Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa
File:                     CakdyXfbVx9jCBfP4BfaUdy_gj8.roa (raw, json)
Hash identifier:          WYvamGf5UgYq4NLmFkI9GjpO6L0fISNLFqEUbfp8dK4=
Subject key identifier:   09:A9:1D:C9:77:DB:57:1F:63:08:17:CF:E0:17:DA:51:DC:BF:82:3F
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01878A42BBC10B21D8E456F4E76D906A216B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa
Signing time:             Sun 16 Apr 2023 13:30:41 +0000
ROA not before:           Sun 16 Apr 2023 13:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199266
IP address blocks:        2a0c:9a40:8c40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8a:42:bb:c1:0b:21:d8:e4:56:f4:e7:6d:90:6a:21:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Apr 16 13:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09a91dc977db571f630817cfe017da51dcbf823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:fd:1f:f8:a2:63:c3:f4:af:fb:a0:65:ba:
                    b5:4a:88:51:b2:f3:16:6c:98:d1:3c:f7:ac:59:10:
                    48:a1:24:c4:05:26:4e:5f:bc:2d:6f:45:ce:b5:be:
                    b9:8d:02:45:2b:90:fe:58:96:f8:07:0e:7e:95:95:
                    e6:8d:21:93:5d:72:fc:e0:bc:de:f3:68:ff:6f:cc:
                    23:f9:4f:0f:35:7c:83:f0:02:d1:3d:0f:f1:a5:d6:
                    ae:43:3e:e1:f0:b2:1a:35:7c:33:39:5c:34:70:15:
                    94:71:c3:8a:f0:c3:75:c1:84:8e:f5:20:af:72:a0:
                    f8:70:f8:55:58:1a:8a:52:91:84:8d:14:08:88:18:
                    b8:f8:e6:0d:fb:66:9f:2b:a7:e3:0d:e0:5d:ea:18:
                    fb:d3:a8:35:f1:8d:12:30:e1:b1:92:7b:54:e9:7c:
                    66:c1:b7:c0:3e:bf:16:84:7d:8a:8b:bb:f3:0e:20:
                    bc:77:80:aa:07:a5:39:d4:7b:87:d4:9d:03:73:3d:
                    78:64:3f:af:1d:95:a1:53:7b:f8:34:79:74:01:31:
                    4c:ed:90:13:8a:7e:d3:de:01:c9:d3:e3:52:11:bb:
                    0e:2c:9e:f4:36:db:e3:fa:8a:dc:c7:ca:67:67:4a:
                    f2:f0:54:c8:00:6a:37:8f:59:c9:a0:06:57:40:ba:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A9:1D:C9:77:DB:57:1F:63:08:17:CF:E0:17:DA:51:DC:BF:82:3F
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CakdyXfbVx9jCBfP4BfaUdy_gj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:38:3e:0e:e9:a7:1e:bc:e9:97:11:5d:ae:21:a6:cb:20:
         d6:55:cf:1a:35:fc:b4:45:8a:72:7f:6c:e5:9c:81:05:68:5e:
         29:02:e1:be:f5:70:ec:29:02:e1:b5:18:2c:b0:af:27:57:5e:
         41:ef:ce:ec:94:f2:f5:b7:e8:97:8c:c0:1d:7f:a1:96:a5:aa:
         4f:88:c8:a8:56:52:31:65:03:c2:a9:04:4d:c4:2b:f6:6b:e3:
         33:56:5d:59:35:b9:65:a6:99:76:27:bf:81:a1:f6:59:47:4f:
         9f:e3:49:4b:db:88:cc:a8:cf:21:08:25:b7:c0:ed:0e:e7:ed:
         1d:5d:b3:64:45:37:52:81:7f:4e:07:b9:c9:6a:9a:f8:08:df:
         33:84:a5:7e:d5:c5:81:f7:08:e9:bd:df:d0:2f:69:56:db:69:
         09:20:18:fb:27:c1:b0:8a:31:0c:4c:4a:a2:45:e6:a1:f2:84:
         68:a3:1f:0e:92:4e:02:b0:07:71:03:db:f2:d3:eb:21:1b:b7:
         ac:31:35:49:68:67:ac:02:23:c8:dd:ca:2c:6b:b4:73:47:79:
         2a:dd:46:b5:cb:59:e7:c0:86:ee:b9:ba:46:80:9f:87:2d:e4:
         89:fa:99:fc:62:77:4a:f4:fb:c2:c2:3c:01:7c:36:91:b5:c1:
         db:07:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----