Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa
File:                     m7xAeE_WXACmqneFO9v8nQrLQro.roa (raw, json)
Hash identifier:          Q0OoxIQJvKinrm8D5/toP8GCIrQc2dhhZRVwv2gPglQ=
Subject key identifier:   9B:BC:40:78:4F:D6:5C:00:A6:AA:77:85:3B:DB:FC:9D:0A:CB:42:BA
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246E3A726AA9A96607213C84C5F4B48
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa
Signing time:             Mon 02 Jan 2023 11:38:46 +0000
ROA not before:           Mon 02 Jan 2023 11:38:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211758
IP address blocks:        2a0c:9a40:8260::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:e3:a7:26:aa:9a:96:60:72:13:c8:4c:5f:4b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bbc40784fd65c00a6aa77853bdbfc9d0acb42ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:2f:dc:bf:40:3a:49:34:ab:9f:16:d6:53:
                    52:f2:64:1c:d6:b2:70:2a:fc:a3:b9:f7:09:20:0c:
                    8b:44:05:eb:c1:9c:37:b7:a3:32:d7:86:7b:6e:22:
                    6a:30:9d:83:20:17:03:22:4c:7d:6c:22:62:40:7a:
                    f5:5a:d2:a4:9e:c6:21:d3:dd:c0:bf:22:5a:fd:4b:
                    2f:f7:79:ad:9c:8b:34:98:18:82:16:71:5d:71:14:
                    8a:89:f0:1d:c4:1a:45:5b:de:c7:37:35:60:d8:e3:
                    05:29:0a:15:25:9a:ec:7d:c9:85:cc:09:22:2f:4b:
                    ca:07:ea:b5:8e:3f:ad:c9:c2:d8:ca:17:c6:7c:b6:
                    6a:dc:6b:89:ab:c8:39:e8:5b:be:73:55:94:7a:b2:
                    24:ff:fd:00:72:84:de:48:b5:c0:75:e4:d5:98:52:
                    63:f2:4c:da:20:24:35:3a:d0:39:1c:a8:bb:a8:f4:
                    df:6f:57:67:62:1d:d2:a2:c1:75:28:62:f5:98:56:
                    dd:23:07:d4:df:08:82:1f:60:d4:bc:8e:c4:c5:22:
                    a7:36:08:b3:8d:f4:5e:b5:3f:ec:2b:e8:41:2c:f6:
                    44:5b:35:fd:9b:49:c6:f0:6a:53:7c:3d:68:df:07:
                    9a:16:de:23:53:4e:9a:ea:a2:71:57:1d:d7:b4:cd:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:40:78:4F:D6:5C:00:A6:AA:77:85:3B:DB:FC:9D:0A:CB:42:BA
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:a3:84:9b:bf:cb:50:17:31:71:02:b5:6a:49:0b:73:0c:
         68:7c:b6:15:34:a3:96:3f:a7:7d:0b:47:36:1b:59:94:03:ec:
         75:88:8d:37:03:e0:72:37:b4:f3:54:4f:6e:ee:e2:b4:5c:34:
         0f:6d:a8:34:85:cb:7b:51:9c:f3:31:8c:36:0b:7e:48:3d:6f:
         09:a5:28:15:5a:01:32:cc:88:10:fc:32:df:8c:1a:bc:5f:5f:
         39:31:0b:a1:42:c4:eb:a6:2d:17:0a:14:70:06:5d:4f:b7:23:
         4d:cf:f9:b1:43:2c:57:22:ac:17:70:b1:39:e6:8a:c4:9d:20:
         e9:5e:87:dc:66:9e:23:4c:66:a4:74:f3:7f:9c:85:23:33:4d:
         5a:15:25:07:b8:6f:0d:9c:a2:cb:71:d8:21:3a:23:5d:6e:1c:
         77:a5:01:64:f3:b4:cc:30:97:f8:a6:97:65:aa:6d:a7:63:37:
         5f:b9:97:eb:1c:f9:10:bd:ed:4b:bc:2b:22:59:41:fa:0e:89:
         39:9e:3f:52:75:76:6f:91:fb:1a:b9:cc:d1:78:b6:d0:13:90:
         31:47:be:c4:f9:c8:09:e2:f2:bb:a9:48:f1:1c:1e:c7:e7:60:
         12:da:7c:5e:36:f7:69:94:f6:1d:0c:12:5e:dc:b2:a6:49:1e:
         6a:86:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----