Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa
File:                     cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa (raw, json)
Hash identifier:          6nF7g19wfIWFzb7DnyNJP5SEo3uhpY95ePP5jAi4BN8=
Subject key identifier:   70:AD:15:73:AB:85:BC:B7:CB:3B:99:52:3C:79:5C:5F:FC:CA:8C:71
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246D79BD5AC6D221C665EF31035352A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa
Signing time:             Mon 02 Jan 2023 11:38:42 +0000
ROA not before:           Mon 02 Jan 2023 11:38:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208752
IP address blocks:        2a0c:9a40:81c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:d7:9b:d5:ac:6d:22:1c:66:5e:f3:10:35:35:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70ad1573ab85bcb7cb3b99523c795c5ffcca8c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:b0:c3:97:b0:8c:2f:20:79:9d:fa:b3:c0:
                    81:4d:36:0e:d4:10:6a:47:39:17:d7:82:07:69:f6:
                    b8:d4:35:2f:bd:0e:f4:01:78:cd:78:f5:ba:b5:17:
                    2d:49:81:01:1d:87:fd:f0:1e:11:42:24:59:11:53:
                    27:2c:af:18:5c:49:37:26:a0:7e:e1:15:5e:4c:03:
                    33:a7:30:51:21:35:be:fa:b1:86:c1:ba:cd:fd:df:
                    9a:d9:62:10:dd:f4:7f:d6:50:cd:b0:51:46:95:94:
                    42:c1:2e:3c:d3:30:fd:15:ef:3f:2c:dd:ab:2d:ff:
                    0d:e6:c5:11:f0:48:a0:97:8b:de:65:40:76:d6:c1:
                    8a:d4:73:40:e2:dd:82:8c:b0:3d:3a:e8:03:26:1a:
                    2d:dc:50:ea:d0:f6:fd:ae:3f:82:e3:bf:c9:66:11:
                    1d:70:05:49:b5:68:6a:29:42:1e:fb:1f:7a:63:ab:
                    62:c9:bd:ff:ae:a1:5f:19:18:0c:ed:2e:01:11:84:
                    a5:ca:02:ad:34:60:45:c9:f2:1b:0d:7b:dd:e2:74:
                    4b:02:ba:8d:6d:42:73:d2:dc:1e:01:cb:5e:e2:3b:
                    b3:b6:11:fe:60:e2:b9:a8:78:1b:01:e8:ee:23:70:
                    17:07:16:12:c9:c0:49:47:9d:f2:1d:ee:09:28:36:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:15:73:AB:85:BC:B7:CB:3B:99:52:3C:79:5C:5F:FC:CA:8C:71
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/cK0Vc6uFvLfLO5lSPHlcX_zKjHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:ec:5a:f4:da:9a:cb:10:6d:ca:c5:1b:b8:89:c0:72:f9:77:
         7d:1f:17:2d:1c:33:23:39:1c:f0:f7:16:d2:65:f9:42:86:dc:
         bc:39:47:15:70:26:68:fc:77:2e:34:0f:15:d0:0b:68:78:b6:
         b0:83:67:a1:06:33:ad:05:9e:6b:e2:f7:6f:45:3f:33:5b:68:
         85:e8:ef:5a:c6:9d:ab:b9:c0:95:42:57:aa:d7:69:3f:78:dc:
         8c:0d:b0:b1:12:52:ef:bd:17:6e:19:bb:40:c3:dd:f9:7d:df:
         20:99:48:39:8e:59:6f:a5:06:26:14:c7:52:b0:63:f7:97:18:
         8a:27:a8:c6:74:72:5d:3b:4b:79:04:e7:05:34:40:6d:e4:05:
         0d:a1:d2:b6:8b:d2:7f:24:bd:96:21:2b:fc:b9:3d:8e:7d:75:
         6c:65:89:cb:c4:8d:f0:4b:84:2e:61:4b:80:c0:03:ed:a1:9b:
         17:1d:5d:37:a9:c6:66:5d:2a:14:23:24:45:16:97:31:79:7d:
         c1:f2:40:4e:e0:cf:42:99:ad:9a:4f:2b:e4:d0:90:ff:84:aa:
         31:a9:a3:ad:0e:1a:1e:44:fc:03:af:de:10:bc:39:39:ee:d0:
         95:93:47:1a:42:ff:1a:f5:5d:2d:d2:f7:f2:a2:6f:5a:8b:98:
         3a:f8:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----