Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rbHwKzQacBdVOiV0gdQqR7CInkU.roa
File:                     rbHwKzQacBdVOiV0gdQqR7CInkU.roa (raw, json)
Hash identifier:          RDv1sHUPQkFDf1Ak6tq7MQkLi+gTX/01QrJcTwhzIjk=
Subject key identifier:   AD:B1:F0:2B:34:1A:70:17:55:3A:25:74:81:D4:2A:47:B0:88:9E:45
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       01896949AE9E927BE0B680E3CF9CAB1F2E14
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rbHwKzQacBdVOiV0gdQqR7CInkU.roa
Signing time:             Tue 18 Jul 2023 13:56:23 +0000
ROA not before:           Tue 18 Jul 2023 13:56:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51087
IP address blocks:        2a0f:7803:ff70::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:69:49:ae:9e:92:7b:e0:b6:80:e3:cf:9c:ab:1f:2e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Jul 18 13:56:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=adb1f02b341a7017553a257481d42a47b0889e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:2b:8b:d6:fe:cc:d0:b1:d9:ef:48:7a:1d:
                    e0:8b:1e:c4:97:ab:ae:91:fe:b6:08:a7:5c:62:a7:
                    eb:25:98:f4:61:5e:2f:89:ac:b6:e6:de:c3:b0:1f:
                    6d:c7:44:77:ad:f8:31:10:d1:df:1c:cd:16:f4:80:
                    98:eb:f4:b4:e6:1e:82:81:d0:76:62:ea:54:54:9c:
                    a4:51:e7:92:38:fe:96:54:88:ed:bf:26:1f:1a:61:
                    3e:37:1a:be:ff:37:9c:d5:25:d0:bf:b2:7a:79:41:
                    b5:42:e3:cb:f7:3a:92:35:01:0e:f4:74:e2:0d:68:
                    5c:34:86:2c:3f:86:cd:93:ff:b4:83:9a:32:eb:90:
                    57:09:67:e8:2b:a1:67:a0:d1:d6:3b:d0:38:08:1e:
                    b2:b9:8c:33:d2:70:d4:b3:59:b1:be:54:69:f4:47:
                    aa:41:9f:f7:e0:8b:98:9d:bb:53:c7:e0:40:29:16:
                    70:15:02:1f:4d:f0:07:a9:37:6f:ce:63:f2:f1:93:
                    1a:1a:23:0c:99:5a:f8:e5:ad:26:4f:41:f4:9d:06:
                    c5:01:13:59:05:04:2b:8e:4a:22:74:78:99:30:6d:
                    7d:49:47:63:df:74:bb:58:97:32:0f:14:ea:b7:04:
                    7f:1a:62:7f:c3:18:04:78:99:4b:c9:e2:cb:80:db:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:F0:2B:34:1A:70:17:55:3A:25:74:81:D4:2A:47:B0:88:9E:45
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/rbHwKzQacBdVOiV0gdQqR7CInkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:ff70::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:15:b1:40:f7:0c:9f:61:6b:23:ec:7d:f8:57:0c:30:1b:fd:
         5c:25:a7:2c:37:d6:7c:81:42:2a:47:8c:21:53:27:6c:d9:a6:
         b2:29:0f:fe:7b:12:b2:f0:1a:80:3a:5f:74:ec:f1:a5:14:56:
         7e:d7:a6:70:97:ca:48:0d:e3:7a:32:61:a5:2b:26:3a:9c:26:
         c9:47:a7:c2:d3:8f:80:3d:77:c2:9e:53:47:8e:14:01:47:4f:
         24:c5:11:f1:b9:4e:33:2d:a3:4b:d3:4f:6a:c8:70:68:53:fd:
         66:3c:e6:04:ba:50:f1:a8:83:0c:44:ab:f2:50:d5:22:99:f4:
         99:a0:92:21:19:73:4b:98:23:18:84:52:9f:35:b1:94:c7:23:
         62:1b:c7:ae:25:5a:56:36:f5:92:9a:0c:2f:62:04:3c:95:94:
         f7:8d:4e:35:bd:9b:72:9a:9c:d6:92:ea:17:eb:53:10:13:30:
         5b:d7:53:e0:f6:e3:35:fd:46:8e:35:0f:89:55:3b:44:45:8d:
         a0:36:76:0a:b9:5a:e6:3d:3d:bb:a9:57:5a:f1:86:f4:0c:6a:
         9a:cb:b6:47:25:3d:c6:ef:b6:60:0a:65:d4:08:ac:93:73:d8:
         e5:c6:f8:3e:14:b7:ef:66:e0:ef:5e:e9:da:0d:78:0e:16:5e:
         62:87:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----