Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa
File:                     coqhXyifF0Y5cFO4LNwfyISWZ9I.roa (raw, json)
Hash identifier:          DhCSjd20WkV5UQUHhJQdxhLTIJ6a8VR58UoDGmpOTjI=
Subject key identifier:   72:8A:A1:5F:28:9F:17:46:39:70:53:B8:2C:DC:1F:C8:84:96:67:D2
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018928034687BB70A68003943257D65EBF57
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa
Signing time:             Wed 05 Jul 2023 21:44:10 +0000
ROA not before:           Wed 05 Jul 2023 21:44:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197900
IP address blocks:        2a0c:9a40:80d0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:28:03:46:87:bb:70:a6:80:03:94:32:57:d6:5e:bf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jul  5 21:44:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=728aa15f289f1746397053b82cdc1fc8849667d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:ae:f1:9c:d1:c0:6c:8c:e3:32:c9:7d:b1:
                    fe:f6:30:76:d8:59:af:a7:65:92:fc:17:1e:49:a8:
                    64:ea:97:47:a1:de:ad:a5:8a:06:db:73:99:f0:bc:
                    7c:a7:65:b9:0b:67:7b:02:0e:30:1e:c2:5d:56:ce:
                    2c:8d:a8:b3:04:88:2c:b0:7b:66:cb:7f:7e:0e:c4:
                    e6:1f:b1:24:fd:bc:00:fc:2d:57:12:74:be:4f:8c:
                    76:fb:e4:a0:5f:03:9a:9d:67:fe:a6:d3:72:65:43:
                    00:04:99:84:78:0a:26:ff:71:23:bc:48:6c:34:6d:
                    41:cf:59:f7:75:e8:cd:f2:bb:e3:26:51:5b:6e:1f:
                    4e:54:49:da:43:ae:2a:fb:04:c3:c2:e0:7d:af:b5:
                    0e:32:98:72:92:d8:f6:37:14:a1:9b:09:03:49:c4:
                    d7:1d:42:28:ad:18:02:53:ff:ec:70:d0:6e:da:10:
                    16:3b:c2:31:31:7c:3a:c7:12:f1:53:2e:e8:d6:c0:
                    c3:ff:ca:e4:ad:33:69:f4:e4:06:56:71:b4:83:00:
                    39:2f:ed:61:66:d6:9c:bf:b3:90:a9:8f:b4:01:83:
                    b1:44:a3:65:fc:82:4a:1b:9f:7f:d8:06:65:70:d8:
                    ce:d1:23:3f:2d:49:f4:aa:fb:0f:7d:3c:e0:89:ac:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:A1:5F:28:9F:17:46:39:70:53:B8:2C:DC:1F:C8:84:96:67:D2
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:80d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:ed:67:f7:14:e5:f7:b4:df:96:1e:43:a8:4d:5e:12:0b:
         9a:fd:b2:d7:ff:64:92:80:c0:14:9d:69:5b:37:c6:92:7f:38:
         76:18:75:0e:c4:4d:e5:c0:4b:87:88:c3:33:d8:d5:72:c6:5f:
         ed:c9:88:c9:6e:b8:36:3a:80:f8:c4:dc:ee:6f:c8:92:81:95:
         36:06:2b:c6:6c:96:ba:7c:bd:50:1c:86:19:73:63:ce:7b:a2:
         db:54:a7:13:5d:fb:dc:53:a6:f4:8d:50:dc:97:e5:c3:06:cb:
         5d:e7:c3:1d:77:ad:27:10:b9:d7:32:ed:0b:99:c2:9a:3f:19:
         c4:d9:0b:36:50:0f:6d:6e:9d:fe:d2:46:8b:40:91:1a:ea:dc:
         16:e9:fe:05:b7:28:a5:b7:70:54:e6:ef:6d:71:f1:41:bc:5e:
         20:e0:6a:98:2c:7a:cf:41:5a:d6:5b:fa:97:3c:11:b0:66:d5:
         ad:d1:d1:aa:31:19:f9:b1:ae:7c:01:3e:64:4b:0a:af:ff:a9:
         62:32:52:38:3e:c2:ce:50:05:30:3b:c2:ae:80:62:2d:32:84:
         87:49:7b:37:2c:c7:73:ac:56:c3:2d:81:85:48:48:b0:76:aa:
         06:e3:d8:3c:63:b8:96:f6:e0:cf:56:58:56:de:24:3f:76:52:
         0f:2a:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----