Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_xpYpx-LEo0dNIxkitUPy1ujoo.roa
File:                     Y_xpYpx-LEo0dNIxkitUPy1ujoo.roa (raw, json)
Hash identifier:          eakXJb/Vp/+yHjhB1ND+Beq7xZMJ1VEmYQ/dajBW8Ck=
Subject key identifier:   63:FC:69:62:9C:7E:2C:4A:34:74:D2:31:92:2B:54:3F:2D:6E:8E:8A
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246CD02FD641B861C335795F69F0D15
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_xpYpx-LEo0dNIxkitUPy1ujoo.roa
Signing time:             Mon 02 Jan 2023 11:38:40 +0000
ROA not before:           Mon 02 Jan 2023 11:38:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201325
IP address blocks:        2a0c:9a40:82b0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:cd:02:fd:64:1b:86:1c:33:57:95:f6:9f:0d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63fc69629c7e2c4a3474d231922b543f2d6e8e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:ff:9e:f8:66:e3:59:e5:2f:d1:fb:03:83:
                    1e:b3:97:cd:62:ad:bd:5e:57:48:bd:ba:7f:db:e9:
                    3b:16:84:e0:c5:86:2c:31:e6:96:36:12:84:db:a8:
                    70:3a:34:da:e5:1d:ba:3c:74:9a:77:d3:67:0e:39:
                    23:8c:cd:7d:d1:0a:c1:76:d6:c1:b8:4d:2e:38:ef:
                    1d:b3:69:50:5f:73:8c:3b:e7:3f:e4:54:85:43:4b:
                    4f:f2:54:7d:c8:a8:37:84:94:34:0e:47:9f:ae:2a:
                    79:0c:49:3b:af:42:ee:f0:f7:4f:1a:64:4a:5f:71:
                    17:7a:23:9f:cd:df:db:d1:7d:f8:31:b2:9a:03:88:
                    a9:4d:52:d0:1b:f6:7e:52:43:04:31:f0:22:8b:42:
                    b6:83:be:23:f6:4b:56:72:2d:83:15:fe:eb:ce:fe:
                    1b:d7:8f:cf:6d:7a:8a:b1:0a:4d:9d:57:f3:76:df:
                    2c:8b:4d:23:72:35:bd:e6:a6:e5:39:6a:ad:f1:f8:
                    7a:ef:e6:15:96:7b:95:06:14:bc:99:90:0d:f2:b8:
                    17:20:8c:ca:05:de:56:cd:1a:a2:52:8e:f4:15:56:
                    11:74:d9:b8:39:56:05:0c:3a:bd:b5:8a:39:08:6b:
                    a6:bf:c6:cd:55:fa:8d:2c:1d:e0:53:a8:a5:70:81:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:69:62:9C:7E:2C:4A:34:74:D2:31:92:2B:54:3F:2D:6E:8E:8A
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Y_xpYpx-LEo0dNIxkitUPy1ujoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:82b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:18:7c:22:44:90:c1:c9:04:6a:8d:fb:2a:06:e2:41:32:
         40:09:10:db:50:80:b8:f5:da:aa:0f:51:8b:cb:80:8e:f8:80:
         1b:6c:0c:40:2c:c3:f8:4e:60:b1:3c:5c:ca:5b:b8:31:08:6e:
         c9:6e:f4:cd:cc:a7:d9:95:6d:cf:17:dd:5c:95:af:9f:dd:83:
         5f:7b:d7:86:49:3e:2d:e1:89:5b:cb:7c:5b:9b:25:7d:09:d9:
         6e:71:5b:e3:d4:74:8b:83:85:7e:db:19:a5:8e:f3:49:4a:6f:
         9f:35:cd:70:98:26:ae:ac:13:3c:6f:40:af:2c:14:5f:22:03:
         83:37:e5:d1:a3:2e:08:80:4e:ed:c5:08:67:f9:f4:a9:b1:ea:
         9e:ec:81:ef:a7:01:f1:4c:5c:28:29:96:f4:96:0d:ba:8f:de:
         1e:c4:9f:36:bd:9d:cb:88:88:91:4a:ff:19:5c:d1:86:91:64:
         99:df:08:59:91:9d:08:45:55:c9:ac:c7:e9:0c:87:08:db:d4:
         d1:f4:87:42:ed:f6:7d:87:ff:5d:9a:7a:b7:ba:b6:f7:9a:b2:
         ee:62:4b:37:ad:57:0d:cb:7d:62:83:f9:85:d7:02:ea:13:2c:
         eb:81:32:54:95:40:d3:d9:a5:9e:75:b8:db:20:fb:79:c5:ec:
         af:e0:62:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyRs0C/WQbhhwzV5X2nw0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwMTAyMTEzODQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2ZjNjk2MjljN2UyYzRhMzQ3NGQyMzE5MjJiNTQzZjJkNmU4ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTT/nvhm41nlL9H7A4Mes5fNYq29
XldIvbp/2+k7FoTgxYYsMeaWNhKE26hwOjTa5R26PHSad9NnDjkjjM190QrBdtbB
uE0uOO8ds2lQX3OMO+c/5FSFQ0tP8lR9yKg3hJQ0Dkefrip5DEk7r0Lu8PdPGmRK
X3EXeiOfzd/b0X34MbKaA4ipTVLQG/Z+UkMEMfAii0K2g74j9ktWci2DFf7rzv4b
14/PbXqKsQpNnVfzdt8si00jcjW95qblOWqt8fh67+YVlnuVBhS8mZAN8rgXIIzK
Bd5WzRqiUo70FVYRdNm4OVYFDDq9tYo5CGumv8bNVfqNLB3gU6ilcIERNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGP8aWKcfixKNHTSMZIrVD8tbo6KMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvWV94cFlweC1MRW8wZE5JeGtpdFVQeTF1am9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIKw
MA0GCSqGSIb3DQEBCwUAA4IBAQAL/hh8IkSQwckEao37KgbiQTJACRDbUIC49dqq
D1GLy4CO+IAbbAxALMP4TmCxPFzKW7gxCG7JbvTNzKfZlW3PF91cla+f3YNfe9eG
ST4t4Ylby3xbmyV9CdlucVvj1HSLg4V+2xmljvNJSm+fNc1wmCaurBM8b0CvLBRf
IgODN+XRoy4IgE7txQhn+fSpseqe7IHvpwHxTFwoKZb0lg26j94exJ82vZ3LiIiR
Sv8ZXNGGkWSZ3whZkZ0IRVXJrMfpDIcI29TR9IdC7fZ9h/9dmnq3urb3mrLuYks3
rVcNy31ig/mF1wLqEyzrgTJUlUDT2aWedbjbIPt5xeyv4GIE
-----END CERTIFICATE-----