Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qm9sRh0laZ-AUB4h8VV4-A6rFWg.roa
File:                     qm9sRh0laZ-AUB4h8VV4-A6rFWg.roa (raw, json)
Hash identifier:          tCWVc6/mSXq+3iiDl1SHZAgckrFSsw8XORioY243iyE=
Subject key identifier:   AA:6F:6C:46:1D:25:69:9F:80:50:1E:21:F1:55:78:F8:0E:AB:15:68
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018C1B70D1B1AC98268BCA5A070C6879D764
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qm9sRh0laZ-AUB4h8VV4-A6rFWg.roa
Signing time:             Wed 29 Nov 2023 14:17:07 +0000
ROA not before:           Wed 29 Nov 2023 14:17:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9123
IP address blocks:        82.97.240.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1b:70:d1:b1:ac:98:26:8b:ca:5a:07:0c:68:79:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Nov 29 14:17:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa6f6c461d25699f80501e21f15578f80eab1568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:c4:25:b7:78:71:4c:15:e3:ce:68:9d:a0:
                    71:31:2f:dd:cd:3d:40:e9:17:81:9d:b8:53:c3:6b:
                    bb:54:db:16:b6:b1:bc:f9:22:a6:4d:02:b2:79:fd:
                    84:db:54:a0:f1:b5:c5:c5:41:a3:27:b0:57:36:9f:
                    d9:b3:a5:b8:16:73:66:71:93:57:26:42:ae:d9:58:
                    be:a5:66:da:a4:5b:86:14:d2:12:3f:21:55:57:e7:
                    90:59:b8:be:40:e8:93:e1:c3:7f:cb:3e:e1:7a:a8:
                    9a:18:5c:fb:53:66:d6:52:a0:bf:ba:83:e6:e8:1e:
                    ec:0e:a6:28:e8:56:45:9e:84:bc:3d:e4:ad:80:a4:
                    e6:f3:31:7b:18:2b:99:61:9a:7d:60:2b:66:ce:94:
                    5c:73:0f:d6:33:e5:ff:e8:92:e8:dd:a8:f5:bf:31:
                    eb:e7:aa:84:d3:8a:c9:9c:e4:98:45:94:78:36:8f:
                    fb:32:39:2b:c0:77:1c:4e:ce:b0:95:c4:a1:88:c5:
                    a7:29:b8:56:f8:8c:3f:11:1d:6f:0d:83:52:8c:87:
                    29:f5:e6:41:12:75:c9:31:6f:2c:cb:b1:fe:50:f6:
                    c5:51:9a:e5:be:6c:1f:8f:33:47:ed:16:8e:9e:5d:
                    a9:a7:87:af:cd:f9:1b:43:64:af:45:ba:66:92:f8:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:6C:46:1D:25:69:9F:80:50:1E:21:F1:55:78:F8:0E:AB:15:68
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/qm9sRh0laZ-AUB4h8VV4-A6rFWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.97.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:dd:90:42:ac:8a:0d:f5:51:ef:c3:75:53:5f:90:56:4c:
         86:51:69:04:a0:6a:06:4c:f4:01:71:55:be:8f:6f:50:3c:4d:
         e2:07:39:70:41:45:7e:61:f1:47:5e:0f:d4:58:a0:17:80:ca:
         b4:b9:9f:0f:56:1d:8d:34:fc:f5:32:85:84:42:88:2b:ea:ed:
         57:71:62:71:c7:6f:1d:74:4f:cf:47:16:a8:ea:db:24:43:2d:
         42:fb:fb:97:bc:4a:3f:38:4c:3e:68:ab:54:8e:87:47:55:a1:
         df:0a:ea:9c:69:51:c0:ab:04:58:e0:3f:9e:10:7f:a5:7b:49:
         2c:51:30:3e:19:da:68:4e:bb:b0:1e:f3:64:80:17:c6:40:7f:
         57:94:45:47:1a:50:55:1f:27:4d:29:db:8c:e4:cd:11:70:ae:
         a4:3d:c6:e6:39:39:65:e0:43:dc:2c:27:39:34:3d:a7:ea:c6:
         93:e2:eb:ac:6d:b0:01:53:31:77:18:41:ff:1a:e8:5c:9a:7a:
         18:74:b0:68:dc:9c:20:5d:31:eb:9b:78:33:1f:be:7e:96:ca:
         ce:2d:16:e5:28:de:8c:c2:5d:c9:26:d5:33:60:68:f3:26:92:
         9f:88:74:56:4f:77:82:8c:6e:fe:1e:d6:1e:56:ca:a1:2e:67:
         e5:a6:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----