Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa
File:                     1-Qjow2GFAer197fOzGPlheLkfjg.roa (raw, json)
Hash identifier:          zBpi2lKndDHsZalaCMl9TjYYn3ld1hNPWcnfBXnsFxA=
Subject key identifier:   F9:08:E8:C3:61:85:01:EA:F5:F7:B7:CE:CC:63:E5:85:E2:E4:7E:38
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246C403BE0461E18EB215C7A034C757
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa
Signing time:             Mon 02 Jan 2023 11:38:38 +0000
ROA not before:           Mon 02 Jan 2023 11:38:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51861
IP address blocks:        2a0c:9a40:80a3::/48 maxlen: 48
                          2a0c:9a40:80ae::/48 maxlen: 48
                          2a0c:9a40:80a9::/48 maxlen: 48
                          2a0c:9a40:80a4::/48 maxlen: 48
                          2a0c:9a40:80a7::/48 maxlen: 48
                          2a0c:9a40:80a2::/48 maxlen: 48
                          2a0c:9a40:80ad::/48 maxlen: 48
                          2a0c:9a40:80a0::/44 maxlen: 48
                          2a0c:9a40:80a8::/48 maxlen: 48
                          2a0c:9a40:80ab::/48 maxlen: 48
                          2a0c:9a40:80a6::/48 maxlen: 48
                          2a0c:9a40:80a1::/48 maxlen: 48
                          2a0c:9a40:80ac::/48 maxlen: 48
                          2a0c:9a40:80af::/48 maxlen: 48
                          2a0c:9a40:80aa::/48 maxlen: 48
                          2a0c:9a40:80a5::/48 maxlen: 48
                          2a0c:9a40:80a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:c4:03:be:04:61:e1:8e:b2:15:c7:a0:34:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f908e8c3618501eaf5f7b7cecc63e585e2e47e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:58:f9:53:35:e8:2d:8c:87:7b:4b:ad:28:
                    8c:a1:f5:86:c0:24:db:64:3c:da:b6:84:11:53:59:
                    8b:0e:5c:93:0f:06:1b:9c:c8:ed:a2:e2:ac:98:dc:
                    2d:a3:14:b9:18:d8:aa:57:7c:d6:e0:70:9e:e9:a2:
                    c9:bb:34:d6:8f:4f:e5:71:69:ad:f1:12:de:8d:26:
                    15:a9:ea:29:92:49:68:d5:04:2f:c3:8d:f2:b3:c8:
                    bf:eb:95:22:b2:37:45:b4:00:c8:e8:9f:95:d0:0c:
                    0f:1d:6e:7b:24:4a:a1:a1:19:1b:d1:95:39:74:a3:
                    fd:22:5e:08:5d:10:2f:53:0f:89:3b:1a:8d:37:cb:
                    05:65:b3:43:6a:6c:b2:cb:73:7d:92:f5:67:69:6b:
                    5a:ed:c2:7c:26:4b:8d:04:69:03:23:70:22:0b:50:
                    1b:bc:24:41:59:3f:3b:b1:c8:c5:c2:a5:ec:38:f7:
                    a4:30:6b:b7:2e:15:05:48:96:14:6a:d4:12:67:07:
                    f5:aa:21:b8:e1:fc:22:e2:e7:0d:a7:2a:84:f0:6f:
                    a2:87:89:32:79:f2:f1:14:b2:57:1c:f0:d8:bb:c0:
                    03:d7:75:dd:c3:8d:ec:13:ae:55:22:10:6e:c8:a4:
                    45:5f:f0:17:f3:9b:fa:63:ec:ae:26:c1:8c:0d:87:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:08:E8:C3:61:85:01:EA:F5:F7:B7:CE:CC:63:E5:85:E2:E4:7E:38
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1-Qjow2GFAer197fOzGPlheLkfjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:80a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:2b:12:a7:ad:57:fb:99:65:b1:96:03:69:25:20:c6:83:
         cc:49:3f:84:0c:d0:5e:fb:3c:bf:18:53:12:0b:6b:00:05:8a:
         f6:2b:a6:75:a5:6d:d2:95:d0:8a:59:c0:ca:6c:71:0f:a1:2e:
         a0:e3:91:61:f2:6e:5f:f0:c6:85:6a:0c:bb:6d:dd:f5:8e:31:
         57:db:7f:90:14:99:f5:db:ff:fe:9e:57:b2:3a:a6:3d:c5:13:
         ea:82:b2:bb:c9:be:47:c6:b6:86:a0:dd:49:06:56:c6:70:f6:
         89:72:17:29:b1:4a:7b:bc:08:5c:31:ed:68:df:6f:27:00:c1:
         74:59:76:33:2d:c4:21:c5:16:b8:cf:81:a9:84:a8:d2:e4:b4:
         da:23:8c:9c:0c:27:87:e8:e1:f1:f7:75:40:31:27:3d:d1:ba:
         ab:e3:3b:bd:fe:c9:6d:47:3d:0e:b6:99:f6:b0:59:0c:9b:82:
         1c:f9:69:2d:c1:9d:df:f0:d7:a7:d5:b1:4f:7c:a3:1e:02:1c:
         19:76:0e:ba:fd:dc:f4:ed:d4:dc:1b:e2:55:1b:08:e1:7d:2b:
         71:6e:82:cc:60:ee:0a:64:d5:19:d3:8d:05:17:dc:5b:0a:e8:
         b4:4b:db:ff:50:35:69:41:ca:9e:86:de:05:b8:a5:11:30:1b:
         63:53:33:5c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYVyRsQDvgRh4Y6yFcegNMdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwMTAyMTEzODM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTA4ZThjMzYxODUwMWVhZjVmN2I3Y2VjYzYzZTU4NWUyZTQ3ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo9Y+VM16C2Mh3tLrSiMofWGwCTb
ZDzatoQRU1mLDlyTDwYbnMjtouKsmNwtoxS5GNiqV3zW4HCe6aLJuzTWj0/lcWmt
8RLejSYVqeopkklo1QQvw43ys8i/65UisjdFtADI6J+V0AwPHW57JEqhoRkb0ZU5
dKP9Il4IXRAvUw+JOxqNN8sFZbNDamyyy3N9kvVnaWta7cJ8JkuNBGkDI3AiC1Ab
vCRBWT87scjFwqXsOPekMGu3LhUFSJYUatQSZwf1qiG44fwi4ucNpyqE8G+ih4ky
efLxFLJXHPDYu8AD13Xdw43sE65VIhBuyKRFX/AX85v6Y+yuJsGMDYfBEwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPkI6MNhhQHq9fe3zsxj5YXi5H44MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvMS1Ram93MkdGQWVyMTk3Zk96R1BsaGVMa2ZqZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDIvZjk2ZjczLTY2ODYtNDE2NC1iMjNmLWJmNGU1MjdiOWZh
OC8xL25wV2pZZjRyTEZLU1ltdWt4V3BscUJUa2dBZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMmkCA
oDANBgkqhkiG9w0BAQsFAAOCAQEAisYrEqetV/uZZbGWA2klIMaDzEk/hAzQXvs8
vxhTEgtrAAWK9iumdaVt0pXQilnAymxxD6EuoOORYfJuX/DGhWoMu23d9Y4xV9t/
kBSZ9dv//p5XsjqmPcUT6oKyu8m+R8a2hqDdSQZWxnD2iXIXKbFKe7wIXDHtaN9v
JwDBdFl2My3EIcUWuM+BqYSo0uS02iOMnAwnh+jh8fd1QDEnPdG6q+M7vf7JbUc9
DraZ9rBZDJuCHPlpLcGd3/DXp9WxT3yjHgIcGXYOuv3c9O3U3BviVRsI4X0rcW6C
zGDuCmTVGdONBRfcWwrotEvb/1A1aUHKnobeBbilETAbY1MzXA==
-----END CERTIFICATE-----