Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa
File:                     NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa (raw, json)
Hash identifier:          uDnLZzLYdg+vHQ/I/Yd2rUe9NG2SycdEmev6Ct6rD8Y=
Subject key identifier:   36:9B:98:4A:FA:30:F6:2D:8F:C1:DF:4E:B3:39:BB:B0:51:E3:D4:27
Certificate issuer:       /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial:       01856CCADD50A28B3C1FC03A995BEC28586E
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa
Signing time:             Sun 01 Jan 2023 10:05:12 +0000
ROA not before:           Sun 01 Jan 2023 10:05:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15626
IP address blocks:        2a05:9407::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:dd:50:a2:8b:3c:1f:c0:3a:99:5b:ec:28:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
        Validity
            Not Before: Jan  1 10:05:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=369b984afa30f62d8fc1df4eb339bbb051e3d427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:94:bc:f3:39:e8:cd:ac:26:e9:11:10:fa:
                    e7:af:a0:bc:23:56:df:23:92:87:b8:01:72:27:e3:
                    77:a7:44:41:c5:eb:3b:b1:33:c8:cb:61:c0:d9:37:
                    ad:bf:76:01:5d:44:bc:23:a4:a6:72:55:b0:45:59:
                    3d:bb:e2:f2:65:34:d0:c8:fe:32:0d:bd:b0:cc:df:
                    89:8d:7b:eb:f2:58:c9:56:bd:e7:41:6d:43:c5:79:
                    ca:97:4f:75:1d:81:83:25:c6:01:68:26:86:4b:6b:
                    12:85:df:44:96:fd:d1:c7:9e:bb:b0:f4:ff:71:08:
                    ed:7b:7e:2e:3f:34:c7:af:fb:82:e5:70:de:19:1b:
                    ad:d6:7b:24:d7:0c:f5:05:47:72:89:e1:3d:6e:96:
                    52:5b:59:4f:87:41:af:16:ac:90:95:fb:e4:4f:f4:
                    da:46:4b:67:44:f0:47:e7:f7:d1:ed:3f:82:27:2c:
                    fe:3f:5b:36:02:b4:54:25:94:11:88:db:e1:a6:b6:
                    59:f4:86:f5:57:8f:c0:25:f7:00:74:69:1b:8a:f4:
                    3b:d6:d9:92:c8:b5:29:d7:f2:65:55:bc:32:fa:42:
                    80:15:07:db:7e:e1:f1:69:94:b5:75:85:ff:67:e9:
                    e2:19:45:87:78:a1:e8:a3:22:9f:25:4b:e8:a9:9b:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9B:98:4A:FA:30:F6:2D:8F:C1:DF:4E:B3:39:BB:B0:51:E3:D4:27
            X509v3 Authority Key Identifier:
                keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/NpuYSvow9i2Pwd9Oszm7sFHj1Cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9407::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:26:c7:6e:38:3a:2c:9c:86:ef:74:a5:da:17:95:f1:f6:
         13:d8:51:ad:b8:18:d2:e3:4c:c6:b1:68:1d:74:d7:94:bf:7c:
         23:bd:79:c4:28:a1:25:74:a6:8d:cc:b9:d8:77:fe:9e:28:f7:
         c6:02:f8:f5:5e:85:6c:a0:a0:26:57:0f:d3:bb:1c:5a:e2:de:
         07:91:99:1f:16:68:7f:73:6a:cc:cf:51:b0:94:b3:6f:79:78:
         83:66:9b:5e:d3:6e:96:f1:c1:11:9b:28:e1:15:4a:87:f3:86:
         0e:fd:55:b7:c2:ff:0c:bb:6e:a9:fa:c0:5d:79:44:8f:60:3c:
         8e:7b:ce:59:14:54:7f:e1:cb:07:36:a0:c2:a1:61:b0:f4:63:
         e0:ad:ac:98:9d:15:3b:1e:89:94:cb:7e:0c:48:9f:2e:17:3d:
         a3:84:2e:ab:d2:ed:9f:05:d9:65:92:68:80:b1:8e:58:7a:ff:
         0a:87:fb:14:cc:49:ef:16:5a:4e:0c:e3:fe:b1:a6:e4:a2:b0:
         94:64:9e:51:0f:fe:df:db:99:61:f0:b7:98:6e:ca:30:df:fb:
         76:86:16:0d:80:7c:d3:f1:b3:dc:94:94:4f:87:7b:2a:23:10:
         85:13:4c:a2:81:e7:38:94:6e:b1:03:17:d5:02:b7:92:e8:77:
         cc:97:eb:8f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVsyt1Qoos8H8A6mVvsKFhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjMwMTAxMTAwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjliOTg0YWZhMzBmNjJkOGZjMWRmNGViMzM5YmJiMDUxZTNkNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpKUvPM56M2sJukREPrnr6C8I1bf
I5KHuAFyJ+N3p0RBxes7sTPIy2HA2Tetv3YBXUS8I6SmclWwRVk9u+LyZTTQyP4y
Db2wzN+JjXvr8ljJVr3nQW1DxXnKl091HYGDJcYBaCaGS2sShd9Elv3Rx567sPT/
cQjte34uPzTHr/uC5XDeGRut1nsk1wz1BUdyieE9bpZSW1lPh0GvFqyQlfvkT/Ta
RktnRPBH5/fR7T+CJyz+P1s2ArRUJZQRiNvhprZZ9Ib1V4/AJfcAdGkbivQ71tmS
yLUp1/JlVbwy+kKAFQfbfuHxaZS1dYX/Z+niGUWHeKHooyKfJUvoqZsreQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDabmEr6MPYtj8HfTrM5u7BR49QnMB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvTnB1WVN2b3c5aTJQd2Q5T3N6bTdzRkhqMUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgWUBzAN
BgkqhkiG9w0BAQsFAAOCAQEAOB4mx244Oiychu90pdoXlfH2E9hRrbgY0uNMxrFo
HXTXlL98I715xCihJXSmjcy52Hf+nij3xgL49V6FbKCgJlcP07scWuLeB5GZHxZo
f3NqzM9RsJSzb3l4g2abXtNulvHBEZso4RVKh/OGDv1Vt8L/DLtuqfrAXXlEj2A8
jnvOWRRUf+HLBzagwqFhsPRj4K2smJ0VOx6JlMt+DEifLhc9o4Quq9LtnwXZZZJo
gLGOWHr/Cof7FMxJ7xZaTgzj/rGm5KKwlGSeUQ/+39uZYfC3mG7KMN/7doYWDYB8
0/Gz3JSUT4d7KiMQhRNMooHnOJRusQMX1QK3kuh3zJfrjw==
-----END CERTIFICATE-----