Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jQzqawrpEWkWECVCTS96pXc8mkI.roa
File:                     jQzqawrpEWkWECVCTS96pXc8mkI.roa (raw, json)
Hash identifier:          4JvGZM1RhyTrMjc7VCCE4VgMR3uf1UiByNwSTSrs3C0=
Subject key identifier:   8D:0C:EA:6B:0A:E9:11:69:16:10:25:42:4D:2F:7A:A5:77:3C:9A:42
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018C72CB7848FAFD633DCD3FB026FAE75D23
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jQzqawrpEWkWECVCTS96pXc8mkI.roa
Signing time:             Sat 16 Dec 2023 13:23:06 +0000
ROA not before:           Sat 16 Dec 2023 13:23:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40676
IP address blocks:        2a0c:9a40:9c10::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:72:cb:78:48:fa:fd:63:3d:cd:3f:b0:26:fa:e7:5d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Dec 16 13:23:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d0cea6b0ae91169161025424d2f7aa5773c9a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:ad:e2:6b:ea:3e:40:b1:d0:3a:e3:71:c6:
                    b1:4c:dd:3a:67:9a:a1:06:81:24:6b:45:55:7d:56:
                    0a:41:30:ca:39:e2:d1:dd:d7:ed:f0:af:05:39:b1:
                    72:19:db:ee:9c:56:50:f3:ce:a9:a4:2a:22:c5:f4:
                    12:8e:54:24:1e:2d:88:bb:8a:a9:c1:9f:54:8f:3e:
                    5b:22:d0:ce:20:e4:af:eb:ef:79:3b:4e:12:00:5c:
                    e0:58:32:d7:59:f4:7e:52:b9:6a:08:de:1c:1f:47:
                    36:e3:81:f0:f0:3e:be:09:00:62:1a:76:27:69:1a:
                    f1:35:ec:f6:26:d9:8e:86:fc:6c:e8:27:35:7f:b4:
                    61:54:46:1e:c2:5a:db:62:b1:ca:84:10:95:9e:1a:
                    f6:c7:74:73:1c:15:32:e8:d6:8c:ec:db:5f:bc:28:
                    43:61:1f:f5:6a:20:90:ed:7d:77:55:54:d4:95:fa:
                    ca:ba:e3:a4:4f:f4:7b:c5:c7:65:3c:c2:75:77:15:
                    fe:ce:33:ad:44:8b:5c:86:8c:87:ed:7c:4b:82:ad:
                    ee:dc:cf:bc:59:24:49:14:c1:02:54:2e:f7:64:60:
                    90:13:ce:02:6d:96:92:35:00:c4:87:c3:c8:a3:b4:
                    0d:03:80:c9:61:09:59:29:dc:d2:6a:4e:b4:03:d7:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:EA:6B:0A:E9:11:69:16:10:25:42:4D:2F:7A:A5:77:3C:9A:42
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jQzqawrpEWkWECVCTS96pXc8mkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:9c10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:93:d1:eb:27:e9:ac:3a:a5:2d:7e:78:14:d2:51:2d:83:
         e4:df:76:b0:56:1f:24:6e:fe:16:0a:18:18:3e:05:62:f4:d9:
         a3:13:f3:8a:dc:b5:6b:7c:c6:a2:e6:8e:1b:4b:7a:38:50:6b:
         4b:b9:36:39:43:d1:64:c6:28:17:66:bb:ca:96:4f:07:58:0e:
         64:41:3e:fc:dc:97:e9:d8:ab:21:db:bf:af:ce:ad:c5:a1:e5:
         49:d1:a8:f2:11:a7:ed:80:2e:06:75:cd:ae:25:55:d6:5b:13:
         7a:be:53:a8:ab:db:4e:c7:88:e6:65:76:83:c8:33:46:f3:b5:
         5c:9f:b9:8d:0b:3f:84:b4:b5:3e:8c:71:56:e6:55:69:de:de:
         d5:04:11:f8:a0:c7:0d:00:f3:53:10:5e:de:14:ca:56:04:db:
         21:19:f2:17:37:13:88:99:9c:08:8a:c4:b4:e2:55:77:ec:61:
         fa:16:8c:b5:ca:ca:be:64:7b:3c:a0:b6:e7:ae:85:ec:63:ad:
         98:ef:fb:aa:fa:ea:f4:4f:31:a6:15:38:37:77:b7:35:87:70:
         20:13:39:ec:e7:d7:84:cb:f5:e9:5a:2a:19:6d:34:e6:67:dd:
         05:b1:10:5d:e5:e1:35:32:ab:c5:25:a4:fc:97:9c:d6:23:c0:
         c5:78:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----