Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/9yId4gXgTKtUoc9e7SvkHvwuqLk.roa
File:                     9yId4gXgTKtUoc9e7SvkHvwuqLk.roa (raw, json)
Hash identifier:          tv+9yywq7HrqKqtZWdaLtD41OMLKPyYDWAS9y+0zL+A=
Subject key identifier:   F7:22:1D:E2:05:E0:4C:AB:54:A1:CF:5E:ED:2B:E4:1E:FC:2E:A8:B9
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       01856F42996A2DDF3040F6B86282EEE40694
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/9yId4gXgTKtUoc9e7SvkHvwuqLk.roa
Signing time:             Sun 01 Jan 2023 21:35:13 +0000
ROA not before:           Sun 01 Jan 2023 21:35:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14315
IP address blocks:        2a05:4140:600::/40 maxlen: 48
                          2a05:4140:19::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:99:6a:2d:df:30:40:f6:b8:62:82:ee:e4:06:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 21:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7221de205e04cab54a1cf5eed2be41efc2ea8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:0b:9f:d2:47:4c:60:47:95:07:27:ae:c8:
                    a6:3c:d2:dd:6f:7f:ff:2f:95:ba:03:52:8f:ee:f5:
                    44:28:6f:d0:36:09:73:bd:8f:43:a2:b8:90:81:67:
                    3e:25:9a:cd:9f:47:f7:ad:e8:58:23:d3:18:ad:2d:
                    d2:90:7e:f6:61:81:ba:bc:c4:c9:57:d0:9c:b1:58:
                    44:0c:06:4a:03:d0:a1:bd:0b:cb:ae:76:78:7f:e6:
                    98:8b:71:6c:e2:32:aa:43:17:83:72:16:3e:e3:a0:
                    58:9b:3b:a5:49:e2:9a:db:5d:30:5a:06:b0:66:36:
                    49:e2:6b:78:fb:4f:9a:f7:00:a3:46:35:b2:7c:fa:
                    28:a5:1d:52:2a:03:59:c7:87:5e:73:65:97:57:73:
                    7f:f1:4c:b1:f7:89:2f:9d:aa:e1:e4:ca:00:59:bb:
                    d7:1e:4f:84:38:16:b0:fa:e7:ab:bd:e3:08:72:6f:
                    9f:5b:7f:56:85:6f:ad:54:3f:8b:67:78:56:9e:c2:
                    18:70:3f:bc:c2:7d:09:4e:99:f3:36:bb:d6:3f:6d:
                    76:9a:66:53:30:75:be:e2:c0:aa:88:26:8e:27:7e:
                    23:ac:33:16:ee:93:d3:dd:1c:0a:05:c3:21:b3:8f:
                    17:96:7e:05:64:a0:9b:77:44:6f:34:3b:a4:14:e3:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:1D:E2:05:E0:4C:AB:54:A1:CF:5E:ED:2B:E4:1E:FC:2E:A8:B9
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/9yId4gXgTKtUoc9e7SvkHvwuqLk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:19::/48
                  2a05:4140:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:a9:58:e6:d5:33:7d:d2:00:b1:1b:dd:92:54:e7:14:b2:
         00:b7:99:11:08:56:25:bf:9e:23:0c:ef:37:c9:aa:3e:6f:40:
         29:dc:5f:4b:3c:80:94:61:7b:5b:af:59:78:d4:70:45:29:d8:
         2a:44:9e:33:c2:72:97:96:96:cb:46:e5:6b:01:ce:e1:17:f2:
         cd:31:df:ea:d0:00:d8:6b:b4:6f:e7:a3:63:c0:c6:a6:49:90:
         15:95:37:59:db:ee:b7:41:94:d2:b0:01:f7:b7:af:4b:49:a5:
         8d:ed:b5:1d:f4:17:d3:25:45:ce:45:23:5e:4c:9a:c3:1c:39:
         59:9e:f3:b8:70:76:9c:ab:4a:9c:83:49:b1:29:71:d0:81:d1:
         c6:38:99:81:54:e1:bb:1c:c9:4e:52:46:73:3d:93:58:40:a0:
         4c:3a:fc:b8:e2:0d:3a:b2:9f:0f:9f:b4:8d:3d:08:b2:6c:4b:
         f5:f7:34:c4:90:08:1c:2e:b2:84:8c:45:e3:ad:37:b4:6d:8f:
         be:3a:fd:a8:e5:41:f8:02:de:40:a4:db:9f:f1:b4:e9:67:7d:
         dc:b6:e9:2a:b9:72:a0:62:91:81:63:0a:5a:58:49:3a:cf:4a:
         6a:15:7c:d9:39:7c:30:62:04:6c:f1:e4:9e:8c:a7:9f:56:70:
         a5:94:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----