Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa
File:                     WGpjQkK9X2lsQTTbInf2ASajFaA.roa (raw, json)
Hash identifier:          O4wpsaABwxy7RxSYzXxJjJ7ML9FSB2SqVbOTI0jyxFg=
Subject key identifier:   58:6A:63:42:42:BD:5F:69:6C:41:34:DB:22:77:F6:01:26:A3:15:A0
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0186EF4CB8EBCDF27011C0BC7DB7B02F00BE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa
Signing time:             Fri 17 Mar 2023 11:20:27 +0000
ROA not before:           Fri 17 Mar 2023 11:20:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        2a09:ff00:8800::/37 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ef:4c:b8:eb:cd:f2:70:11:c0:bc:7d:b7:b0:2f:00:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Mar 17 11:20:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=586a634242bd5f696c4134db2277f60126a315a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:97:30:9a:92:ec:de:84:bd:85:3f:15:27:
                    fc:cf:16:13:de:c0:39:10:fe:7d:7c:f6:64:f5:5c:
                    cf:78:23:5e:f5:47:71:5e:30:27:79:d2:20:2f:3e:
                    36:18:36:16:45:1c:aa:0a:4a:37:ad:cb:72:a8:be:
                    ac:1d:93:1c:b1:2f:19:93:dc:d2:37:83:e9:d6:4c:
                    1d:7a:d1:9b:91:52:76:29:b2:43:f6:8c:df:6c:62:
                    23:c8:16:02:90:b4:af:dd:31:c1:c4:ea:dd:f9:96:
                    a7:c1:ca:4a:6d:97:4d:dd:a6:43:47:7f:9f:0a:64:
                    2c:1f:98:41:35:60:a4:a7:7b:a4:93:3b:f9:0d:ab:
                    84:02:73:35:84:28:31:aa:76:86:f3:fb:46:69:49:
                    34:c6:93:83:4e:a0:26:93:83:c6:de:ba:01:b4:0b:
                    6c:ee:bc:03:1f:1e:96:99:1a:a6:17:25:cc:ae:5c:
                    70:57:dd:eb:c3:6a:c6:49:07:48:f7:8d:cb:fa:dc:
                    47:e2:2a:c4:f5:7f:aa:4d:8f:85:67:de:41:cd:b5:
                    c6:c0:04:52:af:91:28:72:8f:3a:50:34:ce:5f:f3:
                    e8:4e:4c:98:4f:aa:9f:c8:d9:0b:8a:68:0f:65:06:
                    fc:51:9b:d9:3f:74:53:71:ba:0d:cd:f7:18:73:2a:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6A:63:42:42:BD:5F:69:6C:41:34:DB:22:77:F6:01:26:A3:15:A0
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:ff00:8800::/37

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:9e:f3:ea:09:b7:5b:7c:ba:15:9d:c5:cf:92:21:0f:cb:
         95:89:b3:b2:2f:63:8f:29:00:c2:87:05:51:21:c7:03:0d:4e:
         20:27:30:c1:ba:21:06:e9:00:bd:cb:77:0f:38:22:a5:8c:22:
         0b:e1:75:9b:dd:ea:f5:17:81:ef:76:73:1e:67:f1:af:34:7c:
         fb:b4:a7:9c:fe:31:9d:96:a2:62:40:aa:1e:f3:04:1f:b8:e3:
         7e:c6:37:6e:e3:1b:86:0f:a2:76:9e:52:d8:8a:63:68:d1:73:
         99:5f:76:f2:97:09:0c:d8:b1:d1:45:25:b7:6e:33:1d:4a:50:
         29:01:4a:e5:77:17:7d:7c:02:f9:4e:1d:93:ae:38:c3:2f:3a:
         ad:9e:21:20:ea:37:64:ca:e3:c1:f7:2f:83:00:ec:64:69:92:
         b5:90:56:df:39:f6:e7:67:4e:79:54:fb:86:0d:49:c3:74:c5:
         e7:2e:82:df:af:15:39:3f:54:47:bf:90:07:dc:77:db:ae:31:
         91:44:d8:33:83:cd:2b:ac:54:91:9c:af:10:c0:b9:a9:1e:80:
         04:93:fb:d2:cd:2a:f3:96:e1:53:69:83:46:b4:d3:d0:b1:9b:
         c7:78:d6:40:48:b0:cd:1e:60:9b:94:c8:b4:06:98:ab:fa:53:
         4e:4a:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----