Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1vTQFShiY4ygEpEVwWBkProuruc.roa
File:                     1vTQFShiY4ygEpEVwWBkProuruc.roa (raw, json)
Hash identifier:          omUn9rLHij/DFfKX7c7d6X/NGabrZodirEWWy9cFlzA=
Subject key identifier:   D6:F4:D0:15:28:62:63:8C:A0:12:91:15:C1:60:64:3E:BA:2E:AE:E7
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246BD4FB3734C473096F802B72486A4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1vTQFShiY4ygEpEVwWBkProuruc.roa
Signing time:             Mon 02 Jan 2023 11:38:36 +0000
ROA not before:           Mon 02 Jan 2023 11:38:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13830
IP address blocks:        2a0c:9a40:8084::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:bd:4f:b3:73:4c:47:30:96:f8:02:b7:24:86:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6f4d0152862638ca0129115c160643eba2eaee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:02:04:78:f1:1b:7f:56:58:1e:30:9c:41:
                    8f:d3:bb:5c:b5:8f:c0:25:c5:f3:87:3c:c2:af:9b:
                    b8:81:ff:84:c3:f6:99:62:8f:82:26:43:bb:44:53:
                    18:82:47:5b:1e:03:a6:df:6d:80:32:86:e1:71:8b:
                    0c:b2:fa:e8:6f:be:d7:51:7f:e7:70:ba:0a:70:56:
                    4c:06:ee:d0:05:4a:4f:62:1f:c8:3a:8e:36:c8:94:
                    39:8e:a7:e7:db:9b:92:b7:75:4e:74:91:b4:cb:a2:
                    d7:cf:a9:3c:d7:1d:d2:7c:56:97:6e:d2:a8:a9:f6:
                    ee:e6:71:83:e7:a8:85:1f:d0:dc:31:16:b7:cb:57:
                    5d:45:8e:8d:f8:03:a9:f2:22:de:ed:b4:a7:57:4c:
                    34:3d:97:4e:49:01:dd:a0:2a:ca:9b:65:e5:8c:f9:
                    a9:80:8b:00:6b:b3:da:00:4c:cf:5a:c9:a4:22:53:
                    35:3f:47:d9:b6:6a:5a:2e:61:a7:48:dd:d1:78:1a:
                    2d:a8:6b:02:2f:a9:ad:05:13:ed:d2:1b:dd:46:79:
                    c8:3d:43:d4:74:c5:64:94:5e:f6:5b:34:53:64:95:
                    a1:93:42:63:c5:f2:b8:ea:6e:2a:75:b0:b8:7c:b3:
                    65:51:04:5a:28:3e:1e:46:70:91:7c:5c:64:7f:25:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F4:D0:15:28:62:63:8C:A0:12:91:15:C1:60:64:3E:BA:2E:AE:E7
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1vTQFShiY4ygEpEVwWBkProuruc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8084::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:73:f6:5a:04:6f:44:39:85:d4:dc:df:69:d9:72:95:61:7f:
         23:cd:7e:57:85:79:e2:52:b6:60:4e:47:0d:5b:22:83:89:58:
         21:cb:88:0a:28:a8:bd:66:ac:f3:be:01:34:11:f6:8d:01:1f:
         fd:48:5a:62:c8:cf:df:aa:df:96:fb:4f:d7:10:9d:67:bc:f9:
         2e:15:23:8d:a7:d1:be:33:74:c1:ec:fb:6e:05:1e:1d:55:55:
         c4:40:47:34:26:8c:4a:5b:9b:b9:f5:87:e1:e0:22:8d:e4:ec:
         b3:b3:1f:c9:76:95:47:50:d0:0f:f6:ed:af:f2:82:f4:53:e5:
         70:f5:fe:5d:b3:3e:88:2d:e0:72:8c:68:7d:87:e5:c9:bd:b5:
         87:7b:c5:26:93:29:9f:05:d4:10:13:e0:c2:6f:a3:d6:1c:fb:
         e7:12:d6:d9:92:84:bb:71:75:0d:18:5e:e9:b5:4b:09:19:0d:
         4c:af:65:6e:cc:ea:7e:db:b4:df:92:12:c6:01:7b:bc:fe:0d:
         5f:e9:b9:f8:57:cb:1f:f6:7f:86:ed:2e:34:27:80:97:be:9e:
         02:ae:ce:be:69:6b:12:04:5e:06:e2:ac:da:97:a4:d1:de:9e:
         55:cd:db:aa:b3:43:9f:f9:ca:c6:37:cf:a9:7e:bb:38:cb:28:
         bc:7b:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----