Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/d7LkEKrFlzKQDRaMUmJ1U1sRcEE.roa
File:                     d7LkEKrFlzKQDRaMUmJ1U1sRcEE.roa (raw, json)
Hash identifier:          OdrkrXC1nE4s/rrvsv+AR66p3ncIE2MJsiClM0Qc7cM=
Subject key identifier:   77:B2:E4:10:AA:C5:97:32:90:0D:16:8C:52:62:75:53:5B:11:70:41
Certificate issuer:       /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial:       018ADC8FB4824D8E22EF5603BBA3227B2D87
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/d7LkEKrFlzKQDRaMUmJ1U1sRcEE.roa
Signing time:             Thu 28 Sep 2023 16:11:59 +0000
ROA not before:           Thu 28 Sep 2023 16:11:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26548
IP address blocks:        2a12:de43::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 27 Oct 2023 18:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dc:8f:b4:82:4d:8e:22:ef:56:03:bb:a3:22:7b:2d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
        Validity
            Not Before: Sep 28 16:11:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77b2e410aac59732900d168c526275535b117041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:85:9a:b2:c9:2b:45:4f:0c:ae:d3:67:44:
                    3c:24:96:69:07:4c:ed:dc:42:9d:b2:f4:27:ca:ee:
                    c1:98:9e:de:53:05:17:30:32:df:ac:b3:cf:93:74:
                    9e:3d:14:4b:6e:bc:d8:ad:0c:cf:07:66:cc:d5:97:
                    aa:59:2f:da:c1:cb:bc:92:f8:7c:e4:50:ab:de:58:
                    5e:8a:b8:1e:a4:b3:5a:6f:61:e9:5d:0f:7b:3a:df:
                    23:61:41:11:06:15:16:5b:20:7e:98:f5:2c:b9:51:
                    e2:7c:74:bc:e6:06:38:38:8a:90:13:81:ba:0b:55:
                    b5:3a:dd:53:29:39:51:d6:62:f1:b5:a3:b8:3f:f5:
                    ed:4b:2f:13:9c:cb:dc:d9:88:9f:20:8c:9e:a3:ee:
                    5b:95:dd:98:21:76:8f:09:0c:2f:f8:a3:bb:f7:80:
                    16:4e:51:fb:3e:14:cd:3f:9a:f2:c0:97:cf:e5:b5:
                    2b:b7:1d:b1:61:a5:42:fd:bc:3f:e2:f7:95:ca:3f:
                    58:56:62:85:a8:e9:eb:ee:e3:4c:cb:e0:e8:0d:b8:
                    f7:b8:dc:c2:3c:d1:25:18:97:1a:ec:13:7a:48:33:
                    61:a6:b0:7c:fe:43:3b:99:ce:f7:30:07:a1:b8:5e:
                    02:57:28:1e:49:8d:3e:73:66:eb:e0:d7:15:09:4c:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:E4:10:AA:C5:97:32:90:0D:16:8C:52:62:75:53:5B:11:70:41
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/d7LkEKrFlzKQDRaMUmJ1U1sRcEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:de43::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:1c:4a:52:b5:23:42:dd:42:07:f4:81:80:a8:a8:26:d6:
         6c:67:3b:f0:b1:a9:71:4f:33:2d:f5:63:3a:dd:7c:80:73:74:
         ed:ee:e3:9c:14:67:14:3c:be:2c:43:81:5d:f7:7c:0b:72:a1:
         47:ca:2c:45:b0:6a:d9:a2:3a:99:34:1f:61:85:11:1a:62:41:
         3b:2b:5d:55:3f:ed:ac:c8:94:76:1a:38:b3:7e:38:b5:a6:f6:
         f2:ca:8b:bd:37:6a:df:d6:03:95:ae:d5:d9:4b:8b:32:85:be:
         e6:e4:10:18:b2:fd:14:37:3d:df:43:4b:73:27:48:89:c5:bd:
         27:b4:70:92:78:b7:05:62:34:41:71:fe:fc:6c:98:38:dd:93:
         2f:0a:f4:ae:26:66:c4:17:49:90:28:bc:dc:20:5a:9f:b3:b2:
         04:c4:b5:2b:e8:ef:25:54:f9:58:12:9b:28:50:52:61:0f:dc:
         0e:e1:31:be:06:ba:11:8a:58:96:84:62:1c:0d:31:a7:04:55:
         2a:62:5b:14:58:2a:c4:1d:43:b8:21:9a:66:9d:0b:5c:c8:b5:
         1a:43:fa:21:fd:6b:3c:53:8d:f3:3c:d7:dd:c4:fa:9f:61:be:
         42:a1:63:b7:02:ec:1a:3b:9e:b8:12:e3:47:d5:31:07:f5:23:
         ec:68:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----