Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1VwyOqe484PL-25xKx_oV8o-C54.roa
File:                     1VwyOqe484PL-25xKx_oV8o-C54.roa (raw, json)
Hash identifier:          /jdcmWpY/+O1yR+UC0ePK0LZiS9EfYfl2s6INSGGd3k=
Subject key identifier:   D5:5C:32:3A:A7:B8:F3:83:CB:FB:6E:71:2B:1F:E8:57:CA:3E:0B:9E
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246D4AD27EC00BD1614535840CBB0DA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1VwyOqe484PL-25xKx_oV8o-C54.roa
Signing time:             Mon 02 Jan 2023 11:38:42 +0000
ROA not before:           Mon 02 Jan 2023 11:38:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207414
IP address blocks:        2a0c:9a40:8280::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:d4:ad:27:ec:00:bd:16:14:53:58:40:cb:b0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d55c323aa7b8f383cbfb6e712b1fe857ca3e0b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:56:79:b4:3f:cd:14:54:35:8f:21:fb:cd:
                    5b:e8:8b:2f:1e:6e:99:97:7a:a0:56:ba:48:bd:dd:
                    de:8c:20:8c:57:72:74:c1:b2:0b:ea:a8:86:79:57:
                    fb:b1:ef:b3:c0:c3:4f:a6:d0:12:57:25:9b:b9:ee:
                    56:e6:a5:da:cf:37:ce:d8:ba:fb:1f:75:ac:42:12:
                    e7:c2:2b:13:56:83:61:18:22:10:ae:95:e9:50:b0:
                    19:f1:fe:a0:ab:0b:cb:6b:1b:c7:25:25:b8:c7:57:
                    e3:c8:58:f0:08:92:39:ce:49:d3:50:f6:02:dc:95:
                    19:2d:d3:49:f9:18:f3:00:08:97:55:53:5b:84:94:
                    0b:6a:69:90:9d:78:65:1f:aa:e9:39:2e:3e:f2:2f:
                    e1:76:7a:f3:f8:8b:00:6c:f6:f0:80:4c:c6:d4:6c:
                    e7:4a:46:4d:c5:b7:0a:43:b8:4e:44:2a:4c:aa:a0:
                    80:21:e1:e4:2a:06:ab:ae:a3:5e:41:64:2c:0b:84:
                    87:5f:cb:ca:c8:62:b9:88:1b:b1:57:41:8a:40:31:
                    15:56:fb:67:81:3f:c9:fa:c2:03:3a:b4:00:d5:4d:
                    70:ce:bd:26:63:ff:a7:2f:23:e4:f4:fe:f5:bd:9a:
                    fa:48:fb:0e:d0:c5:2a:74:7c:52:e9:b5:42:2b:13:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5C:32:3A:A7:B8:F3:83:CB:FB:6E:71:2B:1F:E8:57:CA:3E:0B:9E
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1VwyOqe484PL-25xKx_oV8o-C54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8280::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:43:40:cb:06:10:bc:a3:8a:25:4c:d9:14:e2:51:76:2c:ff:
         e1:e9:4b:94:7c:50:15:93:a3:54:66:a7:f8:4d:71:6d:0c:b1:
         0b:bb:65:17:80:85:ec:b2:bb:77:d8:79:f0:24:d5:8b:de:79:
         fd:a5:ec:ea:53:3b:08:cf:8d:29:c3:10:82:55:7e:d1:a9:3e:
         9b:72:8e:c9:3e:90:f9:ed:2e:b2:c4:91:1a:81:31:40:22:70:
         5b:d8:50:6c:e2:d5:a6:46:7c:b1:29:25:e4:32:da:69:9a:f3:
         5d:17:e2:f4:e1:39:0d:f6:84:9a:29:4c:ac:25:74:96:e9:e0:
         62:1b:20:d6:b6:8f:24:97:13:5d:02:ef:a1:28:fd:3b:9b:c3:
         4a:0c:60:e5:d3:27:82:5d:a2:59:f9:f0:79:24:67:96:2b:27:
         84:8c:27:77:f3:fd:b2:51:93:a5:73:b4:cc:9c:9d:1d:8c:37:
         07:61:cc:50:02:bd:83:eb:00:b3:93:c0:a2:ab:67:69:30:8f:
         c6:4b:30:85:6e:1e:e8:f3:b2:ad:f2:a8:66:3c:e4:e6:b9:0f:
         43:34:7b:ce:49:23:41:49:6b:ce:be:3d:f3:cf:23:85:24:70:
         c9:96:3a:f7:f6:dc:a6:c4:85:35:54:fb:81:3a:f8:c0:a5:7b:
         59:5e:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----