Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa
File:                     ZzJvnekJBmrNo2hN835EqGTlEGs.roa (raw, json)
Hash identifier:          2A9KTNJDcPt0GnbP7FZvp8b/mBuLelgNzNykEv+4i2s=
Subject key identifier:   67:32:6F:9D:E9:09:06:6A:CD:A3:68:4D:F3:7E:44:A8:64:E5:10:6B
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       018AD5531850986BA9E7A125EB3DE9C68F0E
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa
Signing time:             Wed 27 Sep 2023 06:28:27 +0000
ROA not before:           Wed 27 Sep 2023 06:28:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137409
IP address blocks:        2a0e:d786::/32 maxlen: 32
                          2a0e:d785::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d5:53:18:50:98:6b:a9:e7:a1:25:eb:3d:e9:c6:8f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Sep 27 06:28:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67326f9de909066acda3684df37e44a864e5106b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:11:46:f2:eb:1a:14:0c:1a:b9:65:3d:f4:
                    7e:0e:3e:08:86:3c:9d:97:4a:3c:57:29:80:1f:c8:
                    0a:9b:28:15:49:b9:c3:54:44:d8:9d:5e:98:7e:04:
                    16:e9:51:05:4f:d4:f8:bc:c8:29:73:27:4d:c1:a3:
                    6a:aa:99:16:aa:fa:b5:d0:5b:ce:54:ed:be:81:f2:
                    a4:ff:3a:55:e2:b3:82:68:d0:d4:b6:87:cf:93:27:
                    d7:77:d4:78:69:cf:d9:6a:ba:bf:fd:34:e8:33:14:
                    6b:9f:cf:57:51:57:37:dc:5f:cc:4f:7c:a2:b4:ba:
                    c6:c5:aa:2b:de:b9:51:72:71:6e:ee:b4:fc:92:a0:
                    b2:6b:e2:ab:f5:a6:6f:15:e5:53:f5:94:bf:82:e6:
                    1d:f2:e5:d1:dd:08:60:bf:8a:28:c3:68:15:5e:e1:
                    32:c4:62:3e:0c:d5:ff:f8:15:d4:28:56:c2:a0:95:
                    dc:cd:25:2b:35:44:1a:3a:ca:c2:86:eb:30:a2:d1:
                    61:0c:aa:22:04:82:56:26:11:87:4d:52:cc:87:23:
                    3e:f3:3d:74:6c:cf:c0:92:ed:cd:db:99:a8:f2:e9:
                    7d:0b:39:aa:da:3c:af:39:c5:60:60:3e:09:86:4a:
                    d3:6f:4e:2a:ca:4e:bb:fd:00:b1:c5:58:73:ff:20:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:32:6F:9D:E9:09:06:6A:CD:A3:68:4D:F3:7E:44:A8:64:E5:10:6B
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:d785::-2a0e:d786:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:79:9f:e1:1b:48:76:ea:cd:23:01:f7:d0:66:47:56:7d:
         92:8a:e2:c9:a5:fc:14:42:c8:eb:55:24:08:4c:36:1d:48:aa:
         76:bf:35:a7:33:81:4d:62:b7:aa:dd:3e:d8:fd:21:af:7f:6f:
         ce:03:02:40:7a:e3:87:87:fc:5c:bf:d6:8d:bd:47:ad:e7:fa:
         5c:13:84:04:d8:78:e0:1b:20:95:1e:80:16:ed:f5:7c:48:9b:
         b3:9c:e6:3f:bc:69:f2:6a:e4:fc:ee:d0:f9:10:bd:d6:a7:86:
         a2:75:b8:da:d5:c7:da:c1:d5:3b:b8:79:61:f6:d6:3d:92:54:
         f7:7c:d5:10:d3:36:d0:63:61:9a:5c:f5:45:88:08:e2:66:d5:
         a0:a1:25:d5:67:3e:6c:15:93:06:cd:cd:04:f0:52:a7:ae:e9:
         35:a4:d2:df:76:1a:b8:28:27:7f:d7:80:48:78:b6:57:dd:ff:
         17:6a:c0:80:10:68:ed:03:45:95:9e:92:86:7e:26:a0:79:f3:
         4a:2b:b6:a5:57:a8:4a:72:6c:93:a0:28:d2:0e:11:e2:38:7a:
         b7:99:ec:3b:84:a8:b9:f5:0d:9b:6e:63:12:03:c0:f9:cd:b4:
         74:54:44:db:d5:ba:ca:be:6e:b0:2a:6b:98:06:0e:3d:b7:10:
         04:ac:b5:10
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYrVUxhQmGup56El6z3pxo8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwOTI3MDYyODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzMyNmY5ZGU5MDkwNjZhY2RhMzY4NGRmMzdlNDRhODY0ZTUxMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4RRvLrGhQMGrllPfR+Dj4Ihjyd
l0o8VymAH8gKmygVSbnDVETYnV6YfgQW6VEFT9T4vMgpcydNwaNqqpkWqvq10FvO
VO2+gfKk/zpV4rOCaNDUtofPkyfXd9R4ac/Zarq//TToMxRrn89XUVc33F/MT3yi
tLrGxaor3rlRcnFu7rT8kqCya+Kr9aZvFeVT9ZS/guYd8uXR3Qhgv4oow2gVXuEy
xGI+DNX/+BXUKFbCoJXczSUrNUQaOsrChuswotFhDKoiBIJWJhGHTVLMhyM+8z10
bM/Aku3N25mo8ul9Czmq2jyvOcVgYD4JhkrTb04qyk67/QCxxVhz/yCReQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFGcyb53pCQZqzaNoTfN+RKhk5RBrMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvWnpKdm5la0pCbXJObzJoTjgzNUVxR1RsRUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqDteF
AwUAKg7XhjANBgkqhkiG9w0BAQsFAAOCAQEATCV5n+EbSHbqzSMB99BmR1Z9kori
yaX8FELI61UkCEw2HUiqdr81pzOBTWK3qt0+2P0hr39vzgMCQHrjh4f8XL/Wjb1H
ref6XBOEBNh44BsglR6AFu31fEibs5zmP7xp8mrk/O7Q+RC91qeGonW42tXH2sHV
O7h5YfbWPZJU93zVENM20GNhmlz1RYgI4mbVoKEl1Wc+bBWTBs3NBPBSp67pNaTS
33YauCgnf9eASHi2V93/F2rAgBBo7QNFlZ6Shn4moHnzSiu2pVeoSnJsk6Ao0g4R
4jh6t5nsO4SoufUNm25jEgPA+c20dFRE29W6yr5usCprmAYOPbcQBKy1EA==
-----END CERTIFICATE-----