Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Jpy_6cF2OgpDH3MFmN1J2r1oC2s.roa
File:                     Jpy_6cF2OgpDH3MFmN1J2r1oC2s.roa (raw, json)
Hash identifier:          1hiLgaxLrgcc2XLVaG3fg2JyxD066I2vl0FCZ17OEvo=
Subject key identifier:   26:9C:BF:E9:C1:76:3A:0A:43:1F:73:05:98:DD:49:DA:BD:68:0B:6B
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       01864598D0760B9BE32B79F632AFBE68CC7D
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Jpy_6cF2OgpDH3MFmN1J2r1oC2s.roa
Signing time:             Sun 12 Feb 2023 12:28:08 +0000
ROA not before:           Sun 12 Feb 2023 12:28:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12695
IP address blocks:        185.113.138.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:45:98:d0:76:0b:9b:e3:2b:79:f6:32:af:be:68:cc:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Feb 12 12:28:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=269cbfe9c1763a0a431f730598dd49dabd680b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:2b:c1:cc:ae:73:1c:ce:d2:73:3d:f1:c2:
                    06:4a:5a:0a:ef:74:a2:88:d6:e1:74:a3:55:0a:19:
                    d8:94:9f:80:b5:c6:db:5f:da:e8:05:be:5a:c4:6c:
                    0b:96:4d:96:18:84:0d:cc:29:a2:0e:67:e4:87:2a:
                    ab:03:3a:77:a7:36:a6:3f:68:0b:fd:92:8f:da:41:
                    d8:d4:6d:a2:f4:f1:45:26:3c:d8:d3:e2:6e:9b:be:
                    2f:a3:90:3a:e5:40:ae:89:de:d5:59:64:eb:69:92:
                    fc:e0:94:86:70:c6:e5:c3:9f:64:aa:93:a8:7d:fc:
                    9c:a7:8c:f0:74:7b:43:1c:8e:ca:c7:f2:e8:a3:f2:
                    76:76:4d:3a:17:ed:ec:d7:01:7c:05:aa:6f:82:f1:
                    48:b8:9b:8a:1d:ea:f3:fa:36:e4:45:b6:05:ee:a3:
                    a2:2d:dd:d9:49:d2:79:91:5f:3e:01:b0:f5:1d:88:
                    47:f0:e6:06:e2:99:29:f6:81:02:d4:f7:5b:5d:a4:
                    02:51:72:ca:d4:9c:f0:98:9c:af:4a:22:d2:70:68:
                    85:06:4d:07:9d:5a:47:13:34:ad:29:cb:a5:26:9b:
                    58:70:2b:09:99:a7:27:e5:b8:a5:02:ee:38:4e:95:
                    6c:d2:2c:0b:02:e1:96:e9:3b:c4:9f:2e:37:dc:d0:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:BF:E9:C1:76:3A:0A:43:1F:73:05:98:DD:49:DA:BD:68:0B:6B
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/Jpy_6cF2OgpDH3MFmN1J2r1oC2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:63:40:25:93:b3:69:60:a2:9f:81:ca:0b:b1:a3:43:69:
         7a:a0:61:21:5d:dd:71:ef:29:b3:57:82:8c:18:4e:fb:a7:31:
         03:66:1e:43:e6:be:5d:61:e1:9a:8e:63:ea:db:b6:b3:8c:84:
         89:19:68:da:e8:61:d2:58:4f:be:1d:28:be:27:f0:62:60:ff:
         3b:2e:cd:9c:2b:9d:ca:ec:34:ea:0c:dd:3f:eb:19:db:16:d4:
         f0:32:f0:cd:ef:fc:c0:42:42:a6:50:9a:ca:4d:89:08:6c:80:
         db:f2:db:08:fe:42:5a:a2:01:73:71:14:e8:5e:9d:98:cc:b6:
         6f:08:7e:4c:f2:62:be:f6:ca:98:bd:85:cb:43:a1:40:30:98:
         93:fa:9e:83:76:99:03:32:c0:9f:7e:30:99:d3:40:bd:74:71:
         c5:49:5f:aa:aa:af:94:07:2b:77:70:23:16:36:33:19:4b:e6:
         0a:49:60:cc:a7:5f:b3:64:6e:7a:93:d9:83:1d:fe:b0:08:1c:
         05:b0:c5:2b:aa:7a:7d:bd:f1:70:0b:5d:8c:2e:87:78:84:ed:
         94:68:5d:56:1b:1a:31:72:2b:23:81:a0:56:b4:66:24:84:47:
         95:c9:b8:f4:80:cf:26:1d:e3:c0:61:fe:54:0b:80:bb:2c:87:
         59:6d:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----