Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xF3I2PzRa--ziMjvXBFpgZEayns.roa
File:                     xF3I2PzRa--ziMjvXBFpgZEayns.roa (raw, json)
Hash identifier:          E6uG7pK3GdMfmb/uMfLWLHLqr1GF8MDhmgZJu+cztO0=
Subject key identifier:   C4:5D:C8:D8:FC:D1:6B:EF:B3:88:C8:EF:5C:11:69:81:91:1A:CA:7B
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246BC5C29C12DF2B64DAB30C54C2EBE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xF3I2PzRa--ziMjvXBFpgZEayns.roa
Signing time:             Mon 02 Jan 2023 11:38:36 +0000
ROA not before:           Mon 02 Jan 2023 11:38:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3280
IP address blocks:        2a0c:9a40:8086::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:bc:5c:29:c1:2d:f2:b6:4d:ab:30:c5:4c:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c45dc8d8fcd16befb388c8ef5c116981911aca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:e1:57:6a:f8:d4:0d:c9:88:a6:eb:98:01:
                    89:dc:4b:8f:dc:3d:5b:e4:79:be:68:92:55:44:f1:
                    9d:a3:34:78:dc:cb:59:7b:0f:c4:41:af:ab:0c:f7:
                    75:83:e0:b8:56:da:e7:55:83:2f:3d:1d:d9:50:29:
                    dc:c9:5e:7d:f5:3b:ab:d0:48:5c:84:af:50:75:de:
                    bd:11:26:64:1a:97:6c:f1:14:fa:88:55:ce:1e:01:
                    41:43:fe:79:77:cd:88:35:97:59:68:57:7a:e3:30:
                    da:86:64:a8:c0:4d:68:9b:02:35:7c:38:f5:59:b2:
                    cf:1a:f5:5c:16:49:4e:94:ea:f0:59:f3:72:0c:42:
                    f6:63:42:cb:78:5b:22:b8:03:49:c3:04:b3:43:65:
                    92:a9:86:4b:5e:f4:63:d1:ab:be:30:73:9a:db:fe:
                    fd:32:8a:99:f8:7a:9e:f1:b0:54:9b:b6:23:12:98:
                    4d:5a:90:3f:82:a7:6c:93:d2:79:57:cb:4f:e0:8f:
                    f7:ab:33:38:83:dd:be:22:16:bc:82:df:95:bd:66:
                    99:c6:37:94:e6:a2:e6:82:e8:c6:9a:66:e2:e3:ba:
                    f0:9c:02:37:3d:eb:ea:b8:e0:18:da:42:de:a7:33:
                    e4:d5:5f:ec:d5:91:48:e9:fa:28:62:9f:9d:2f:c7:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5D:C8:D8:FC:D1:6B:EF:B3:88:C8:EF:5C:11:69:81:91:1A:CA:7B
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xF3I2PzRa--ziMjvXBFpgZEayns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8086::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:c6:49:e5:99:48:bc:ac:e2:5a:de:39:3a:e3:5e:d6:f0:
         94:cd:7b:fe:5c:38:a1:83:bc:ef:0e:d5:ab:61:b3:3c:4b:ed:
         32:84:2c:b4:21:0a:e4:a2:32:45:29:5c:bf:dd:19:21:db:7b:
         5d:8f:ca:37:a0:d4:e2:a6:e1:e8:49:0c:71:cc:ab:4b:03:14:
         15:a2:34:a1:c2:a1:22:60:df:6b:f1:90:a0:87:dc:d3:65:27:
         32:82:c2:36:9d:96:68:46:35:8e:74:9a:6a:50:c7:d8:71:24:
         78:7c:38:de:c2:e8:35:77:18:68:90:fa:4b:1d:ec:bb:06:73:
         1e:a8:ed:96:2c:46:94:65:92:30:3e:40:aa:aa:5d:b3:e2:2c:
         1f:41:f1:1b:f4:41:fc:24:8c:00:c8:8f:10:e7:08:a7:94:51:
         3a:aa:b7:d4:d1:45:99:36:52:04:11:78:53:3f:40:1d:c2:c2:
         dd:7d:3d:07:00:4d:43:b5:b9:6f:38:e8:b8:c2:6b:89:16:49:
         41:aa:a0:5f:cd:d5:75:51:50:13:c5:d2:15:0e:1b:9e:75:90:
         99:b7:ae:ca:59:3f:e2:fc:d9:0d:32:52:13:d2:04:b0:10:31:
         6e:af:2c:66:96:a0:72:a6:37:16:a0:53:99:46:19:45:31:ea:
         15:20:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----