Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tCqZeY3uKIdl2odUYjlRr38hYIc.roa
File:                     tCqZeY3uKIdl2odUYjlRr38hYIc.roa (raw, json)
Hash identifier:          MrH1AU7EeUj2SAjWM0l7DMrM9YrWl0BJ66J+toNNT0M=
Subject key identifier:   B4:2A:99:79:8D:EE:28:87:65:DA:87:54:62:39:51:AF:7F:21:60:87
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246CDA57C8B2CED69065B51FE4765B9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tCqZeY3uKIdl2odUYjlRr38hYIc.roa
Signing time:             Mon 02 Jan 2023 11:38:40 +0000
ROA not before:           Mon 02 Jan 2023 11:38:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202297
IP address blocks:        2a0c:9a40:8089::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:cd:a5:7c:8b:2c:ed:69:06:5b:51:fe:47:65:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b42a99798dee288765da8754623951af7f216087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:57:28:fe:42:2f:90:4c:cb:16:67:10:6c:
                    cc:5d:9b:87:19:39:8b:10:2f:58:4b:f1:42:ae:96:
                    1c:f6:11:aa:db:67:8e:e1:82:5a:3e:7b:3b:e0:ca:
                    e5:d2:d2:60:9e:0d:aa:7c:45:78:57:4d:50:c5:39:
                    f7:75:cc:84:a5:fb:6d:6c:06:e0:0c:3a:64:99:1e:
                    dc:d8:d6:1f:99:23:46:ec:85:1a:f6:a9:e0:80:51:
                    4a:5b:03:93:ee:71:73:8d:86:76:66:82:20:94:a4:
                    b4:ae:28:99:e6:ce:47:14:f9:32:ef:2a:ae:d0:2f:
                    46:0f:22:ad:79:bf:2a:75:4e:97:d9:09:12:58:e5:
                    3e:a6:6e:26:f3:74:b7:e6:e2:d9:50:85:ca:1d:d7:
                    6c:bd:b2:56:a7:f6:57:75:70:0d:ba:b7:c1:56:0a:
                    03:aa:00:a1:16:db:9a:e5:bc:82:a6:e4:6e:de:dd:
                    98:8e:8a:eb:14:a0:a3:f1:81:8a:cf:8c:c7:45:df:
                    aa:c8:ad:6b:7d:57:58:fc:64:02:88:b0:de:63:fb:
                    f7:19:e7:f2:76:27:33:92:56:76:e9:09:c9:73:bb:
                    7f:47:23:ab:50:52:49:4a:5e:cd:b3:e5:1d:8d:83:
                    71:e7:f0:b4:17:95:06:f0:87:1e:62:07:38:95:a6:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:99:79:8D:EE:28:87:65:DA:87:54:62:39:51:AF:7F:21:60:87
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tCqZeY3uKIdl2odUYjlRr38hYIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8089::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:03:d4:c1:88:c9:07:a3:ca:17:b3:96:c8:16:e7:3f:86:
         14:e5:7b:cd:41:b9:8a:b2:a5:d8:e9:6b:80:1b:68:c4:bf:bd:
         82:c1:7c:2c:1e:02:70:a8:c1:aa:ec:40:cc:43:eb:fb:87:69:
         86:87:03:13:98:12:01:5b:90:c2:55:d4:0b:95:4f:d6:d9:29:
         b6:77:ee:9f:1c:68:6d:48:74:1a:43:be:1b:09:a0:36:eb:c5:
         54:88:8f:e2:7d:ff:2e:43:98:1f:32:f3:9a:e3:8a:e6:81:cf:
         2c:5c:87:1d:c5:58:4a:af:f2:a9:d6:45:0f:54:eb:04:ee:c5:
         00:7a:af:4c:ab:b3:12:6a:b1:1f:1e:5e:2e:bd:a2:e0:87:b0:
         f0:73:f4:c9:84:e4:f1:44:1a:ed:ba:4a:36:93:2f:6c:01:b1:
         7c:5c:76:ec:3b:63:44:32:72:c5:3e:b5:8c:c0:93:67:4b:8d:
         91:04:45:75:f3:23:d5:b6:7a:b4:89:1a:8c:7b:c7:36:a7:d6:
         3b:78:5a:40:00:5c:53:14:30:a3:d7:84:52:8b:1b:be:70:cd:
         4a:db:60:b0:12:5d:1a:78:08:aa:ff:1f:69:c5:61:04:00:0c:
         86:4d:bf:65:8f:73:1b:46:7f:05:f9:8b:16:87:9b:a3:03:84:
         31:f7:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----