Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/JHD5X86sHlhg_NBmgYf_M5tdr7w.roa
File:                     JHD5X86sHlhg_NBmgYf_M5tdr7w.roa (raw, json)
Hash identifier:          84IR3X9WZPgaJ07MqlSQ6/5t5vYTQyAhVeAOharkvZo=
Subject key identifier:   24:70:F9:5F:CE:AC:1E:58:60:FC:D0:66:81:87:FF:33:9B:5D:AF:BC
Certificate issuer:       /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial:       018573039D6AF383FB3E3195B7EFE9076EA6
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/JHD5X86sHlhg_NBmgYf_M5tdr7w.roa
Signing time:             Mon 02 Jan 2023 15:04:54 +0000
ROA not before:           Mon 02 Jan 2023 15:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200898
IP address blocks:        2a04:5d04::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:03:9d:6a:f3:83:fb:3e:31:95:b7:ef:e9:07:6e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
        Validity
            Not Before: Jan  2 15:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2470f95fceac1e5860fcd0668187ff339b5dafbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:75:79:96:47:67:86:0d:14:0a:94:35:5b:
                    7d:96:50:f9:27:9d:a4:4b:4e:6b:e8:33:f5:55:4e:
                    47:b6:df:5e:a6:bb:f0:1c:fc:d9:95:f3:90:ba:da:
                    08:f7:1d:38:74:8f:8e:8c:7d:95:0e:47:bf:c5:40:
                    3c:7e:8d:c3:ed:1f:01:d2:bd:f1:e6:6c:25:bb:fc:
                    ea:ac:98:c3:31:99:24:af:64:e7:6b:66:0b:28:43:
                    bc:05:16:75:9d:b8:b9:bd:af:5c:a7:17:11:64:14:
                    3f:fd:0d:ac:6d:52:af:04:60:e0:41:79:7e:d9:65:
                    a0:53:da:08:c3:bc:0f:0d:31:b1:7c:ee:e2:c2:49:
                    06:eb:25:5b:ea:9b:1c:bb:e2:e1:04:b2:de:b0:ae:
                    60:3e:4d:5a:f3:9c:8b:c5:96:4b:8e:a9:b2:9f:0d:
                    c4:85:2b:81:77:3e:78:69:37:50:cb:c5:6f:64:39:
                    8a:e4:e9:fa:fd:14:ed:24:44:03:5b:75:36:d3:37:
                    f6:c6:94:52:69:52:5a:21:47:94:59:9b:df:bf:73:
                    29:96:1c:09:78:e7:14:eb:fb:ae:49:04:6f:6b:1d:
                    3a:17:a0:38:d8:4f:a2:14:95:fa:c1:ef:01:9e:82:
                    49:1d:ae:3b:c6:81:33:68:60:6b:c6:c4:65:24:c2:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:F9:5F:CE:AC:1E:58:60:FC:D0:66:81:87:FF:33:9B:5D:AF:BC
            X509v3 Authority Key Identifier:
                keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/JHD5X86sHlhg_NBmgYf_M5tdr7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:06:a5:d8:54:25:00:d9:80:ba:a5:81:84:5d:2b:6e:13:
         46:fe:a1:c2:fe:0f:4e:7a:9e:a7:44:76:35:ca:1f:fa:37:34:
         60:de:f3:b4:8d:0e:96:0c:e9:f1:f1:16:be:fd:59:9e:93:bd:
         32:fb:89:bb:30:47:95:5c:a4:8e:52:1b:57:67:8e:07:59:6a:
         1c:14:0d:56:b9:e8:37:a3:dc:fc:16:2d:28:9a:99:c1:fa:24:
         02:43:f5:39:ac:72:03:5c:b8:6c:d1:d4:81:c2:f9:0c:d2:eb:
         20:e6:a1:50:be:f9:e5:af:b7:bf:8e:d8:6f:16:6e:c0:70:1d:
         12:c7:cf:ad:f6:49:11:5f:97:36:ce:f9:6f:04:04:8b:55:a0:
         01:22:9f:e0:93:43:fa:bc:e7:d3:54:8a:05:3e:42:c8:11:62:
         8b:0d:f4:53:81:dd:a9:75:cd:cf:a4:0d:96:38:13:78:92:00:
         3f:2c:66:64:80:01:22:37:31:33:9b:c0:a6:e4:a8:58:da:cb:
         ef:f0:75:a6:6e:56:77:ed:7b:53:2d:04:0d:b1:5d:bc:64:59:
         37:64:6f:c5:c6:78:53:49:30:31:87:32:4d:d8:fe:49:95:c3:
         f3:ac:74:86:e3:71:22:f3:b0:7d:b2:3d:7b:54:4d:11:9a:22:
         3f:a8:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----