Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa
File:                     9gyCYboXRxf0wh5i8P2KIGc69p8.roa (raw, json)
Hash identifier:          iE2Z+05OIU4kuNqGV6VDuwuqVEt+0eLMh6odvyJCnRk=
Subject key identifier:   F6:0C:82:61:BA:17:47:17:F4:C2:1E:62:F0:FD:8A:20:67:3A:F6:9F
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246BF4AFAD84A254DFF2FA3C90B0D99
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa
Signing time:             Mon 02 Jan 2023 11:38:37 +0000
ROA not before:           Mon 02 Jan 2023 11:38:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41108
IP address blocks:        2a0c:9a40:8081::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:bf:4a:fa:d8:4a:25:4d:ff:2f:a3:c9:0b:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f60c8261ba174717f4c21e62f0fd8a20673af69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:ca:3e:12:99:6d:90:c1:5b:5d:ed:b1:7a:
                    ea:33:ea:39:ba:b5:15:fb:d5:88:58:12:b4:5f:b7:
                    c9:11:2c:4b:ee:af:2f:20:01:76:3e:05:62:ff:69:
                    cc:9d:01:ef:92:31:01:d5:2e:8b:4f:a0:0e:6c:22:
                    15:08:99:d9:57:0e:4a:11:bd:d8:14:70:65:3a:84:
                    ca:18:7f:c6:97:ab:fe:0f:4b:09:af:0b:85:94:54:
                    97:c2:c6:57:60:ed:82:a4:eb:f6:71:11:5d:83:c4:
                    c4:ae:f8:dd:c7:c2:91:bc:2c:96:b8:77:4f:2a:00:
                    4b:ac:55:70:a4:88:82:d8:97:83:a2:e4:e9:de:8a:
                    40:d1:ca:e9:c9:66:9e:ef:db:a0:d3:94:17:6b:55:
                    1a:61:f7:b1:a5:37:d8:1e:83:36:7a:cb:80:17:6e:
                    5f:9b:5e:fb:db:75:45:fb:8f:63:50:26:f5:7c:bd:
                    50:d3:58:96:63:8e:59:df:2c:91:66:7d:48:37:8a:
                    78:6b:81:e7:b2:0e:07:fa:28:d4:36:26:97:b2:a4:
                    d0:cd:6a:2c:8b:8c:74:93:86:7f:0c:53:46:ef:7d:
                    a0:71:ea:2b:d3:4a:85:d9:fb:1d:4a:b0:7e:05:97:
                    04:08:b3:62:95:86:37:34:6c:b6:5f:73:92:94:ed:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:82:61:BA:17:47:17:F4:C2:1E:62:F0:FD:8A:20:67:3A:F6:9F
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8081::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:ea:ae:0f:ca:30:ca:25:64:2c:4c:ed:5a:c6:22:12:53:28:
         7c:55:3f:52:24:73:1a:9a:aa:86:87:e7:cd:96:a1:0d:31:f9:
         7b:6e:6d:da:22:6a:0b:1f:e6:89:12:f6:d0:cd:5d:1e:c0:29:
         4d:64:77:61:6f:0f:cb:20:2e:71:86:fe:dc:cd:37:94:17:d1:
         bd:6a:d9:21:ca:be:fe:2e:c0:89:13:d9:05:68:b2:1c:84:6d:
         c6:de:d7:7f:57:b3:52:d4:8a:48:07:4c:f5:7f:f7:ed:3f:4a:
         14:b9:04:13:59:ec:c8:57:b1:88:81:78:50:60:d0:fe:13:1c:
         1d:83:f3:c1:07:a1:72:f4:45:98:3b:82:fb:47:93:55:95:a1:
         69:77:85:5f:04:2e:78:2d:64:c7:3d:55:6a:6a:da:72:f4:d7:
         96:9f:cb:84:28:fd:fa:7a:55:fe:36:80:ca:98:05:1c:06:b6:
         6f:cf:44:67:93:ed:d2:97:74:12:60:58:b2:72:cb:a0:50:58:
         5a:32:e8:d2:fb:92:01:a9:3d:59:a4:55:1f:42:0c:4a:1a:36:
         a6:0d:e7:5f:45:d4:17:9a:f2:cf:81:b6:f5:c1:e2:b6:f6:e8:
         16:43:8a:a5:d9:4e:19:f4:68:69:2f:01:a3:71:27:18:1c:6a:
         47:36:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----