Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FUGsKgtMpKV1Gdqw4QnqD7hwweg.roa
File:                     FUGsKgtMpKV1Gdqw4QnqD7hwweg.roa (raw, json)
Hash identifier:          ersEiVstoV1aqoGNCu+NkOl0egcDFr0urg/eZCsWkQs=
Subject key identifier:   15:41:AC:2A:0B:4C:A4:A5:75:19:DA:B0:E1:09:EA:0F:B8:70:C1:E8
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FF778A871382ED7F093770CFD5C9D
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FUGsKgtMpKV1Gdqw4QnqD7hwweg.roa
Signing time:             Sun 01 Jan 2023 21:14:52 +0000
ROA not before:           Sun 01 Jan 2023 21:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209215
IP address blocks:        2a0e:aa06:460::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:f7:78:a8:71:38:2e:d7:f0:93:77:0c:fd:5c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1541ac2a0b4ca4a57519dab0e109ea0fb870c1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:df:60:57:ed:68:1c:ef:23:c8:8d:26:1d:
                    07:f0:1b:19:2d:be:9f:0a:07:32:11:11:93:e6:56:
                    26:53:75:b3:69:dd:b1:e5:15:65:b4:82:7a:d3:6a:
                    25:4d:d3:8b:95:85:0e:6f:78:70:78:d6:dc:62:30:
                    e8:1b:76:3e:c5:c2:8c:b1:9d:c6:16:6c:a7:e1:9f:
                    9b:2c:b7:1e:de:df:bb:18:f7:bb:1c:fd:7c:43:39:
                    a1:aa:48:43:86:4b:fc:d0:29:02:b9:bb:b0:75:29:
                    19:5c:7d:38:3f:31:3a:e0:de:a2:43:10:a0:a8:95:
                    7a:fc:e9:f2:fd:22:81:ac:7e:4a:4e:23:a2:04:1c:
                    91:9c:72:44:b1:d5:ef:0a:1e:8f:94:f3:e2:36:ae:
                    66:98:a7:8f:f9:68:70:c2:8d:cd:55:55:61:93:98:
                    88:1d:c8:2f:bc:b2:74:8c:d6:5c:31:dd:28:f0:e8:
                    e2:df:f2:77:2d:6d:a2:5d:2a:ec:e4:cb:d1:22:f8:
                    6b:90:6b:43:7b:1b:a1:5f:4b:54:04:ad:3f:c7:0b:
                    56:96:05:59:46:b5:d7:50:dd:e5:6e:18:65:5c:cc:
                    c9:6d:46:0b:8d:e5:14:e2:88:0a:3d:6f:f7:4a:cb:
                    14:f0:63:5a:0a:8c:fd:9d:9a:6c:e2:08:07:e4:0c:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:AC:2A:0B:4C:A4:A5:75:19:DA:B0:E1:09:EA:0F:B8:70:C1:E8
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FUGsKgtMpKV1Gdqw4QnqD7hwweg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa06:460::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:dc:96:3e:5b:67:93:75:87:51:e0:7b:3a:fa:90:f1:50:4c:
         09:8f:17:76:2d:6e:d9:10:7d:71:85:bf:3e:2c:9f:7d:e9:14:
         32:3f:07:91:6f:43:28:db:1e:89:37:90:49:75:33:dc:0f:10:
         e5:95:72:7a:4f:bb:c1:00:e0:00:e9:8b:93:d5:dd:a6:7f:2f:
         ff:2f:f8:27:4d:ed:2f:0a:8b:72:5d:49:c3:ca:c4:b6:01:47:
         7a:1b:36:42:d8:47:9d:03:65:ad:4b:98:18:1a:eb:ac:e3:6e:
         c7:96:aa:af:8c:30:10:9b:7c:c9:e5:5a:ae:db:98:9c:10:11:
         3f:d0:13:30:27:c9:94:fc:0c:47:2e:62:34:3a:33:3b:4e:a9:
         de:86:74:76:97:f0:88:1f:df:84:5a:72:26:96:86:0c:25:30:
         ec:42:d0:cf:49:b8:89:33:89:70:84:48:e6:43:b8:50:93:92:
         01:17:1d:59:58:52:82:fa:7b:4c:36:66:0c:13:49:ca:ca:3d:
         a1:cb:c7:e9:06:ee:ae:a2:04:18:73:bf:7e:8f:07:a8:27:dc:
         a2:d9:e3:49:57:45:9e:c2:ee:03:0b:8e:6c:2e:29:3d:3b:12:
         9a:48:31:3b:3a:fe:cd:e4:b4:22:9b:fb:dd:18:d9:a1:21:29:
         07:34:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----