9d:b0:72:5b:
                    03:fd:e7:6a:ea:86:3f:70:b4:06:4c:42:88:60:8e:
                    5e:ef:78:0f:da:c0:59:96:7b:39:22:7e:c8:28:73:
                    7a:9b:62:2b:69:84:68:67:26:41:d2:9e:a9:d0:31:
                    df:8b:15:c7:1d:b0:c4:e5:0a:0a:61:1f:32:e5:cb:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:45:12:37:48:3F:44:25:27:30:37:1B:2C:D4:0D:DF:63:17:72
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/7a1FEjdIP0QlJzA3GyzUDd9jF3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1490:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:8f:b6:ca:db:59:86:8a:76:eb:8c:3e:b9:55:15:64:3d:5f:
         af:1b:e9:ee:aa:ca:54:8e:b5:d3:f7:27:88:9d:21:6f:ca:e4:
         5e:e7:e9:2f:e4:96:95:b6:2d:c0:b2:99:04:d3:e3:7f:19:7b:
         f7:b2:d7:ab:0e:94:e0:40:7f:e4:18:d4:46:d7:ee:b5:78:11:
         fb:19:bc:4f:b1:dc:21:c3:1c:aa:56:f2:ea:4b:b7:70:d2:a4:
         ec:6a:09:0f:2b:57:09:b0:a7:b0:95:90:78:4a:46:b5:52:5f:
         55:e0:eb:c3:94:d1:16:ac:c7:1f:17:08:d2:c3:19:5d:63:a0:
         23:0c:dd:e7:28:d0:92:e1:b4:19:27:d3:e5:eb:09:a0:1b:f1:
         e9:18:90:1d:2f:eb:1b:ed:b9:b0:a8:1b:6a:2a:09:a4:ae:d4:
         b7:d1:c2:df:7b:81:0a:ac:e3:df:7f:6f:94:d9:ae:0a:75:ef:
         94:a6:b3:8c:86:9d:c8:21:fa:46:ae:b2:07:70:8b:51:e5:9b:
         8a:6f:62:5c:00:94:02:b3:c2:05:be:b7:e6:dc:aa:cf:96:83:
         ff:8d:8e:21:14:84:bb:dd:c1:d2:73:42:2f:1f:40:60:76:9f:
         1a:d1:1f:10:dc:17:80:e0:08:18:b1:0c:0a:94:ce:48:62:9c:
         2a:14:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----