Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9n1wRjQ7R4KHxEHjwxPfiIjBMOw.roa
File:                     9n1wRjQ7R4KHxEHjwxPfiIjBMOw.roa (raw, json)
Hash identifier:          MDwfxpAldKudotVNcshualu2Kxk4er7dmfWsPcscUD0=
Subject key identifier:   F6:7D:70:46:34:3B:47:82:87:C4:41:E3:C3:13:DF:88:88:C1:30:EC
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246CFACAA0F81EEF6D1C0F1FD142F91
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9n1wRjQ7R4KHxEHjwxPfiIjBMOw.roa
Signing time:             Mon 02 Jan 2023 11:38:41 +0000
ROA not before:           Mon 02 Jan 2023 11:38:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203062
IP address blocks:        2a0c:9a40:9100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:cf:ac:aa:0f:81:ee:f6:d1:c0:f1:fd:14:2f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f67d7046343b478287c441e3c313df8888c130ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:8f:02:a8:36:dc:3f:d5:10:37:a9:e8:09:
                    91:c1:e1:cc:07:7e:06:47:ca:39:e4:81:cd:57:12:
                    d8:23:d3:03:22:e5:b2:1e:95:71:a2:71:a6:ed:47:
                    b5:f0:cd:d5:9f:fe:b6:0b:cc:5d:07:43:38:7d:2a:
                    3b:4a:ff:4d:75:ee:da:37:5b:07:2d:fb:89:df:bf:
                    7e:9c:7a:20:46:f3:3c:34:57:2d:db:6a:78:3e:d5:
                    ff:c3:e9:11:e2:c0:e4:d2:cd:ad:ff:a3:13:8b:b7:
                    e9:e4:84:b4:8c:99:d9:b0:4c:23:f6:f2:f9:4b:80:
                    49:f2:e5:f6:c4:5a:aa:2c:66:fc:b8:ac:de:16:6e:
                    02:f7:b0:7a:58:87:cb:f5:54:31:10:53:a8:a3:8b:
                    dd:85:12:f0:86:d5:41:59:8f:03:98:7b:d0:34:31:
                    7b:38:44:fc:26:df:d5:e0:ae:00:8a:53:1f:83:e8:
                    3a:11:95:6b:91:70:83:f0:08:e1:0f:08:b3:be:42:
                    2e:c2:c8:83:8f:2d:a6:8f:f0:a7:ab:59:94:ab:96:
                    a2:02:df:6a:d6:12:86:03:2d:01:b3:04:84:fc:24:
                    83:8c:aa:c2:f8:ed:9b:09:f3:e9:43:29:c7:8a:a3:
                    6d:a0:47:e9:4f:78:d8:df:2b:61:bb:28:9d:d0:78:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:70:46:34:3B:47:82:87:C4:41:E3:C3:13:DF:88:88:C1:30:EC
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9n1wRjQ7R4KHxEHjwxPfiIjBMOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:13:c7:86:5e:5b:b8:54:4d:7e:db:85:9c:d1:8b:60:90:
         99:e9:cd:6b:28:a7:46:bd:d7:fc:b0:15:67:98:e8:c2:38:61:
         08:c2:42:2a:f7:71:59:67:ae:0a:75:f4:1c:9e:ce:31:3b:f0:
         95:b9:d0:a9:c2:d1:dd:bc:9e:db:c4:03:76:1d:c0:e8:6c:ed:
         76:a2:5d:75:31:c8:09:04:2a:a9:65:26:b1:9e:4b:da:2a:f8:
         36:59:fc:b9:76:1f:a3:73:3d:92:a8:a1:e9:a9:47:c1:1d:ed:
         17:66:02:16:67:ee:1a:14:3b:ae:33:59:74:e4:2e:97:f1:b8:
         e8:44:00:a9:78:1b:90:b6:d8:58:a8:ce:68:20:08:ed:39:a6:
         8c:e6:ce:6c:67:00:02:ef:01:df:db:ea:4d:0f:9d:27:fb:0d:
         0e:0a:f2:4c:fb:08:7a:74:81:3e:48:b2:fa:40:5b:94:a5:f5:
         ea:78:08:5c:29:ab:01:d2:49:24:95:3e:c7:a5:c4:e4:b8:e0:
         7e:9b:69:62:c0:ee:2d:88:52:85:4e:99:21:d9:a3:ee:e4:d6:
         67:8f:67:47:2c:7c:21:65:64:42:26:bb:1b:93:bd:1e:f0:95:
         d6:55:7f:a4:7e:2c:77:12:c3:f9:7f:16:16:c9:b2:d5:2e:0a:
         1c:28:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----