Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/CNcAkm2GxZLItp_qPjYbQ1q-ads.roa
File:                     CNcAkm2GxZLItp_qPjYbQ1q-ads.roa (raw, json)
Hash identifier:          Ltm28edTtKzDHCKIv1zY2hwzWvSvPCZKdcQP5wOpONs=
Subject key identifier:   08:D7:00:92:6D:86:C5:92:C8:B6:9F:EA:3E:36:1B:43:5A:BE:69:DB
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       0188366A214E9CCA37B964D359907FC89BD0
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/CNcAkm2GxZLItp_qPjYbQ1q-ads.roa
Signing time:             Fri 19 May 2023 23:48:24 +0000
ROA not before:           Fri 19 May 2023 23:48:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59888
IP address blocks:        2a07:7600::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:36:6a:21:4e:9c:ca:37:b9:64:d3:59:90:7f:c8:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: May 19 23:48:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08d700926d86c592c8b69fea3e361b435abe69db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:69:30:df:82:0d:35:50:e2:77:f3:d2:42:
                    25:22:d0:8d:12:1f:ae:f8:ca:a0:91:0b:28:4f:52:
                    d0:a9:4e:66:12:6c:f7:fc:ca:44:f6:8b:cf:32:40:
                    96:f6:7c:d3:2b:4d:b5:2e:80:d0:d0:6c:33:da:6b:
                    c6:74:a2:b0:34:b9:27:4c:53:95:2f:af:a5:20:c7:
                    c1:15:2b:1b:70:53:ac:4f:5c:f7:de:94:3c:98:d1:
                    7b:e5:41:e4:03:a1:3c:8b:4d:8e:6d:fd:7d:11:66:
                    c8:58:84:8b:d0:c3:35:ca:e7:8c:9a:37:6c:4b:12:
                    40:f2:54:1e:ae:b5:26:6a:7e:69:17:7c:57:fe:27:
                    40:f1:51:15:28:67:38:56:5c:b7:21:c3:cf:b1:e5:
                    b1:26:8b:48:d0:15:78:1d:d3:97:11:30:d0:6a:87:
                    89:c6:84:e2:e8:d6:93:3f:9c:6d:fd:ac:89:c8:a9:
                    d4:b7:d0:f7:03:ce:b1:2a:91:3c:50:c6:41:55:a8:
                    78:77:80:a3:2e:e8:b1:16:00:a9:79:58:f7:67:30:
                    2b:2f:9a:25:c9:ed:16:42:94:4b:ea:f4:31:37:e1:
                    6a:31:4c:f8:a7:3f:d9:ec:f4:fb:2d:f9:79:bb:fb:
                    fd:e2:73:62:46:55:5a:b1:9f:11:b1:be:53:2b:ae:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:00:92:6D:86:C5:92:C8:B6:9F:EA:3E:36:1B:43:5A:BE:69:DB
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/CNcAkm2GxZLItp_qPjYbQ1q-ads.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:7600::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:e5:fc:6b:e4:52:56:92:ad:da:f5:e4:2b:29:c8:b6:b3:
         37:62:8f:6b:c7:23:36:17:16:dd:d2:61:5e:e7:c3:93:7e:a0:
         ac:07:d3:b5:b3:95:72:4b:15:3c:ef:ed:9b:f6:2e:12:dd:0d:
         e7:e6:3c:26:29:c0:05:da:b6:8e:eb:f9:e2:8c:16:ca:8a:1f:
         66:ca:ff:9d:0d:2e:cb:f8:90:ca:cd:22:6b:50:47:e6:f0:69:
         56:e7:4a:a7:17:ca:07:dd:f4:5f:eb:43:1b:da:54:32:d0:c0:
         58:43:f3:f8:85:ff:2d:2a:c0:0a:83:0c:35:dc:31:4c:81:78:
         fd:b3:70:9c:49:07:3d:8f:ce:6f:11:d0:b0:d2:35:59:de:a1:
         9e:4b:56:e9:23:e9:44:15:2c:be:59:b7:ef:c7:43:eb:cd:eb:
         34:16:11:c6:fe:55:37:25:91:85:e8:0a:86:74:0b:b2:d3:0a:
         95:1c:1b:af:78:47:61:5a:80:40:ed:ed:f2:fa:43:7f:6f:a5:
         b4:12:2d:04:c8:fe:25:d7:1b:d1:79:51:f8:3c:a5:84:c6:5c:
         b2:58:5a:4b:b5:bf:12:1e:39:a1:86:12:a3:16:20:9c:a6:50:
         c8:f0:0e:85:e8:ab:a8:fc:f1:f3:c9:4b:db:09:b6:e6:a6:8d:
         2b:de:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----