Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WeSRIP_pWwU2gATEYhG5OmYjOAw.roa
File:                     WeSRIP_pWwU2gATEYhG5OmYjOAw.roa (raw, json)
Hash identifier:          A+AorKWJSvdBq1hzpXfC9vBCUkhCpd9gcmQjOsLm8nA=
Subject key identifier:   59:E4:91:20:FF:E9:5B:05:36:80:04:C4:62:11:B9:3A:66:23:38:0C
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018C00E7D175BBF004FDB57C209E9BBAECE8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WeSRIP_pWwU2gATEYhG5OmYjOAw.roa
Signing time:             Fri 24 Nov 2023 10:37:21 +0000
ROA not before:           Fri 24 Nov 2023 10:37:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205329
IP address blocks:        2a0c:9a40:8440::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:e7:d1:75:bb:f0:04:fd:b5:7c:20:9e:9b:ba:ec:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Nov 24 10:37:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59e49120ffe95b05368004c46211b93a6623380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:2c:2a:51:3e:41:f2:6d:42:19:81:77:23:
                    44:39:3d:c7:d9:3a:0b:ee:89:aa:87:1a:c8:ef:36:
                    a7:44:fb:d0:16:cf:46:d1:93:05:06:27:18:17:e5:
                    1f:48:b0:31:68:31:ef:db:50:76:5b:1a:51:0e:6e:
                    a5:40:d6:ee:51:43:9c:0a:77:a0:a2:ca:38:ca:3d:
                    41:c1:77:7f:4c:9b:0f:0b:57:d2:f0:bb:3b:8d:54:
                    9e:18:d6:2e:98:8a:4e:8d:5d:b8:57:79:7b:87:7b:
                    47:73:28:8b:4c:64:12:ed:bb:ed:28:c9:bf:3a:05:
                    6f:cb:e3:7a:2d:28:f3:20:fd:71:2f:99:aa:2f:12:
                    b6:ab:95:75:46:1c:3b:67:c1:e8:f3:cb:4f:ce:b2:
                    1c:4e:a5:ba:82:81:78:ef:9f:10:d4:f2:fa:59:a4:
                    fb:b7:98:96:76:8b:5b:56:92:d1:8a:91:af:86:87:
                    46:9b:20:a3:59:81:55:42:83:fd:0d:d4:79:8d:09:
                    4b:cf:8b:9a:c4:08:79:7c:d4:51:0b:8f:e4:93:c3:
                    1d:52:57:ae:73:3d:3b:f5:0d:65:af:c6:61:08:eb:
                    b6:b5:ce:32:03:2f:1b:27:36:ce:75:fd:6b:c8:f7:
                    b8:68:03:7b:bd:01:c7:06:7b:37:68:37:e0:78:7c:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:91:20:FF:E9:5B:05:36:80:04:C4:62:11:B9:3A:66:23:38:0C
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WeSRIP_pWwU2gATEYhG5OmYjOAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8440::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:a9:f4:02:20:f7:a4:3c:71:ea:1d:88:14:00:d6:f2:33:
         16:af:2f:6a:f8:ef:36:08:74:9f:2d:4c:df:ed:af:ef:a1:c6:
         21:3e:10:15:a9:e8:be:aa:c7:e8:43:6e:d4:e3:24:0e:93:fe:
         72:91:4b:03:74:97:09:52:9f:32:78:e8:de:5b:2b:1b:2e:6e:
         c0:58:e9:bf:a0:0f:47:fe:ac:74:0d:21:87:56:da:1a:6d:b5:
         25:5e:91:fe:96:af:1f:d6:9e:19:5d:d8:03:42:fa:8c:2c:22:
         f1:c4:42:d1:d7:71:37:98:66:f4:56:ce:8f:f7:08:30:5d:18:
         5c:f7:d9:56:78:9b:6b:7b:92:7d:3c:fd:a0:22:e5:5a:3b:9f:
         24:3d:c2:1b:e9:78:ae:2b:98:02:d6:6d:40:ed:76:ff:df:3c:
         18:f3:95:85:c8:d6:64:a1:e5:7c:a1:ee:4f:6a:47:f4:f9:c2:
         b5:f0:6d:ce:b1:4f:6d:e5:64:b6:8f:22:cb:47:b6:9b:a4:fe:
         02:28:a9:65:ba:88:36:f3:10:4a:44:b8:f8:f0:2d:cc:77:bb:
         b1:32:4f:fa:f4:ef:d5:d3:2c:f1:fb:07:d4:76:0a:e9:74:a7:
         12:00:05:d0:d2:b4:3c:61:75:fb:ce:ca:10:35:9e:8c:24:55:
         3b:b7:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----