Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/C2tRmenVD9eYdkT7s-rWmWuUS_E.roa
File:                     C2tRmenVD9eYdkT7s-rWmWuUS_E.roa (raw, json)
Hash identifier:          PnDcFAMgFjqPYgCe+rH8SNKWlZPU0swO6+z/U/aHyAg=
Subject key identifier:   0B:6B:51:99:E9:D5:0F:D7:98:76:44:FB:B3:EA:D6:99:6B:94:4B:F1
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FFEA617799D83C9E952C4F388F820
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/C2tRmenVD9eYdkT7s-rWmWuUS_E.roa
Signing time:             Sun 01 Jan 2023 21:14:54 +0000
ROA not before:           Sun 01 Jan 2023 21:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210311
IP address blocks:        2a0e:aa01:aa00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:fe:a6:17:79:9d:83:c9:e9:52:c4:f3:88:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b6b5199e9d50fd7987644fbb3ead6996b944bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:53:d1:33:3b:ea:e3:07:c1:13:82:e1:29:
                    b9:c9:32:56:ab:0d:ea:2f:e7:28:15:7d:47:c4:ab:
                    e5:7c:fe:1d:22:14:26:5d:d6:0b:23:61:dd:ef:c8:
                    fc:5f:b9:04:a5:6b:c2:83:c5:db:f8:81:5b:e7:60:
                    a5:71:9c:9b:ba:67:6e:33:f8:d0:24:d2:e1:98:85:
                    39:3b:26:79:21:df:7c:c1:58:10:0d:0c:05:b9:4f:
                    fc:f7:46:87:33:38:ba:77:10:25:b8:0a:ad:0e:6c:
                    1e:a9:5a:71:b5:d3:73:e0:03:41:8e:76:16:34:d2:
                    d0:93:15:df:b0:8d:40:f4:a0:b2:6c:6e:e6:4b:19:
                    4f:38:7c:55:c1:2f:e7:4c:4a:b8:b3:ab:7b:bd:d0:
                    7b:88:b5:3c:20:d9:03:48:f1:b9:e5:a8:9b:77:a4:
                    a5:8c:ba:6e:dc:90:64:cd:6f:b9:93:1a:cc:6f:95:
                    b8:0f:bd:33:a0:8e:b2:54:37:16:3b:87:f9:d0:19:
                    f4:b7:07:d0:dd:dd:9a:68:6d:1c:ed:0d:9e:ff:3c:
                    97:92:5b:1c:07:13:e1:d2:2f:f9:eb:80:a1:2b:bc:
                    0e:1a:ec:5f:99:00:da:f4:eb:9f:71:7c:9c:a9:ff:
                    53:e2:cf:5f:0a:1c:82:45:3c:33:4d:08:a5:85:8d:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:51:99:E9:D5:0F:D7:98:76:44:FB:B3:EA:D6:99:6B:94:4B:F1
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/C2tRmenVD9eYdkT7s-rWmWuUS_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa01:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:23:7b:ff:a3:59:b3:77:18:ef:c9:ec:52:b1:64:63:28:
         7b:b6:61:3a:58:18:78:dd:bf:45:ef:a2:87:6b:fa:fc:36:64:
         e2:1a:0b:f6:2d:4b:ba:4e:21:e5:e4:be:49:8b:56:90:95:5c:
         74:b9:b3:cb:d6:cd:7a:3b:f8:40:db:66:fb:92:3a:d5:d0:48:
         e9:93:8e:7f:c8:78:ee:2d:9c:1c:f4:39:25:34:dd:7f:92:36:
         aa:f0:8e:f7:ee:c1:79:b2:3d:f4:c8:64:b2:e7:db:f6:23:5b:
         e2:01:09:a2:53:45:36:fb:e0:32:7a:0f:f0:d3:30:6c:0b:c9:
         70:fd:15:9d:c6:a2:d5:8c:05:8a:06:4a:54:e1:3d:d0:0e:c7:
         e7:aa:a2:a4:a2:35:6a:8b:0b:c6:77:df:15:63:c1:57:03:15:
         d4:48:b8:a5:92:5c:ce:61:23:b2:6d:1e:21:47:0b:27:9d:7d:
         29:90:5b:0a:46:a5:38:84:23:e0:e2:88:de:dd:54:5d:fb:e6:
         94:20:5a:4a:da:1e:49:37:19:ab:13:bd:63:8b:82:c9:e9:c5:
         5e:78:36:a8:1c:8b:55:3f:06:75:f2:01:f3:f6:c7:dc:3e:ec:
         c7:2b:62:86:d4:fc:b4:21:51:f7:ce:a0:ae:18:b4:d6:dc:bd:
         91:bf:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----