Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa
File:                     zV2kVY6lCVMtk6951Qeu6v6v6aY.roa (raw, json)
Hash identifier:          7L9L+LWg1EUw7n5tpYIhBLSRptnmq+if1lODOCy5n9Y=
Subject key identifier:   CD:5D:A4:55:8E:A5:09:53:2D:93:AF:79:D5:07:AE:EA:FE:AF:E9:A6
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       01857246BCEA662CA8AAB7B444B4053765FE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa
Signing time:             Mon 02 Jan 2023 11:38:36 +0000
ROA not before:           Mon 02 Jan 2023 11:38:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7489
IP address blocks:        2a0c:9a40:8085::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:bc:ea:66:2c:a8:aa:b7:b4:44:b4:05:37:65:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 11:38:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd5da4558ea509532d93af79d507aeeafeafe9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:51:80:9b:84:e0:3f:8e:e7:a7:bd:0b:8a:
                    f2:d6:81:97:fe:19:ad:97:a5:5e:33:b0:23:5c:ba:
                    92:19:3a:d4:63:38:8d:0a:22:4d:e8:53:2b:ad:e4:
                    22:35:e2:f1:86:90:1b:39:ac:07:d5:46:dc:5c:64:
                    3f:a0:73:dc:9f:4f:81:6a:14:6c:e6:1e:58:01:56:
                    b9:33:3b:42:94:8c:41:1a:2c:b0:77:23:bf:d3:ca:
                    26:bb:b7:79:64:3c:a3:ae:b2:83:c4:ee:d7:f4:42:
                    2e:a1:0b:a0:83:18:51:59:d8:96:69:c0:e4:7d:e1:
                    a5:09:07:52:3a:63:38:a5:05:32:79:11:de:18:ec:
                    33:91:f0:3a:12:d3:fe:54:aa:a6:b7:be:af:7d:81:
                    a8:ad:2f:29:18:87:e5:6f:fd:93:95:0c:bc:66:30:
                    b3:cb:40:32:74:38:c2:e1:dd:c7:c3:82:bf:c7:ae:
                    4a:ca:59:88:84:10:e0:13:15:26:42:0e:c1:5b:70:
                    3b:e4:ac:23:c5:e7:04:07:85:41:82:77:53:77:b7:
                    54:3b:a0:d2:c3:39:45:70:35:13:fb:34:18:46:15:
                    9a:dc:56:3a:75:30:df:20:f1:c7:57:3d:bc:d5:8a:
                    a1:73:07:db:c9:0c:42:d3:b1:c7:4d:27:62:40:45:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:A4:55:8E:A5:09:53:2D:93:AF:79:D5:07:AE:EA:FE:AF:E9:A6
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8085::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:d7:00:d5:1e:cf:a8:cc:93:a3:69:ce:17:f3:4d:75:37:22:
         15:4e:2e:36:ed:a8:1a:fa:8c:41:b2:23:d4:9f:b3:28:c6:74:
         4d:ae:dd:6c:4f:85:ce:2d:f7:4f:7a:f3:6f:51:26:3b:9c:37:
         86:84:7f:71:e7:61:53:4c:56:04:fb:77:aa:48:55:c7:92:38:
         fa:f8:53:64:6d:63:4a:c0:96:e5:74:a2:2b:59:8c:e5:12:b9:
         bf:54:84:29:10:ac:31:84:e7:29:33:80:54:c0:78:0c:0f:ae:
         fb:bb:df:bb:33:d4:5d:d8:5d:4b:8c:a2:47:9b:ce:84:37:6d:
         f5:6f:da:39:fd:20:48:a6:bd:94:3d:b0:32:52:e2:ad:55:19:
         a5:e1:c8:24:f0:40:a3:11:c9:1f:b1:c2:00:8a:f1:14:ff:8e:
         2d:a4:b8:fc:ab:32:c0:fc:d9:93:28:d7:4d:17:f3:73:3e:f7:
         f9:d4:70:5b:40:16:f4:d4:ba:6c:07:3d:3c:8a:34:4a:1f:9f:
         1d:1c:f5:fc:6a:71:88:fd:1e:23:47:22:4d:99:58:48:49:b0:
         26:6a:35:93:b8:52:d1:d1:bc:91:83:e0:d3:68:61:5e:69:c5:
         81:06:27:86:5b:e5:fe:e1:d8:28:ac:3d:2b:d8:26:1e:8a:6e:
         ef:82:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----