Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa
File:                     KGTQvVoYVSpetphHagFrwS5-wE0.roa (raw, json)
Hash identifier:          4oryaOGna8oHJ6siYbu+vPBmIxLHfF+jzKSlCyTECuk=
Subject key identifier:   28:64:D0:BD:5A:18:55:2A:5E:B6:98:47:6A:01:6B:C1:2E:7E:C0:4D
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246DB311F77721A26F00CD6AA0C7BD2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa
Signing time:             Mon 02 Jan 2023 11:38:44 +0000
ROA not before:           Mon 02 Jan 2023 11:38:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210283
IP address blocks:        2a0c:9a40:8193::/48 maxlen: 48
                          2a0c:9a40:819e::/48 maxlen: 48
                          2a0c:9a40:8199::/48 maxlen: 48
                          2a0c:9a40:8194::/48 maxlen: 48
                          2a0c:9a40:8197::/48 maxlen: 48
                          2a0c:9a40:8192::/48 maxlen: 48
                          2a0c:9a40:819d::/48 maxlen: 48
                          2a0c:9a40:819b::/48 maxlen: 48
                          2a0c:9a40:8196::/48 maxlen: 48
                          2a0c:9a40:8191::/48 maxlen: 48
                          2a0c:9a40:819c::/48 maxlen: 48
                          2a0c:9a40:819f::/48 maxlen: 48
                          2a0c:9a40:819a::/48 maxlen: 48
                          2a0c:9a40:8190::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:db:31:1f:77:72:1a:26:f0:0c:d6:aa:0c:7b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2864d0bd5a18552a5eb698476a016bc12e7ec04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:7d:58:95:bd:d5:6c:eb:5b:4d:d6:6c:32:
                    09:54:5f:a1:db:f8:1a:d4:26:1e:0c:fa:56:84:2e:
                    20:97:4e:3c:a1:59:69:8d:3b:25:0b:e4:a8:38:0a:
                    f8:0c:cc:86:4a:c9:ae:d3:96:bf:3f:ee:f1:04:81:
                    67:76:a4:fc:bc:91:ce:95:f2:22:48:a4:5c:9a:f4:
                    08:1d:be:01:b8:f6:19:2a:84:55:3d:cf:4a:11:32:
                    56:71:6d:ff:c8:25:c3:0b:bb:2e:88:f5:fc:39:e0:
                    48:e3:4b:a8:2d:c8:3e:9f:8e:ff:78:b0:d6:4c:8c:
                    b5:fc:93:4b:e3:02:e9:7a:e9:be:30:c3:17:e5:34:
                    38:42:be:bf:d7:75:45:0f:d5:08:5d:0a:2c:97:4e:
                    3d:c1:15:92:30:43:a1:86:5a:63:37:ad:1a:ab:88:
                    44:f0:48:b5:3d:73:66:ee:61:a2:c9:a0:6b:96:23:
                    ad:74:c4:da:3e:41:5e:f5:61:5b:32:24:72:73:4d:
                    9e:f2:76:a3:97:83:53:f3:10:d3:97:5c:ac:49:a0:
                    b7:ff:e6:64:2c:75:ed:e9:36:13:2f:27:16:1b:ad:
                    4d:fe:04:2d:6b:15:01:53:7a:56:99:7a:97:60:10:
                    54:93:32:6c:91:ce:39:1a:dc:ff:1d:71:9e:e7:4e:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:D0:BD:5A:18:55:2A:5E:B6:98:47:6A:01:6B:C1:2E:7E:C0:4D
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8190::-2a0c:9a40:8194:ffff:ffff:ffff:ffff:ffff
                  2a0c:9a40:8196::/47
                  2a0c:9a40:8199::-2a0c:9a40:819f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:14:e7:60:59:9e:c9:0c:11:16:f3:7d:8d:c3:ea:9e:62:3b:
         ec:03:13:60:be:38:4b:12:3e:ce:66:60:3e:1f:2b:d1:bd:96:
         80:69:de:c5:08:29:c9:af:d2:f6:90:d4:1a:b5:d8:8a:ef:08:
         b5:93:d2:e4:32:de:ca:a9:5d:dd:cb:d8:ba:a9:e5:32:04:42:
         45:b4:d0:02:d9:5d:4b:23:12:42:8a:8c:7d:63:3e:c6:81:9c:
         3e:c8:fa:31:03:64:4c:ce:b2:8d:ef:61:8b:71:79:a8:48:cc:
         0e:29:36:80:f3:11:4e:0c:50:91:6e:19:4b:5a:8d:d0:8c:b3:
         a3:40:a5:e3:5b:f5:1a:e9:1a:69:a2:2c:16:11:e3:14:8e:19:
         4a:5b:88:b7:80:f5:88:bf:ea:30:36:a0:e8:79:52:6e:cc:e6:
         af:f0:45:d3:60:8d:0d:73:b3:16:5b:14:f5:8b:67:43:4a:31:
         ce:a1:0c:b4:42:b6:36:b4:2b:8a:8e:69:95:0a:9d:30:27:00:
         4e:1f:b7:ec:03:22:0a:73:0e:1c:f6:8d:5a:ee:2b:99:f1:c2:
         d1:13:4a:2e:ae:f5:37:3a:2e:26:3e:f3:6e:c3:ee:96:59:7c:
         c5:b8:6a:ce:85:57:58:af:30:9d:a9:33:72:21:8f:c5:b2:c6:
         2d:ca:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----