Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa
File:                     DePc2KHDEcpBERpWQ6iKkkPvadg.roa (raw, json)
Hash identifier:          adDWelg3oWmodhZbP6Q+w60OvojBIrlXB16p5C2XUv8=
Subject key identifier:   0D:E3:DC:D8:A1:C3:11:CA:41:11:1A:56:43:A8:8A:92:43:EF:69:D8
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018C104A6B59434DBB198A27319B062F3200
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa
Signing time:             Mon 27 Nov 2023 10:19:21 +0000
ROA not before:           Mon 27 Nov 2023 10:19:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134090
IP address blocks:        2a0c:9a40:8cb0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:10:4a:6b:59:43:4d:bb:19:8a:27:31:9b:06:2f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Nov 27 10:19:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0de3dcd8a1c311ca41111a5643a88a9243ef69d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:3d:57:9f:e6:57:a8:2b:3c:19:d1:bd:54:
                    ea:fe:d2:0e:14:38:c5:11:7d:a8:79:15:9d:10:21:
                    e1:45:71:8b:0e:a7:a6:77:b8:bd:9a:27:1b:02:f3:
                    1b:3e:73:76:e2:a4:7b:f2:e5:ae:50:c0:00:0e:e9:
                    3b:aa:b1:62:39:f2:76:cf:10:1b:0b:96:53:3b:64:
                    e4:a9:b7:26:17:2b:e9:9e:7d:5a:ae:8a:d6:d5:8e:
                    48:c3:2e:46:bc:52:6c:e0:5f:2e:58:e4:20:ec:fc:
                    28:16:c5:43:22:49:18:1c:80:d5:f4:33:fc:48:cd:
                    06:9d:a0:5a:ab:88:fb:01:b8:84:43:de:87:6f:6d:
                    ca:02:57:7e:8a:46:ca:80:fe:6d:d4:70:5d:88:1f:
                    0d:3b:bc:2c:aa:86:35:22:b1:17:b0:19:d5:08:c8:
                    7d:4a:b2:82:e3:b0:c2:30:d8:31:04:f8:cc:26:42:
                    06:73:d0:e2:2a:49:a3:32:c3:41:f6:c9:15:5c:bb:
                    97:a3:84:32:88:0b:95:58:a5:57:3d:a0:f2:6c:30:
                    1c:8d:42:27:eb:9e:05:8f:f0:d3:b6:46:04:b9:99:
                    5f:58:6d:2b:b3:95:4d:be:0b:21:22:ef:95:cb:c5:
                    87:e4:b6:ce:1b:54:d5:f0:1e:01:91:ec:33:99:9d:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E3:DC:D8:A1:C3:11:CA:41:11:1A:56:43:A8:8A:92:43:EF:69:D8
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8cb0::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:d8:3d:38:27:03:c9:69:63:ea:14:f6:ad:46:5d:25:7a:
         86:e7:87:e5:c0:f3:da:f3:c9:58:33:55:7e:83:4b:88:d1:39:
         31:9e:56:dc:9a:3a:f2:6c:6a:14:d7:d8:7f:64:d6:3c:70:b8:
         82:11:ee:73:ec:f2:d5:f7:02:16:21:dc:bc:81:ec:be:79:62:
         b8:a9:c3:f3:13:ee:82:a8:3c:65:6c:39:07:c9:ff:57:19:a7:
         48:00:55:d9:d4:75:45:34:a5:6f:38:2b:3c:20:30:03:f2:20:
         31:e0:47:b2:c7:14:36:2b:da:71:bd:c1:5d:a5:6e:0b:77:0d:
         2a:43:5d:7d:fd:3f:bf:b3:f4:61:45:de:78:b0:81:bf:aa:de:
         ab:55:d8:ec:54:4e:bc:a1:ff:c9:c0:88:7c:4b:21:03:a7:22:
         65:0a:6b:ac:a2:b6:3f:2b:d2:7d:3b:5e:bd:9b:7c:b5:cf:88:
         f5:0d:b9:81:d5:8d:85:91:d0:d3:20:cd:2f:3c:50:7d:4c:2e:
         16:45:90:6d:dd:a2:36:44:a7:db:e8:b6:d8:bd:16:57:51:50:
         1f:61:5d:b5:fc:ef:71:20:95:2d:ab:c7:c0:8f:b1:35:2e:21:
         4a:10:ee:c7:f2:43:43:3a:0d:30:0d:e4:fb:0e:1d:04:a9:c0:
         34:54:19:bf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYwQSmtZQ027GYonMZsGLzIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMxMTI3MTAxOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGUzZGNkOGExYzMxMWNhNDExMTFhNTY0M2E4OGE5MjQzZWY2OWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXU9V5/mV6grPBnRvVTq/tIOFDjF
EX2oeRWdECHhRXGLDqemd7i9micbAvMbPnN24qR78uWuUMAADuk7qrFiOfJ2zxAb
C5ZTO2TkqbcmFyvpnn1arorW1Y5Iwy5GvFJs4F8uWOQg7PwoFsVDIkkYHIDV9DP8
SM0GnaBaq4j7AbiEQ96Hb23KAld+ikbKgP5t1HBdiB8NO7wsqoY1IrEXsBnVCMh9
SrKC47DCMNgxBPjMJkIGc9DiKkmjMsNB9skVXLuXo4QyiAuVWKVXPaDybDAcjUIn
654Fj/DTtkYEuZlfWG0rs5VNvgshIu+Vy8WH5LbOG1TV8B4BkewzmZ2qSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA3j3NihwxHKQREaVkOoipJD72nYMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRGVQYzJLSERFY3BCRVJwV1E2aUtra1B2YWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIyw
MA0GCSqGSIb3DQEBCwUAA4IBAQA1x9g9OCcDyWlj6hT2rUZdJXqG54flwPPa88lY
M1V+g0uI0TkxnlbcmjrybGoU19h/ZNY8cLiCEe5z7PLV9wIWIdy8gey+eWK4qcPz
E+6CqDxlbDkHyf9XGadIAFXZ1HVFNKVvOCs8IDAD8iAx4EeyxxQ2K9pxvcFdpW4L
dw0qQ119/T+/s/RhRd54sIG/qt6rVdjsVE68of/JwIh8SyEDpyJlCmusorY/K9J9
O169m3y1z4j1DbmB1Y2FkdDTIM0vPFB9TC4WRZBt3aI2RKfb6LbYvRZXUVAfYV21
/O9xIJUtq8fAj7E1LiFKEO7H8kNDOg0wDeT7Dh0EqcA0VBm/
-----END CERTIFICATE-----