Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fjmaUDRZsMxL-S9h1WtM6uS2c8A.roa
File:                     fjmaUDRZsMxL-S9h1WtM6uS2c8A.roa (raw, json)
Hash identifier:          pj9bXWf9fNgEhMHu54L+cxq/2QLPgw2xtQGDzpFWtgc=
Subject key identifier:   7E:39:9A:50:34:59:B0:CC:4B:F9:2F:61:D5:6B:4C:EA:E4:B6:73:C0
Certificate issuer:       /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial:       0186DD4296A20C8FD0ED34509883A45C576A
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fjmaUDRZsMxL-S9h1WtM6uS2c8A.roa
Signing time:             Mon 13 Mar 2023 23:16:13 +0000
ROA not before:           Mon 13 Mar 2023 23:16:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50628
IP address blocks:        2a0e:d500::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dd:42:96:a2:0c:8f:d0:ed:34:50:98:83:a4:5c:57:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
        Validity
            Not Before: Mar 13 23:16:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e399a503459b0cc4bf92f61d56b4ceae4b673c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:fa:5a:68:ed:33:fe:5b:66:b3:83:3d:ef:
                    e2:9a:2e:91:1f:28:7b:46:ff:a3:2d:19:55:cd:aa:
                    b5:a8:17:ec:83:ce:b8:98:84:9d:3a:bc:c4:e9:ed:
                    51:91:48:71:7c:80:c1:65:af:66:c5:6f:d7:33:c2:
                    08:8d:ac:34:87:df:6e:4d:90:2e:0c:70:6c:cf:54:
                    0d:9d:bc:ce:21:db:52:0f:27:85:68:5f:db:2c:0b:
                    83:28:b9:d8:da:46:97:c5:bd:0e:f3:71:29:46:1f:
                    ca:b1:b1:c2:b0:57:c8:62:14:05:6b:e1:b8:5d:46:
                    44:44:00:4e:c7:a5:73:b1:51:9d:57:0b:14:16:a5:
                    2e:39:7f:49:6f:f7:84:01:45:94:5e:44:f4:46:02:
                    ec:e7:87:fc:92:b0:16:4c:94:c5:5f:f4:c3:96:e8:
                    76:a8:52:48:a9:5d:e0:91:30:de:a0:c7:39:a5:07:
                    62:09:7a:6f:ec:9a:c5:f3:75:10:48:3c:71:2b:d2:
                    9b:b7:26:6e:32:b2:25:95:4b:26:cc:de:88:f1:40:
                    fb:a6:4a:d9:53:38:05:84:44:95:9b:43:1c:7a:1e:
                    37:ba:43:08:e6:46:a7:78:ea:f4:04:4a:ac:21:cc:
                    b5:8e:0d:7a:46:e9:61:4f:88:f6:af:49:0b:74:67:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:9A:50:34:59:B0:CC:4B:F9:2F:61:D5:6B:4C:EA:E4:B6:73:C0
            X509v3 Authority Key Identifier:
                keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/fjmaUDRZsMxL-S9h1WtM6uS2c8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:d500::/29

    Signature Algorithm: sha256WithRSAEncryption
         77:93:b3:93:a5:87:f5:51:9d:82:79:fe:6d:6d:3b:88:1d:da:
         a5:ad:e1:7d:ad:3c:c9:0e:fb:ca:9c:38:31:01:8b:d8:73:5d:
         18:f7:a2:07:45:d0:ad:be:0f:5e:33:31:cd:24:c5:f7:b6:75:
         69:f5:4d:41:4f:fd:e2:aa:f8:b2:f5:1c:ff:06:6e:9d:bb:81:
         0c:8f:d2:64:15:ec:90:ed:35:83:79:31:5a:42:5b:61:c4:ca:
         ad:6f:0d:44:e1:dc:f0:8a:f9:2f:62:d7:25:06:e1:3c:06:79:
         a5:31:fc:01:bf:d7:a1:31:26:11:4e:0a:e2:bd:6a:43:ab:e7:
         d7:37:9a:cf:b3:42:b3:e0:ed:b1:e4:0f:0e:d3:79:80:d9:99:
         6f:61:00:02:56:33:dc:a6:44:13:cd:9f:16:47:f9:f6:0d:dd:
         e5:3c:ca:e4:0b:4b:e0:cf:f7:f6:11:f6:77:36:8b:d5:cb:f0:
         08:72:6d:97:e9:e0:0a:30:ba:61:27:91:e0:30:22:ab:95:c7:
         2e:50:88:54:ff:d0:e0:ff:59:72:0f:57:bb:83:9b:a3:8a:8a:
         5c:df:db:30:ae:37:b4:c7:d3:ea:bd:49:30:f5:15:2f:52:ed:
         dc:cf:e2:bb:31:83:9c:2b:a4:08:4a:78:0a:8a:57:5b:97:3b:
         95:ae:1f:99
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYbdQpaiDI/Q7TRQmIOkXFdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjMwMzEzMjMxNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTM5OWE1MDM0NTliMGNjNGJmOTJmNjFkNTZiNGNlYWU0YjY3M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hH6WmjtM/5bZrODPe/imi6RHyh7
Rv+jLRlVzaq1qBfsg864mISdOrzE6e1RkUhxfIDBZa9mxW/XM8IIjaw0h99uTZAu
DHBsz1QNnbzOIdtSDyeFaF/bLAuDKLnY2kaXxb0O83EpRh/KsbHCsFfIYhQFa+G4
XUZERABOx6VzsVGdVwsUFqUuOX9Jb/eEAUWUXkT0RgLs54f8krAWTJTFX/TDluh2
qFJIqV3gkTDeoMc5pQdiCXpv7JrF83UQSDxxK9KbtyZuMrIllUsmzN6I8UD7pkrZ
UzgFhESVm0Mceh43ukMI5kaneOr0BEqsIcy1jg16RulhT4j2r0kLdGcsIQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH45mlA0WbDMS/kvYdVrTOrktnPAMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvZmptYVVEUlpzTXhMLVM5aDFXdE02dVMyYzhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7VADAN
BgkqhkiG9w0BAQsFAAOCAQEAd5Ozk6WH9VGdgnn+bW07iB3apa3hfa08yQ77ypw4
MQGL2HNdGPeiB0XQrb4PXjMxzSTF97Z1afVNQU/94qr4svUc/wZunbuBDI/SZBXs
kO01g3kxWkJbYcTKrW8NROHc8Ir5L2LXJQbhPAZ5pTH8Ab/XoTEmEU4K4r1qQ6vn
1zeaz7NCs+DtseQPDtN5gNmZb2EAAlYz3KZEE82fFkf59g3d5TzK5AtL4M/39hH2
dzaL1cvwCHJtl+ngCjC6YSeR4DAiq5XHLlCIVP/Q4P9Zcg9Xu4Obo4qKXN/bMK43
tMfT6r1JMPUVL1Lt3M/iuzGDnCukCEp4CopXW5c7la4fmQ==
-----END CERTIFICATE-----