Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa
File:                     fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa (raw, json)
Hash identifier:          F961OPeN83Q4oeLbeSX16UHheJXeQx/W41IFU7IXOlA=
Subject key identifier:   7D:25:D6:5D:06:42:DC:EB:24:EC:99:25:ED:58:8E:A2:78:92:9F:F2
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       018A630B129D9D5D7F3286358746B5303DE5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa
Signing time:             Tue 05 Sep 2023 01:53:04 +0000
ROA not before:           Tue 05 Sep 2023 01:53:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51714
IP address blocks:        2a09:ff00:103::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:0b:12:9d:9d:5d:7f:32:86:35:87:46:b5:30:3d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Sep  5 01:53:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d25d65d0642dceb24ec9925ed588ea278929ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:d8:e6:eb:56:97:ab:9f:48:f8:bc:9b:75:
                    96:e9:96:65:98:e7:34:b8:0d:0d:80:c4:57:2b:8c:
                    08:7c:17:90:8f:88:f9:83:6a:cc:9b:52:8d:e0:ff:
                    f2:fd:e2:af:17:f6:88:02:5f:b1:d3:65:bb:6e:22:
                    96:86:32:2b:02:8e:dd:58:70:8f:f2:6d:0f:30:bf:
                    de:41:d1:07:dc:29:b1:9d:16:16:6a:81:3c:8e:3f:
                    85:f2:4c:59:ac:be:45:46:24:cd:18:1b:7a:55:3d:
                    18:9d:a2:ec:c3:55:d0:27:15:7f:5b:02:21:0f:04:
                    8a:8c:6c:7c:bc:33:df:1d:2a:c2:86:25:00:64:df:
                    97:71:a2:06:db:a8:e9:80:1f:8b:b9:2c:e2:b3:2c:
                    cc:8f:3a:4f:0e:8d:c4:e8:a7:4b:5e:cb:c0:82:11:
                    24:7f:18:ec:e3:82:93:5f:9a:c6:a7:e3:01:b2:1e:
                    9e:a4:a5:bd:86:d8:72:30:2f:7f:78:cd:bb:ea:51:
                    bb:7e:ba:4f:9c:ab:9d:5c:98:11:bb:9c:6d:dc:51:
                    1b:1d:e3:f1:2f:09:f0:cb:3f:ca:ea:a1:05:e9:70:
                    5d:79:ae:65:74:6f:af:3f:d4:86:7c:5b:e2:37:94:
                    32:d2:2b:4b:7e:1a:4b:35:ba:5b:7f:50:62:ad:53:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:D6:5D:06:42:DC:EB:24:EC:99:25:ED:58:8E:A2:78:92:9F:F2
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fSXWXQZC3Osk7Jkl7ViOoniSn_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:ff00:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:81:10:2d:ba:ad:af:e1:87:72:05:2f:ac:dc:3a:5a:ca:c2:
         ff:61:48:98:80:c8:7e:8b:4e:b8:f5:e8:c1:c0:d3:a7:51:b2:
         7a:37:21:48:89:f0:2a:e7:d8:4d:1c:cb:f0:ff:e3:b2:d2:93:
         a6:8f:da:8e:50:67:73:db:4a:ec:aa:4f:95:02:e0:8b:a2:19:
         90:ec:17:65:c8:bb:57:7f:27:c0:82:ab:3b:82:cd:34:c7:e6:
         c8:6e:06:98:7f:66:6f:97:0b:fc:9b:df:11:77:bc:1d:5d:11:
         75:38:0e:89:bd:bf:ed:dc:3b:5d:d4:2d:24:b4:e7:1f:2b:0c:
         c3:38:10:38:10:0d:ed:cc:6a:c4:33:60:fd:9e:d8:df:76:ad:
         95:52:b6:aa:b5:48:8a:0d:c2:d6:3a:f1:37:75:4d:29:38:bf:
         de:21:76:6f:ae:a3:8d:0d:42:87:ac:4c:0e:55:d2:78:16:a5:
         fc:1e:52:49:6d:f8:6a:13:cd:3b:97:c8:eb:99:ad:ba:47:a8:
         36:c3:79:9e:de:f6:e0:ae:8e:62:f4:01:87:08:ff:2e:62:a8:
         ba:87:d6:19:f9:38:bf:17:c9:ff:dd:52:92:7c:05:5f:aa:6e:
         61:7b:68:29:31:31:36:60:85:af:4f:75:57:77:59:6e:41:5d:
         f1:f0:01:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYpjCxKdnV1/MoY1h0a1MD3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwOTA1MDE1MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI1ZDY1ZDA2NDJkY2ViMjRlYzk5MjVlZDU4OGVhMjc4OTI5ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGzY5utWl6ufSPi8m3WW6ZZlmOc0
uA0NgMRXK4wIfBeQj4j5g2rMm1KN4P/y/eKvF/aIAl+x02W7biKWhjIrAo7dWHCP
8m0PML/eQdEH3CmxnRYWaoE8jj+F8kxZrL5FRiTNGBt6VT0YnaLsw1XQJxV/WwIh
DwSKjGx8vDPfHSrChiUAZN+XcaIG26jpgB+LuSzisyzMjzpPDo3E6KdLXsvAghEk
fxjs44KTX5rGp+MBsh6epKW9hthyMC9/eM276lG7frpPnKudXJgRu5xt3FEbHePx
Lwnwyz/K6qEF6XBdea5ldG+vP9SGfFviN5Qy0itLfhpLNbpbf1BirVOooQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH0l1l0GQtzrJOyZJe1YjqJ4kp/yMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvZlNYV1hRWkMzT3NrN0prbDdWaU9vbmlTbl9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgn/AAED
MA0GCSqGSIb3DQEBCwUAA4IBAQAzgRAtuq2v4YdyBS+s3DpaysL/YUiYgMh+i064
9ejBwNOnUbJ6NyFIifAq59hNHMvw/+Oy0pOmj9qOUGdz20rsqk+VAuCLohmQ7Bdl
yLtXfyfAgqs7gs00x+bIbgaYf2Zvlwv8m98Rd7wdXRF1OA6Jvb/t3Dtd1C0ktOcf
KwzDOBA4EA3tzGrEM2D9ntjfdq2VUraqtUiKDcLWOvE3dU0pOL/eIXZvrqONDUKH
rEwOVdJ4FqX8HlJJbfhqE807l8jrma26R6g2w3me3vbgro5i9AGHCP8uYqi6h9YZ
+Ti/F8n/3VKSfAVfqm5he2gpMTE2YIWvT3VXd1luQV3x8AFg
-----END CERTIFICATE-----