Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MAH-veSNg97b0535wRzJMHQ-Cms.roa
File:                     MAH-veSNg97b0535wRzJMHQ-Cms.roa (raw, json)
Hash identifier:          TSUX1rv/ctTgjKiYQ3ja48iu3pUbO8gMvqrSl0Lh2eE=
Subject key identifier:   30:01:FE:BD:E4:8D:83:DE:DB:D3:9D:F9:C1:1C:C9:30:74:3E:0A:6B
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018A9404FFE6D2DFE78AB9D025F229A4F9D4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MAH-veSNg97b0535wRzJMHQ-Cms.roa
Signing time:             Thu 14 Sep 2023 14:07:50 +0000
ROA not before:           Thu 14 Sep 2023 14:07:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216299
IP address blocks:        2a0e:aa07:e140::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:04:ff:e6:d2:df:e7:8a:b9:d0:25:f2:29:a4:f9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Sep 14 14:07:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3001febde48d83dedbd39df9c11cc930743e0a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:c8:8a:4a:2e:df:e4:f0:a7:ca:d5:4c:e1:
                    df:64:88:b6:f5:50:01:8a:05:12:ef:61:c4:03:72:
                    e1:9a:67:1f:05:6d:51:10:5a:8a:96:90:c1:d3:14:
                    25:a2:69:6f:50:26:73:f3:13:d4:ec:cd:11:c9:87:
                    8c:99:be:2c:0a:c6:7c:a0:2c:9e:fc:f9:80:f3:e7:
                    5a:1a:2a:c5:61:c4:3d:45:f5:2e:9b:67:17:77:8a:
                    a3:df:9a:bc:3e:2f:30:aa:60:d0:65:e5:ac:56:90:
                    d7:ac:e5:d2:3a:ac:8e:fc:03:ee:45:49:56:f0:20:
                    56:94:2c:93:7d:cd:dd:d1:fd:97:fe:16:23:90:07:
                    03:31:e0:b7:f2:cd:5a:03:d1:d7:ed:9e:b0:e0:bc:
                    ab:ee:1f:4c:91:fc:1b:67:02:e9:ca:c6:59:f4:58:
                    ee:02:af:d7:ac:7a:b0:9f:c5:7f:2d:c2:28:21:e4:
                    d9:90:10:0d:39:db:ac:e4:36:ad:67:fd:14:ee:34:
                    ce:f0:2c:b4:b6:16:90:3e:5b:ac:30:34:03:73:5d:
                    d6:33:cd:e9:c0:24:b0:8a:29:4f:f6:30:70:85:7a:
                    24:29:da:f4:81:c1:27:64:f4:3b:e5:65:d4:16:6b:
                    11:e4:10:13:f5:d1:1a:5a:f1:c1:e8:50:a2:36:66:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:FE:BD:E4:8D:83:DE:DB:D3:9D:F9:C1:1C:C9:30:74:3E:0A:6B
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MAH-veSNg97b0535wRzJMHQ-Cms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e140::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:b8:41:58:9d:11:3a:76:94:d7:e0:c5:47:cd:75:5a:e0:
         c4:3b:91:86:f8:82:01:78:68:15:29:29:be:45:33:63:7b:76:
         a3:0f:47:87:a8:d1:8e:17:95:2d:48:e6:d0:61:81:ac:5a:c6:
         b1:17:d4:00:75:6c:86:88:05:40:44:70:f8:c6:bd:c0:f1:d0:
         8a:fd:93:de:38:5b:91:74:01:27:fd:45:a4:c6:82:1b:04:85:
         a9:9b:8d:b1:44:6c:bb:5b:ed:56:1e:6f:8b:2c:2d:b1:8e:95:
         1b:c3:36:06:c0:c0:34:e3:61:0b:e7:39:13:74:f6:ca:69:f4:
         3f:9f:bb:83:61:e5:69:05:d4:88:29:0d:36:8e:5a:45:03:49:
         26:fa:a8:f3:11:9f:8e:84:ac:e5:d5:59:e0:28:d1:2f:60:d4:
         43:0d:80:72:19:5a:00:fc:02:b2:0a:56:e7:62:66:82:83:ee:
         d8:32:e7:1d:6d:76:82:b6:9a:04:8a:44:e6:3c:cc:e0:5f:48:
         5f:a0:61:8d:ad:ea:22:76:2b:9c:c1:e6:12:ed:90:49:ff:29:
         66:53:fd:d9:4b:0f:58:20:ec:34:40:cb:32:23:aa:ce:b7:52:
         36:e3:4e:7b:00:91:75:05:d9:65:39:fe:70:0c:a3:a2:ad:f1:
         0c:0a:bb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----