Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa
File:                     3MMu-5AGoqHJ2AgIGOazIryJ8go.roa (raw, json)
Hash identifier:          /272J3w3mhrXoMlqdnsveIA4HBeIp6LlW6H67xJZnfE=
Subject key identifier:   DC:C3:2E:FB:90:06:A2:A1:C9:D8:08:08:18:E6:B3:22:BC:89:F2:0A
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F3004085EB136AE044FE825BF5A4DCE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa
Signing time:             Sun 01 Jan 2023 21:14:55 +0000
ROA not before:           Sun 01 Jan 2023 21:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211035
IP address blocks:        2a0e:aa07:e023::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:04:08:5e:b1:36:ae:04:4f:e8:25:bf:5a:4d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dcc32efb9006a2a1c9d8080818e6b322bc89f20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:b7:17:cb:64:a8:50:ab:a6:48:9d:80:b9:
                    f0:00:75:cc:76:9f:85:22:56:e7:e4:c9:d0:69:47:
                    a7:ed:9b:39:59:3c:6f:65:76:05:f2:63:a3:89:ea:
                    04:c0:9f:7b:0b:fc:7b:48:f7:5b:fd:fa:f7:9e:96:
                    32:7b:1f:de:88:77:91:8c:35:63:b1:c2:6d:f0:1b:
                    17:93:04:25:4b:88:07:cb:d3:44:13:53:2a:76:e7:
                    d3:4e:a4:38:e2:07:56:c4:92:4c:17:16:5a:d0:25:
                    af:bd:0e:93:2e:71:0f:42:f3:6a:85:2e:2e:a5:8c:
                    95:c3:34:3b:0d:97:df:3d:97:83:65:fa:ca:1c:e5:
                    d5:4b:b2:62:de:56:75:c5:09:09:2e:95:27:c6:c1:
                    dd:0d:1d:fa:47:d9:b4:73:b3:b0:19:30:84:f5:2f:
                    bb:8a:fc:8e:18:39:28:2f:ea:55:ce:b3:84:bc:fc:
                    e6:f5:c9:75:10:90:04:3c:5b:41:2d:b5:01:af:3a:
                    10:b8:fd:be:b3:90:00:2e:7c:c9:9d:81:ef:6a:b9:
                    e7:d9:28:98:01:7b:c2:1c:8e:68:91:64:12:41:a8:
                    3c:4c:04:7e:e4:17:72:56:69:4d:ff:41:0d:08:d7:
                    0a:76:9b:2c:ce:ae:7e:8f:7f:be:53:04:e3:34:7c:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:2E:FB:90:06:A2:A1:C9:D8:08:08:18:E6:B3:22:BC:89:F2:0A
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e023::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:a2:44:e4:d4:82:65:ca:2a:53:39:15:40:26:d8:79:ff:
         d6:fa:16:f2:27:6a:3d:91:12:91:3a:3f:ea:e8:62:f2:4b:f9:
         4a:3f:a3:f3:50:10:ef:31:de:53:b7:3d:a1:b3:fd:7f:d9:9b:
         15:df:3c:29:c0:a6:9a:98:9f:00:32:df:a9:ea:8c:86:4e:fa:
         a5:3d:5e:50:73:b1:6c:08:55:3f:16:54:df:f3:bf:28:74:ea:
         74:1b:7c:fd:3c:4e:24:d6:9b:48:c1:53:ea:5a:de:a8:bd:36:
         08:cd:62:aa:93:5e:d2:d7:c6:6f:a1:ee:fa:52:64:be:df:2a:
         ee:1b:c8:c8:dc:e4:68:2c:d2:3f:c1:7a:9b:44:45:0f:93:f1:
         48:e4:b7:c7:b3:60:cb:10:50:a5:36:f4:54:12:5d:45:a1:15:
         c8:7f:41:16:e1:40:58:68:53:80:5e:d2:01:a0:52:e7:22:e5:
         af:60:7f:81:1d:53:07:5c:7f:17:61:a1:db:67:e6:d0:7f:44:
         a3:b9:8c:0f:cc:8c:cf:af:3b:bc:87:b6:10:43:44:82:0c:cb:
         92:97:16:af:25:4e:5f:17:2a:6e:30:94:b6:09:cc:d3:08:2b:
         01:2e:e3:3d:94:d5:4e:f7:af:1b:03:8c:1a:1e:b5:a7:e4:a9:
         b8:8c:b7:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvMAQIXrE2rgRP6CW/Wk3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2MzMmVmYjkwMDZhMmExYzlkODA4MDgxOGU2YjMyMmJjODlmMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA+3F8tkqFCrpkidgLnwAHXMdp+F
Ilbn5MnQaUen7Zs5WTxvZXYF8mOjieoEwJ97C/x7SPdb/fr3npYyex/eiHeRjDVj
scJt8BsXkwQlS4gHy9NEE1MqdufTTqQ44gdWxJJMFxZa0CWvvQ6TLnEPQvNqhS4u
pYyVwzQ7DZffPZeDZfrKHOXVS7Ji3lZ1xQkJLpUnxsHdDR36R9m0c7OwGTCE9S+7
ivyOGDkoL+pVzrOEvPzm9cl1EJAEPFtBLbUBrzoQuP2+s5AALnzJnYHvarnn2SiY
AXvCHI5okWQSQag8TAR+5BdyVmlN/0ENCNcKdpsszq5+j3++UwTjNHw7AwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNzDLvuQBqKhydgICBjmsyK8ifIKMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvM01NdS01QUdvcUhKMkFnSUdPYXpJcnlKOGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Aj
MA0GCSqGSIb3DQEBCwUAA4IBAQDD5aJE5NSCZcoqUzkVQCbYef/W+hbyJ2o9kRKR
Oj/q6GLyS/lKP6PzUBDvMd5Ttz2hs/1/2ZsV3zwpwKaamJ8AMt+p6oyGTvqlPV5Q
c7FsCFU/FlTf878odOp0G3z9PE4k1ptIwVPqWt6ovTYIzWKqk17S18Zvoe76UmS+
3yruG8jI3ORoLNI/wXqbREUPk/FI5LfHs2DLEFClNvRUEl1FoRXIf0EW4UBYaFOA
XtIBoFLnIuWvYH+BHVMHXH8XYaHbZ+bQf0SjuYwPzIzPrzu8h7YQQ0SCDMuSlxav
JU5fFypuMJS2CczTCCsBLuM9lNVO968bA4waHrWn5Km4jLd4
-----END CERTIFICATE-----