Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa
File:                     UmL3KwHwgzTuvBezJLVVIzlypPs.roa (raw, json)
Hash identifier:          hyXytY65sJ/RoUNCUM24umKZ88frzQLuuohRk/v+7w0=
Subject key identifier:   52:62:F7:2B:01:F0:83:34:EE:BC:17:B3:24:B5:55:23:39:72:A4:FB
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018A3B9F71A557E162B5440E7C576E1DFB5A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa
Signing time:             Mon 28 Aug 2023 10:10:19 +0000
ROA not before:           Mon 28 Aug 2023 10:10:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216393
IP address blocks:        2a0c:9a40:83c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3b:9f:71:a5:57:e1:62:b5:44:0e:7c:57:6e:1d:fb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Aug 28 10:10:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5262f72b01f08334eebc17b324b555233972a4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:eb:12:03:dd:a7:8b:dd:4a:38:2f:3d:82:
                    25:3a:72:38:1d:60:22:96:85:07:50:22:ae:f3:f5:
                    b0:33:b6:3f:15:f8:78:a1:3c:e5:d6:05:48:d4:ec:
                    a0:c7:aa:59:80:89:b6:90:04:5a:a7:28:b6:35:da:
                    e2:6c:9c:58:31:e6:7f:96:bd:37:36:f0:46:c4:71:
                    b9:27:f9:db:75:fa:cd:0f:20:d0:bf:91:09:35:b6:
                    1c:3b:c8:a7:d9:82:6c:dc:ab:9c:b4:8c:0c:58:fa:
                    c2:c1:1f:82:de:82:b6:79:ce:f4:21:c5:20:29:d2:
                    a2:84:ea:9d:17:03:fe:4a:93:44:f4:40:f9:be:c9:
                    c8:7a:f5:a1:41:53:cf:6b:70:4a:00:da:f8:cd:fb:
                    66:83:e2:37:a5:d3:e2:20:6d:b7:5e:bf:9d:6c:74:
                    c4:43:18:fe:62:0b:8f:99:91:ee:58:32:48:c3:af:
                    1f:8a:fd:cf:76:35:02:e7:ad:22:6d:1c:de:c3:07:
                    7a:23:df:94:f6:00:46:ce:3c:ec:19:a8:df:30:e1:
                    46:3b:4f:ea:85:f8:0d:83:1f:8e:56:94:90:92:97:
                    6a:df:8d:1f:ee:b9:57:aa:f7:10:69:69:ac:f5:f3:
                    e9:3a:71:7d:ac:b7:1d:38:8d:5a:a8:60:a2:d6:7f:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:F7:2B:01:F0:83:34:EE:BC:17:B3:24:B5:55:23:39:72:A4:FB
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UmL3KwHwgzTuvBezJLVVIzlypPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:83c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:59:93:f9:6d:ba:80:54:83:2e:20:a5:4a:9f:9c:40:24:ec:
         ba:80:40:0f:94:85:b7:3d:24:61:f3:5b:08:40:ae:c9:19:e3:
         f3:be:ae:75:e4:6b:6d:e8:6d:f1:f6:85:de:0b:7f:68:92:38:
         3b:26:6f:c0:69:a1:69:37:4a:db:3e:68:5a:37:bf:d2:66:57:
         95:e0:7d:31:ac:ae:7e:c1:69:e0:56:d3:66:18:5b:40:65:8a:
         01:91:0c:00:14:b8:80:e4:ce:a3:47:cc:e5:63:b5:9a:97:58:
         e6:60:fa:d4:20:01:4e:41:14:74:ad:52:22:f5:94:e8:86:96:
         27:a5:2d:8e:8e:96:0a:d7:db:a7:3e:64:24:88:66:60:53:8b:
         b2:4e:f4:90:97:ba:fb:61:e6:30:2b:3f:f1:b2:2e:dd:8a:1b:
         85:89:66:65:b8:67:ef:e9:4b:dc:39:98:74:a7:2b:56:5c:ca:
         4a:8a:01:2c:12:7b:90:69:56:93:fc:4b:60:ee:a4:fc:6c:4b:
         1b:4d:e2:ef:4a:1b:ec:fd:53:00:b0:1d:d1:d0:32:e2:7d:2c:
         23:57:08:3a:77:18:a0:7f:8d:7c:a3:dd:5d:88:16:d3:52:7f:
         72:9e:e0:65:fc:01:e8:7e:52:42:24:b3:87:fe:cc:e0:c1:50:
         9a:9f:6f:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYo7n3GlV+FitUQOfFduHftaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwODI4MTAxMDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjYyZjcyYjAxZjA4MzM0ZWViYzE3YjMyNGI1NTUyMzM5NzJhNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2zrEgPdp4vdSjgvPYIlOnI4HWAi
loUHUCKu8/WwM7Y/Ffh4oTzl1gVI1Oygx6pZgIm2kARapyi2NdribJxYMeZ/lr03
NvBGxHG5J/nbdfrNDyDQv5EJNbYcO8in2YJs3KuctIwMWPrCwR+C3oK2ec70IcUg
KdKihOqdFwP+SpNE9ED5vsnIevWhQVPPa3BKANr4zftmg+I3pdPiIG23Xr+dbHTE
Qxj+YguPmZHuWDJIw68fiv3PdjUC560ibRzewwd6I9+U9gBGzjzsGajfMOFGO0/q
hfgNgx+OVpSQkpdq340f7rlXqvcQaWms9fPpOnF9rLcdOI1aqGCi1n+3/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFJi9ysB8IM07rwXsyS1VSM5cqT7MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvVW1MM0t3SHdnelR1dkJlekpMVlZJemx5cFBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIPA
MA0GCSqGSIb3DQEBCwUAA4IBAQAJWZP5bbqAVIMuIKVKn5xAJOy6gEAPlIW3PSRh
81sIQK7JGePzvq515Gtt6G3x9oXeC39okjg7Jm/AaaFpN0rbPmhaN7/SZleV4H0x
rK5+wWngVtNmGFtAZYoBkQwAFLiA5M6jR8zlY7Wal1jmYPrUIAFOQRR0rVIi9ZTo
hpYnpS2OjpYK19unPmQkiGZgU4uyTvSQl7r7YeYwKz/xsi7dihuFiWZluGfv6Uvc
OZh0pytWXMpKigEsEnuQaVaT/Etg7qT8bEsbTeLvShvs/VMAsB3R0DLifSwjVwg6
dxigf418o91diBbTUn9ynuBl/AHoflJCJLOH/szgwVCan28D
-----END CERTIFICATE-----