Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/v_Jx92q-4pxxEljGgrhQpYnt_Ak.roa
File:                     v_Jx92q-4pxxEljGgrhQpYnt_Ak.roa (raw, json)
Hash identifier:          i/jEvT673Kp0mXjXZfuslE/qiXWZSD8TNmy+pijGBO0=
Subject key identifier:   BF:F2:71:F7:6A:BE:E2:9C:71:12:58:C6:82:B8:50:A5:89:ED:FC:09
Certificate issuer:       /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial:       01856D8ABBE9006600C1E92647AF9131AEF5
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/v_Jx92q-4pxxEljGgrhQpYnt_Ak.roa
Signing time:             Sun 01 Jan 2023 13:34:46 +0000
ROA not before:           Sun 01 Jan 2023 13:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213237
IP address blocks:        2001:678:45c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:bb:e9:00:66:00:c1:e9:26:47:af:91:31:ae:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
        Validity
            Not Before: Jan  1 13:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bff271f76abee29c711258c682b850a589edfc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:27:11:c4:cf:c6:71:8c:f4:d8:52:17:20:
                    15:8f:0a:39:9f:3d:3c:ff:dc:da:24:05:cc:7e:b3:
                    e0:d7:a2:c9:0b:e9:19:8d:37:49:f7:1f:e8:d5:55:
                    e6:cf:1e:87:36:17:96:47:2c:64:e3:fa:c3:3b:2b:
                    2c:82:c6:bd:ed:55:90:16:57:e1:82:39:6a:9a:9f:
                    03:df:85:9a:b7:77:42:36:54:ed:7b:c4:4c:e1:d1:
                    5c:57:40:a6:82:4d:fc:b8:95:24:b3:60:6f:19:7d:
                    64:70:76:7a:89:98:ab:dc:9d:2c:0e:63:2a:7a:d4:
                    4a:63:b9:6e:b2:f5:ac:d3:0d:80:19:e8:fc:33:9b:
                    2c:9d:d7:18:ec:d3:24:d5:73:31:e9:fa:af:c0:da:
                    2d:9d:9e:69:8c:e1:c7:cb:31:f9:68:a3:d6:70:61:
                    19:2d:60:27:2f:98:a6:00:3c:1d:eb:4d:7d:59:e5:
                    d1:9c:f4:39:cb:03:ad:ff:cb:e6:00:40:32:f1:f6:
                    dd:a9:c4:d2:30:93:c7:12:39:2d:d3:9b:4b:76:2b:
                    42:0a:b3:69:cb:94:5a:f5:25:1c:4c:ec:d2:2b:6d:
                    91:b6:81:11:b9:6e:9d:b6:94:25:70:d4:cb:6d:20:
                    13:a9:01:31:96:fb:5a:e2:71:0b:ad:b8:74:52:69:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:71:F7:6A:BE:E2:9C:71:12:58:C6:82:B8:50:A5:89:ED:FC:09
            X509v3 Authority Key Identifier:
                keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/v_Jx92q-4pxxEljGgrhQpYnt_Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:f7:d2:77:4c:35:ec:10:37:36:fa:df:0f:f4:5c:fd:77:
         4f:1a:b7:af:0a:e9:e8:f9:3c:1e:16:56:54:b4:4e:fe:f8:3c:
         89:82:c7:b3:42:ec:48:f4:76:17:28:e9:cc:41:22:67:da:11:
         e2:a7:2a:a3:b2:85:0d:2a:db:21:91:d3:30:98:aa:f5:c9:f3:
         32:cf:c5:1f:5d:06:60:69:34:0e:01:26:3f:a3:c3:c8:f6:1f:
         ec:c0:96:67:7f:fe:d6:0c:c2:f3:e2:31:9a:66:36:a6:97:ba:
         c7:02:96:95:64:a3:79:d9:d4:7c:ed:19:9d:ec:e4:08:e3:4f:
         a4:07:eb:b9:09:a7:55:a9:c4:83:c6:88:0e:02:dc:b6:ca:0e:
         9d:87:9a:1c:6e:32:c8:c7:0f:c9:14:c5:84:36:bc:44:fa:d0:
         fe:01:60:ff:79:0d:61:94:1e:29:ed:a9:e3:cc:8c:55:c3:4c:
         fc:ee:1e:f9:7d:9a:86:a6:e0:23:50:6e:aa:de:7a:2b:6d:ce:
         e6:a4:98:e5:bd:e9:4f:f2:90:f4:52:ec:6b:25:7f:14:95:19:
         a1:10:c8:b2:1a:02:3b:24:ac:36:ee:d9:9d:46:ef:0b:94:44:
         36:7e:97:87:bf:f8:ba:8b:c1:66:84:d3:a6:55:ab:29:7f:17:
         e8:1f:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----