Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Te38-TXcxLeIunJdLaKfvsKd6Hs.roa
File:                     Te38-TXcxLeIunJdLaKfvsKd6Hs.roa (raw, json)
Hash identifier:          J2W0U4Ekk4Ad4lcskWPWvbJ+G4YUHDJ/OxRoqe/o+X0=
Subject key identifier:   4D:ED:FC:F9:35:DC:C4:B7:88:BA:72:5D:2D:A2:9F:BE:C2:9D:E8:7B
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F300218098F2E3F55968BC3950C51F0
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Te38-TXcxLeIunJdLaKfvsKd6Hs.roa
Signing time:             Sun 01 Jan 2023 21:14:55 +0000
ROA not before:           Sun 01 Jan 2023 21:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210872
IP address blocks:        2a0e:aa07:e026::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:02:18:09:8f:2e:3f:55:96:8b:c3:95:0c:51:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4dedfcf935dcc4b788ba725d2da29fbec29de87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:30:4c:1a:77:9e:32:02:8b:b0:9a:14:a4:
                    0b:c1:fb:a6:5d:40:2a:84:d8:38:b8:41:86:4c:cb:
                    e8:33:21:9f:c4:0a:89:3e:95:cd:97:08:c3:11:ea:
                    5f:f2:9a:94:ea:2e:9d:7a:14:c3:2c:44:5a:ba:30:
                    dd:1d:0f:22:b4:db:5a:80:6c:81:32:31:08:5d:b8:
                    31:eb:b2:bf:35:bd:8f:9c:b3:17:6f:65:c1:f7:fe:
                    9a:38:9f:8d:93:1e:18:ed:b9:47:0d:cb:37:d3:72:
                    10:de:9e:4e:fa:23:52:69:7d:7b:a3:d3:ce:14:37:
                    f0:eb:f6:97:3d:7f:b7:6c:d0:17:b5:8c:16:b3:8e:
                    e5:4a:ab:c4:df:c9:4d:f3:8e:3b:6b:e0:5d:40:a7:
                    04:d9:d5:ac:e4:a9:84:45:eb:d3:f6:fb:ff:5b:3e:
                    3c:6f:df:87:6d:37:69:a7:5d:b1:5e:a9:ed:ed:07:
                    eb:2e:91:5f:4a:ec:ec:12:1e:6a:6f:c7:53:dd:60:
                    72:a3:7b:b8:6c:cf:e8:4f:3e:2b:86:fc:d3:0a:fc:
                    ba:20:b7:27:6e:8f:2a:f6:4f:84:d0:91:2c:94:8b:
                    a4:b9:13:1b:6b:33:11:83:85:ff:fb:8e:58:ca:92:
                    6e:f1:8e:21:24:40:70:68:2c:86:de:f4:77:b1:94:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:ED:FC:F9:35:DC:C4:B7:88:BA:72:5D:2D:A2:9F:BE:C2:9D:E8:7B
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Te38-TXcxLeIunJdLaKfvsKd6Hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e026::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:be:fd:d9:8b:09:c2:56:aa:86:63:ca:9c:50:10:5d:9a:
         63:75:1e:cf:89:52:46:21:17:99:5c:d3:d6:76:6d:e5:04:64:
         33:58:51:c0:22:bc:9c:33:f8:3b:1f:ca:b3:e6:a7:64:95:23:
         ca:98:7f:79:38:c0:85:ff:6c:97:37:77:b8:9c:00:1c:62:29:
         81:44:ae:d4:89:b8:7f:d7:62:49:f3:18:e8:92:cb:a9:cd:51:
         80:f1:cb:ce:1e:ce:0c:2e:d7:89:91:38:42:07:21:49:37:e0:
         e4:e3:38:96:de:7f:b4:81:0b:74:43:87:ef:e7:96:06:71:0a:
         f4:5c:54:30:e0:54:7f:90:41:03:9b:c9:ec:0c:0a:4d:c2:21:
         e0:9f:95:1b:49:fd:b5:1a:9d:28:28:14:2f:0b:57:b9:75:90:
         eb:6c:22:e3:e8:32:71:e7:83:62:4b:c0:73:5a:d2:7f:7c:03:
         c5:f3:c4:5a:5e:00:5c:d0:df:3e:47:f4:2b:39:14:a4:87:72:
         a5:81:af:82:0b:83:07:31:61:96:76:c7:07:d9:28:d6:40:3a:
         1a:f4:10:3d:15:71:fb:6e:c3:93:69:81:98:ae:dd:b1:40:d0:
         4b:09:53:27:cd:44:01:4b:c6:69:40:10:e0:a5:d1:00:11:cc:
         4f:0c:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----