Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa
File:                     Fto9yklnw6a31tvhhDrDv8HXo5s.roa (raw, json)
Hash identifier:          +jV7B9Z9ZWHS8BpTIssW5d/T7A4/wUwzWNrFOu5NFjk=
Subject key identifier:   16:DA:3D:CA:49:67:C3:A6:B7:D6:DB:E1:84:3A:C3:BF:C1:D7:A3:9B
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FE644D5B840AD08B04794F1076E8F
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa
Signing time:             Sun 01 Jan 2023 21:14:48 +0000
ROA not before:           Sun 01 Jan 2023 21:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147028
IP address blocks:        2a0e:aa07:e500::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:e6:44:d5:b8:40:ad:08:b0:47:94:f1:07:6e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16da3dca4967c3a6b7d6dbe1843ac3bfc1d7a39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:5b:f2:4c:fa:6a:d9:d5:5a:3e:1a:d1:f2:
                    9f:d8:95:e1:2d:2a:2f:55:c1:67:23:ea:3d:70:40:
                    63:b6:f7:c5:4e:d5:b0:7c:f4:81:36:2c:52:2b:c5:
                    7a:99:18:b5:a1:0e:d8:21:d5:74:d6:63:87:bd:10:
                    e1:5e:6e:c2:5a:f3:89:14:4b:cf:37:17:4c:c8:45:
                    20:f7:6a:b7:e9:e6:69:a8:cb:64:01:69:3a:34:cb:
                    ef:8a:74:09:8b:65:80:d2:c3:61:47:57:c8:6f:a9:
                    93:22:70:71:dd:6f:6a:79:18:31:3a:08:b9:50:2e:
                    69:84:25:0c:84:ae:48:76:52:36:24:db:dd:d9:8f:
                    65:42:91:cd:73:90:a4:ce:83:88:9c:5d:50:d2:3f:
                    2c:2f:d8:cc:0c:1e:25:e0:e3:fa:62:5c:e5:25:e3:
                    d0:23:ea:f5:dc:20:ab:72:fc:80:64:af:29:f6:ee:
                    51:58:86:59:99:73:c7:0d:28:6e:2c:34:60:4a:e6:
                    44:f5:32:14:3c:34:5a:a7:59:2a:51:64:0b:06:27:
                    27:14:88:89:68:3a:af:6b:cf:6b:4d:da:86:6c:7c:
                    d3:5e:ea:5b:bb:9a:7a:8c:49:db:b7:9e:7f:54:5d:
                    ac:dc:b7:d3:7a:3a:be:9e:96:63:b5:77:e6:fe:b2:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:3D:CA:49:67:C3:A6:B7:D6:DB:E1:84:3A:C3:BF:C1:D7:A3:9B
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:a8:57:2f:f3:9f:ca:60:5f:c2:83:32:dc:1a:9d:7d:51:
         2d:e4:4a:77:f4:f5:43:17:d1:62:f7:ba:dc:2c:c9:8d:69:ac:
         0d:fb:6a:94:f0:ed:22:b6:76:5f:38:68:67:5e:df:68:fe:b6:
         6c:1d:d0:70:4f:2b:cb:6a:5f:b0:2b:87:b7:09:89:b7:65:a0:
         43:c9:61:52:e0:39:88:b8:c9:3e:b5:b3:2a:39:08:f9:8e:a3:
         88:44:5b:46:a2:de:0c:c0:f8:68:16:63:bf:16:01:94:78:aa:
         0a:d3:a7:c0:b1:b2:0e:dd:b5:2c:1d:e0:6f:34:06:a2:f4:17:
         f2:c9:7d:e8:83:00:58:c1:3f:76:1a:4e:a5:ea:4e:32:c5:99:
         f3:e3:92:97:5d:b8:21:80:54:e7:00:db:2d:4b:35:69:0f:75:
         dd:d0:04:19:d4:ab:c7:95:aa:1e:93:73:b1:1d:60:78:04:e2:
         a8:60:83:7e:f8:c2:07:34:3e:ae:d7:07:43:69:8f:a5:fb:f4:
         c4:de:e5:29:0f:b2:34:04:5e:ce:05:1d:16:2c:ae:fe:3f:c1:
         19:80:b0:d2:66:a6:86:f2:39:a7:97:1b:b9:9b:c3:8e:39:c4:
         c1:0c:e4:14:31:88:aa:2c:54:a4:fe:a5:f9:f6:c2:a0:37:83:
         b5:f5:a2:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL+ZE1bhArQiwR5TxB26PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRhM2RjYTQ5NjdjM2E2YjdkNmRiZTE4NDNhYzNiZmMxZDdhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycpb8kz6atnVWj4a0fKf2JXhLSov
VcFnI+o9cEBjtvfFTtWwfPSBNixSK8V6mRi1oQ7YIdV01mOHvRDhXm7CWvOJFEvP
NxdMyEUg92q36eZpqMtkAWk6NMvvinQJi2WA0sNhR1fIb6mTInBx3W9qeRgxOgi5
UC5phCUMhK5IdlI2JNvd2Y9lQpHNc5CkzoOInF1Q0j8sL9jMDB4l4OP6YlzlJePQ
I+r13CCrcvyAZK8p9u5RWIZZmXPHDShuLDRgSuZE9TIUPDRap1kqUWQLBicnFIiJ
aDqva89rTdqGbHzTXupbu5p6jEnbt55/VF2s3LfTejq+npZjtXfm/rJNTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBbaPcpJZ8Omt9bb4YQ6w7/B16ObMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvRnRvOXlrbG53NmEzMXR2aGhEckR2OEhYbzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+UA
MA0GCSqGSIb3DQEBCwUAA4IBAQAU16hXL/OfymBfwoMy3BqdfVEt5Ep39PVDF9Fi
97rcLMmNaawN+2qU8O0itnZfOGhnXt9o/rZsHdBwTyvLal+wK4e3CYm3ZaBDyWFS
4DmIuMk+tbMqOQj5jqOIRFtGot4MwPhoFmO/FgGUeKoK06fAsbIO3bUsHeBvNAai
9BfyyX3ogwBYwT92Gk6l6k4yxZnz45KXXbghgFTnANstSzVpD3Xd0AQZ1KvHlaoe
k3OxHWB4BOKoYIN++MIHND6u1wdDaY+l+/TE3uUpD7I0BF7OBR0WLK7+P8EZgLDS
ZqaG8jmnlxu5m8OOOcTBDOQUMYiqLFSk/qX59sKgN4O19aLx
-----END CERTIFICATE-----