Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa
File:                     eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa (raw, json)
Hash identifier:          5qsR5W4KYYniHKYPCvaXd7dI9JN2ealZPtqUb89wRWg=
Subject key identifier:   79:4A:9E:35:8F:D0:41:CB:01:C1:86:33:2E:B5:F9:2B:C4:AE:EE:5B
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       018571278F22839E1BDD876851DB90045B92
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa
Signing time:             Mon 02 Jan 2023 06:24:55 +0000
ROA not before:           Mon 02 Jan 2023 06:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        2a10:1fc0:7::/48 maxlen: 48
                          2a10:1fc0:a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:8f:22:83:9e:1b:dd:87:68:51:db:90:04:5b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Jan  2 06:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=794a9e358fd041cb01c186332eb5f92bc4aeee5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:fd:c8:92:a4:4b:d9:75:e1:62:c0:0a:35:
                    a7:13:3a:9e:27:c8:b8:f5:c2:2a:45:75:2f:47:92:
                    3b:a8:4a:71:37:7f:a2:c2:4d:1f:29:f4:73:ac:7a:
                    5c:db:bc:65:98:2c:93:5d:a9:c8:46:0e:b4:dd:9a:
                    95:a0:c7:4e:d1:6e:fd:0d:e5:ec:67:1d:b9:bc:e7:
                    c8:29:5e:6e:4e:d6:8b:77:48:67:79:c1:fb:c8:c1:
                    81:4b:98:25:81:93:af:8e:70:43:0f:e1:d6:02:89:
                    55:b3:69:92:8d:aa:b7:2b:c5:ce:b2:81:d4:9a:f1:
                    c9:fe:d2:93:ce:c9:5a:24:bf:52:90:cb:75:05:c3:
                    c8:b1:ce:1b:21:c2:cb:cc:43:40:3c:da:e7:34:7b:
                    96:9a:4d:08:dc:b5:bb:4e:d3:1e:35:79:46:a5:66:
                    1b:83:79:f1:9d:f7:13:77:a8:71:34:6d:7d:6d:9c:
                    00:3f:a7:a3:20:17:79:e1:9a:aa:ac:55:07:84:7d:
                    c7:30:f5:66:f9:4b:ab:97:46:c8:2a:ac:86:1a:52:
                    9a:68:a6:66:68:f9:fa:e1:87:01:fc:95:fd:e6:2f:
                    fd:df:2e:f1:6a:ad:55:22:49:27:0d:50:66:81:87:
                    d1:63:2c:94:00:99:1a:3b:23:98:a1:69:8a:6e:3d:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4A:9E:35:8F:D0:41:CB:01:C1:86:33:2E:B5:F9:2B:C4:AE:EE:5B
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/eUqeNY_QQcsBwYYzLrX5K8Su7ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:1fc0:7::/48
                  2a10:1fc0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:39:81:13:45:f0:64:06:1b:19:14:ae:72:e7:3f:74:ae:21:
         4d:51:de:56:5f:e0:9b:99:28:c6:92:bc:62:a8:af:38:fd:67:
         fc:14:f5:0d:2a:ca:df:98:5e:2f:36:65:c6:16:91:11:4a:02:
         ad:d6:b7:04:f5:a2:79:03:2b:2f:fb:79:85:0c:a7:55:9e:ee:
         31:21:18:f7:10:43:c3:48:81:7b:b3:b4:35:f3:a0:08:23:9d:
         e3:0f:4d:99:a1:f7:48:d4:13:77:e7:f3:02:be:1e:f3:28:21:
         d6:7e:64:72:dc:c2:8f:e2:78:df:a2:b4:64:a6:35:c3:21:56:
         7f:10:24:9c:fd:6f:84:37:98:c9:93:72:7f:ef:15:2e:98:48:
         f2:47:9d:c9:f2:dd:e6:61:d6:be:62:8f:65:69:09:d2:e6:fe:
         31:90:15:de:1b:08:f2:e2:fa:7e:ea:6d:8d:0d:31:53:ae:26:
         c6:52:f1:61:15:11:04:d9:9f:b7:64:f2:57:d3:ec:8f:1a:1e:
         0c:94:3e:15:b5:3e:fe:d3:b7:18:1a:12:e6:ca:12:4e:91:aa:
         b3:8a:32:2e:c9:dc:49:76:72:1d:b4:2a:38:2c:f2:f2:1c:ca:
         e0:58:96:41:ba:53:fb:e9:a6:af:2f:77:bc:85:0d:40:9e:94:
         85:32:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----