Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/FBzZpKbYVic1liOeOPOifc4yj_A.roa
File:                     FBzZpKbYVic1liOeOPOifc4yj_A.roa (raw, json)
Hash identifier:          qu+56Dh3fMaABn1q0nFLi2W8jWqGKCn7xaWyQAwdwOo=
Subject key identifier:   14:1C:D9:A4:A6:D8:56:27:35:96:23:9E:38:F3:A2:7D:CE:32:8F:F0
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       0185719E75F619DA63A0DA12D6FAE30E9641
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/FBzZpKbYVic1liOeOPOifc4yj_A.roa
Signing time:             Mon 02 Jan 2023 08:34:48 +0000
ROA not before:           Mon 02 Jan 2023 08:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197838
IP address blocks:        2a03:6607::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:75:f6:19:da:63:a0:da:12:d6:fa:e3:0e:96:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Jan  2 08:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=141cd9a4a6d856273596239e38f3a27dce328ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:4e:f1:e9:69:83:bb:19:fa:c8:85:40:80:
                    1e:b5:2b:6c:4d:7a:0e:a8:5f:e8:79:d9:cf:4e:24:
                    6a:e4:f3:40:88:03:1f:f7:a4:c6:e4:1a:e9:2f:8c:
                    96:bf:f7:52:e6:33:d7:82:90:4e:3f:cc:b9:6f:bb:
                    63:74:9f:3c:4b:7b:f3:e2:04:ea:d6:15:4e:85:d6:
                    10:af:10:f2:b1:48:ab:58:7f:1e:38:19:c5:5e:b8:
                    f3:a1:78:9d:7d:da:8b:67:f4:54:56:95:c1:f0:3a:
                    68:3a:06:0c:cf:f1:b2:e3:7f:75:70:3b:c4:80:99:
                    75:89:41:68:96:ce:0a:3b:d4:ad:d9:99:47:d0:01:
                    ac:d7:d8:89:b0:ab:d3:1f:03:15:a3:35:76:e6:ac:
                    97:64:45:4d:af:8d:f5:ef:9b:fe:32:30:6c:67:f4:
                    99:7f:52:8c:0d:90:af:50:94:f4:64:3b:be:00:7b:
                    1b:a1:3f:a7:5c:32:a6:ee:5e:61:1d:5c:4a:09:5b:
                    65:28:aa:3b:e7:08:2d:6a:f8:4c:49:dc:14:f8:a3:
                    5f:5e:69:49:54:3b:b6:40:30:e9:70:20:6d:d4:e9:
                    b5:cd:cd:4c:82:a5:6e:bc:89:a9:4c:c1:a1:70:c3:
                    2f:6a:61:67:dd:de:0a:81:59:e1:e5:1b:be:fb:ef:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:D9:A4:A6:D8:56:27:35:96:23:9E:38:F3:A2:7D:CE:32:8F:F0
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/FBzZpKbYVic1liOeOPOifc4yj_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6607::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:28:f2:07:06:0f:ea:86:00:e9:32:bb:f1:0c:58:44:44:
         61:30:be:43:1f:5d:e9:8b:f6:fb:e0:99:ea:fc:8e:4a:79:cb:
         ac:d8:6f:b3:ef:04:90:a6:95:63:e6:2c:ee:c7:cd:f7:aa:8c:
         1d:9a:aa:68:da:f6:dc:c0:4b:53:a9:fb:16:93:7c:55:8f:a3:
         cb:22:55:6a:43:f4:7b:62:04:6a:1f:d2:41:8e:e8:1e:0b:c1:
         d6:24:56:aa:00:d3:3d:fc:ab:58:74:6f:58:70:11:42:04:01:
         db:e9:44:bf:cb:15:f4:bf:89:ba:1f:16:93:24:37:9e:a6:30:
         52:85:52:a1:5e:83:87:a3:38:1e:d1:c9:7c:cc:6e:ce:da:e1:
         86:fa:9e:f7:71:8c:f4:c9:72:f0:c0:be:72:d4:38:c0:29:b0:
         04:20:62:aa:87:e6:1f:5f:e6:3f:d4:fd:bd:2d:86:9a:4b:ab:
         9c:da:f8:c4:9b:fb:b1:2a:7a:c6:75:e3:94:8d:f1:cf:73:da:
         f8:7b:89:ca:f8:85:1e:37:0e:65:f4:6d:ee:52:62:65:07:8e:
         f1:76:bf:de:3b:11:ae:e3:68:48:19:ff:38:39:80:c9:5b:c5:
         b3:88:e7:f8:50:20:f5:c0:ca:6a:6d:63:a5:3c:b2:5b:be:04:
         3a:2b:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----