Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa
File:                     Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa (raw, json)
Hash identifier:          87hI5TEXnCA9tlfHSIuEGC25ivT3AnOvA6BRYZAtpKc=
Subject key identifier:   67:FC:45:B5:DE:18:F3:C2:1D:E7:F0:4A:48:FA:B0:AE:AF:79:40:05
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01888ACCB799A6E51B6176F7E6EF78BF09B8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa
Signing time:             Mon 05 Jun 2023 09:04:12 +0000
ROA not before:           Mon 05 Jun 2023 09:04:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198510
IP address blocks:        2a0c:9a40:8c80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8a:cc:b7:99:a6:e5:1b:61:76:f7:e6:ef:78:bf:09:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jun  5 09:04:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67fc45b5de18f3c21de7f04a48fab0aeaf794005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:c8:9a:61:22:27:4f:b5:06:98:3f:e1:51:
                    64:6e:3d:68:1d:b4:2d:b3:17:ad:af:5f:53:da:f4:
                    2f:e9:ad:23:f7:30:92:13:78:c5:73:fa:6f:6c:46:
                    5c:03:26:f7:53:f7:74:0c:66:76:7c:45:98:e4:f5:
                    50:e1:cd:94:b1:16:8b:b1:55:11:b6:29:be:6f:e7:
                    81:af:b2:9b:2f:33:bd:e5:3d:e9:e0:58:72:14:96:
                    5b:92:4d:f2:43:be:39:12:a9:56:a4:14:39:07:90:
                    d7:bb:02:27:f9:02:ce:2d:91:3b:45:4e:99:b7:f4:
                    8c:1b:63:d1:6b:e1:9c:41:96:32:e5:76:7d:61:ab:
                    e1:32:bd:ba:72:be:d2:4b:85:15:70:c2:b3:2d:dd:
                    cd:be:26:20:e5:20:49:01:a5:77:a3:da:04:df:c0:
                    c8:37:e2:53:00:45:a5:2e:64:06:58:43:af:95:03:
                    53:f2:ac:39:d9:66:34:cd:b6:f2:cc:b6:48:b0:7f:
                    f7:ca:75:30:84:4c:f8:ee:de:14:4a:c2:4f:c9:fd:
                    37:d1:f7:3b:4f:91:1a:bb:0e:4d:15:86:5e:83:34:
                    b1:05:13:54:d4:8f:7c:e1:3f:5a:0a:14:80:f9:62:
                    6d:cb:b3:e9:10:e9:eb:f4:03:06:5d:84:86:72:6f:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FC:45:B5:DE:18:F3:C2:1D:E7:F0:4A:48:FA:B0:AE:AF:79:40:05
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Z_xFtd4Y88Id5_BKSPqwrq95QAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:20:ab:85:67:75:68:c3:8c:aa:54:52:41:ea:d6:31:ca:
         a5:c1:60:40:eb:34:15:fc:f4:79:8e:e6:89:c7:0f:c4:4a:16:
         4d:ae:ec:09:17:d3:ac:b8:b5:7c:ed:85:15:26:36:d0:ea:f1:
         c8:a3:19:7c:8e:b1:ac:93:5f:b1:a2:9d:1b:12:4f:2b:90:94:
         02:40:10:e5:27:6e:04:9f:8e:a7:2b:3e:fb:0d:a9:b6:65:c7:
         5e:10:d8:cc:cb:85:18:d0:05:8f:4a:75:18:20:12:11:a4:81:
         12:d9:8e:3a:ed:b6:7c:35:f7:a0:5c:b6:96:9e:36:d1:b6:16:
         8b:9b:7a:97:81:dd:98:07:ef:12:3b:a0:0b:50:06:04:09:16:
         a7:de:89:7a:c6:de:de:5a:4e:3f:ac:4a:d5:45:18:ba:da:64:
         4c:58:d9:b3:9f:b8:88:39:13:3a:1c:5d:fb:65:29:f8:fe:1b:
         38:2d:94:e8:25:03:97:a0:df:64:59:bf:42:d8:39:2c:0f:ee:
         68:5b:ff:60:bb:35:50:d2:ea:35:fc:d9:9c:86:96:38:df:5b:
         0a:21:ad:ab:7c:3d:87:dd:7c:71:df:c4:38:b1:51:21:d7:fb:
         79:c2:d4:ba:37:c3:8b:1d:88:aa:1f:f2:cf:84:e6:f9:0d:39:
         73:87:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----