Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6X_isJq7tshDnbcgk7bxhHgRz1c.roa
File:                     6X_isJq7tshDnbcgk7bxhHgRz1c.roa (raw, json)
Hash identifier:          oTYvhNMKCRsce7/ktPW9zZyBcuv7giU/THxpmKHQwf8=
Subject key identifier:   E9:7F:E2:B0:9A:BB:B6:C8:43:9D:B7:20:93:B6:F1:84:78:11:CF:57
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018C032D2E3121EBBE9AA58051A220FD832E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6X_isJq7tshDnbcgk7bxhHgRz1c.roa
Signing time:             Fri 24 Nov 2023 21:12:21 +0000
ROA not before:           Fri 24 Nov 2023 21:12:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216052
IP address blocks:        2a0c:9a40:8480::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:03:2d:2e:31:21:eb:be:9a:a5:80:51:a2:20:fd:83:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Nov 24 21:12:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e97fe2b09abbb6c8439db72093b6f1847811cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:58:f8:94:dd:42:5f:e4:30:41:40:a4:be:
                    58:30:42:6e:fe:28:18:d6:d7:cb:fc:fb:fc:ef:b3:
                    b6:50:93:3e:18:d9:5c:55:4a:eb:95:c6:46:68:0c:
                    23:68:a3:91:a0:44:92:86:6c:7a:ca:b1:5a:bf:35:
                    db:dd:b4:1c:87:51:a0:ee:3d:a3:02:e6:a7:0b:85:
                    6b:88:39:42:eb:d0:ce:4f:c3:ae:a0:08:c7:98:42:
                    ff:21:22:64:68:87:66:4a:b9:af:f8:bc:74:e8:31:
                    ef:d8:28:de:5d:96:b5:e2:e0:07:95:5f:d0:a9:d4:
                    49:54:38:34:4a:78:39:ee:db:90:81:d4:a5:ff:6d:
                    45:e6:3d:5d:00:2d:5e:f8:0c:80:38:2c:26:80:46:
                    0f:bd:c9:6e:f5:ce:6a:ba:41:09:39:ef:ca:fc:04:
                    16:f1:d1:07:b7:4c:bc:eb:5d:b2:56:26:79:df:f3:
                    e1:39:32:dd:d0:9d:15:c4:6e:e9:d3:63:65:bb:cc:
                    bc:dc:d9:e8:42:00:13:ba:2e:d7:77:67:cb:b8:69:
                    99:e0:9b:64:61:bb:49:58:a3:ec:12:d4:2e:86:df:
                    3d:76:16:6a:18:25:9c:57:e3:dc:7f:1f:83:f1:e2:
                    91:66:6b:24:27:f0:54:0f:0e:d1:ae:7e:4f:59:57:
                    db:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7F:E2:B0:9A:BB:B6:C8:43:9D:B7:20:93:B6:F1:84:78:11:CF:57
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6X_isJq7tshDnbcgk7bxhHgRz1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8480::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:72:6c:c1:e9:38:ed:2a:f7:de:57:c5:8e:cb:07:db:20:
         bd:2c:e2:cb:fd:d0:49:85:d5:23:ac:6d:3b:f2:05:a0:f1:3f:
         cf:9c:e9:2a:1d:27:5e:ee:9a:e5:5a:37:bc:f8:eb:6f:78:3d:
         5f:23:1b:5c:41:90:b5:1f:31:25:66:81:29:53:2b:70:8e:58:
         e7:4e:56:bf:5d:9f:2a:43:b0:fd:cb:09:23:24:6e:43:fa:1e:
         02:f2:51:8f:4f:84:ee:b6:ec:b2:4e:c7:14:df:62:66:3f:c6:
         ea:ef:d3:3d:06:20:78:a3:34:ef:3c:98:dc:07:7b:9a:f8:b5:
         02:c9:28:ab:3c:dd:3f:88:e5:83:28:20:a9:89:e8:35:c0:f0:
         3b:8a:93:96:40:bf:91:82:66:c7:cd:9f:d0:0a:c3:58:eb:f8:
         3d:ce:ba:66:51:fd:25:ac:a6:8b:41:dd:19:d3:d9:f6:d8:12:
         36:87:4a:af:b0:81:29:59:e1:08:d7:f4:59:a0:57:18:9d:cc:
         ec:05:44:b1:d4:86:42:b5:e4:20:f5:ec:c6:eb:da:53:08:9a:
         38:4a:40:86:04:b9:f4:ec:11:e5:35:d7:eb:20:6c:a7:f4:73:
         b3:12:95:72:5c:03:90:af:3b:b6:19:78:50:de:53:38:5b:07:
         4e:e2:25:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYwDLS4xIeu+mqWAUaIg/YMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMxMTI0MjExMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTdmZTJiMDlhYmJiNmM4NDM5ZGI3MjA5M2I2ZjE4NDc4MTFjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBJY+JTdQl/kMEFApL5YMEJu/igY
1tfL/Pv877O2UJM+GNlcVUrrlcZGaAwjaKORoESShmx6yrFavzXb3bQch1Gg7j2j
AuanC4VriDlC69DOT8OuoAjHmEL/ISJkaIdmSrmv+Lx06DHv2CjeXZa14uAHlV/Q
qdRJVDg0Sng57tuQgdSl/21F5j1dAC1e+AyAOCwmgEYPvclu9c5qukEJOe/K/AQW
8dEHt0y8612yViZ53/PhOTLd0J0VxG7p02Nlu8y83NnoQgATui7Xd2fLuGmZ4Jtk
YbtJWKPsEtQuht89dhZqGCWcV+Pcfx+D8eKRZmskJ/BUDw7Rrn5PWVfbzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOl/4rCau7bIQ523IJO28YR4Ec9XMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvNlhfaXNKcTd0c2hEbmJjZ2s3YnhoSGdSejFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQISA
MA0GCSqGSIb3DQEBCwUAA4IBAQBQfXJswek47Sr33lfFjssH2yC9LOLL/dBJhdUj
rG078gWg8T/PnOkqHSde7prlWje8+OtveD1fIxtcQZC1HzElZoEpUytwjljnTla/
XZ8qQ7D9ywkjJG5D+h4C8lGPT4TutuyyTscU32JmP8bq79M9BiB4ozTvPJjcB3ua
+LUCySirPN0/iOWDKCCpieg1wPA7ipOWQL+RgmbHzZ/QCsNY6/g9zrpmUf0lrKaL
Qd0Z09n22BI2h0qvsIEpWeEI1/RZoFcYnczsBUSx1IZCteQg9ezG69pTCJo4SkCG
BLn07BHlNdfrIGyn9HOzEpVyXAOQrzu2GXhQ3lM4WwdO4iXh
-----END CERTIFICATE-----