Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/wSnJbIcbeIQ6VBsHk9-Jmusujhw.roa
File:                     wSnJbIcbeIQ6VBsHk9-Jmusujhw.roa (raw, json)
Hash identifier:          +7fM9rYY4MRsAYB64LFXxgUZPWInn/9IIbRlz+pLgmc=
Subject key identifier:   C1:29:C9:6C:87:1B:78:84:3A:54:1B:07:93:DF:89:9A:EB:2E:8E:1C
Certificate issuer:       /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial:       01856FCBA4AB479B218F6B0FA7B7620DC430
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/wSnJbIcbeIQ6VBsHk9-Jmusujhw.roa
Signing time:             Mon 02 Jan 2023 00:04:54 +0000
ROA not before:           Mon 02 Jan 2023 00:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51405
IP address blocks:        46.29.176.0/21 maxlen: 24
                          2a02:2290::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:a4:ab:47:9b:21:8f:6b:0f:a7:b7:62:0d:c4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
        Validity
            Not Before: Jan  2 00:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c129c96c871b78843a541b0793df899aeb2e8e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:d9:09:5c:68:38:8a:e3:0a:62:fd:ca:ef:
                    4c:b4:e8:15:9a:80:a1:72:8d:20:67:bb:62:b9:ee:
                    17:26:eb:86:dc:fc:b3:1b:08:d8:08:4a:8e:90:0d:
                    ab:3a:17:ed:9f:9b:a2:56:7c:3c:8f:89:b0:c0:a3:
                    f4:ce:83:48:c9:3e:bb:c2:bd:c1:c0:f0:b6:10:05:
                    73:64:dd:39:c1:99:c2:c3:a9:5c:3a:a3:48:cb:0d:
                    f2:99:21:1c:eb:07:c3:6d:ac:49:c2:b7:ed:95:04:
                    59:00:da:b3:f4:1a:36:98:7f:30:a9:d8:1f:8d:70:
                    b5:3b:a3:98:2e:f0:f3:cc:1a:e0:46:15:be:32:3b:
                    fb:57:75:e3:2e:f5:89:c2:47:7a:f1:df:7a:6a:78:
                    29:5e:2a:ea:71:f8:07:c4:d5:8d:e8:1f:f4:1e:2b:
                    51:78:6d:81:40:ff:4f:ab:e3:65:4d:2b:73:af:e8:
                    10:c7:70:be:5e:2a:71:15:93:37:7f:41:d0:d9:66:
                    12:a1:37:e5:ef:6c:26:ce:b2:8d:b0:06:23:e1:17:
                    b7:c0:e7:35:88:c8:d0:d4:9b:88:81:5c:ed:3d:51:
                    00:ed:be:4c:1d:ba:03:59:89:79:84:01:c4:9f:df:
                    00:3d:8a:dc:ba:c2:a6:f4:bf:47:1c:95:6c:1f:b8:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:C9:6C:87:1B:78:84:3A:54:1B:07:93:DF:89:9A:EB:2E:8E:1C
            X509v3 Authority Key Identifier:
                keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/wSnJbIcbeIQ6VBsHk9-Jmusujhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.29.176.0/21
                IPv6:
                  2a02:2290::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:83:6d:87:2b:e0:31:41:51:b2:5f:93:17:1a:7d:d4:92:28:
         db:ae:4b:73:3e:49:c5:61:08:eb:8e:95:58:4f:1f:a4:3d:5d:
         29:9b:77:6a:1b:26:a0:a0:0a:58:04:b9:56:2b:97:17:4f:fe:
         7a:9c:6b:3c:ea:97:8a:44:3f:f8:1f:17:48:3a:3a:8a:ae:14:
         12:5e:d3:0e:84:bf:06:b5:22:eb:79:07:10:49:bd:04:d1:a9:
         1e:9f:1f:87:71:fd:1e:b8:df:01:5e:63:91:4b:6a:36:18:0c:
         c4:4f:74:ff:29:4c:e5:a0:92:3f:c6:2e:0f:06:ea:e3:b7:9c:
         f0:52:cc:d3:ee:33:d1:e8:8a:a1:26:86:87:a0:59:2e:54:c4:
         32:25:4b:c4:92:5b:05:92:54:99:99:d5:d3:78:7a:d7:a4:28:
         ca:37:1a:61:fc:53:54:0e:f3:49:ad:f0:d2:97:c7:93:37:70:
         4e:e0:25:7b:a0:fe:b4:60:72:85:5a:c2:c5:9d:66:c8:2d:bd:
         c4:a0:0a:4c:39:ad:91:92:f4:0e:23:43:ba:53:03:71:85:32:
         37:c2:bb:07:76:79:cb:5a:47:23:fa:67:65:80:37:9c:4f:8f:
         e8:de:3f:5e:c2:a9:7f:d4:05:50:57:6d:a8:a9:6c:ee:10:88:
         d2:5c:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----