Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_PZBZ7zvwPzm9juCJLoDs6mpAZ8.roa
File:                     _PZBZ7zvwPzm9juCJLoDs6mpAZ8.roa (raw, json)
Hash identifier:          zVQ/vxFv0AkLb07SVkmxbNqIm9zjpSkTH8M63uWFTlE=
Subject key identifier:   FC:F6:41:67:BC:EF:C0:FC:E6:F6:3B:82:24:BA:03:B3:A9:A9:01:9F
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F3007AC61B902EF605467871FD2E129
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_PZBZ7zvwPzm9juCJLoDs6mpAZ8.roa
Signing time:             Sun 01 Jan 2023 21:14:56 +0000
ROA not before:           Sun 01 Jan 2023 21:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211647
IP address blocks:        2a0e:aa07:e04a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:07:ac:61:b9:02:ef:60:54:67:87:1f:d2:e1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcf64167bcefc0fce6f63b8224ba03b3a9a9019f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:7d:d7:b7:df:4e:0c:43:07:9f:46:93:d4:
                    af:f5:c4:c5:a1:b1:5d:db:37:d9:82:49:77:ea:d6:
                    de:17:a4:d6:1f:85:62:92:f2:d7:90:50:af:5e:23:
                    1c:eb:6d:7e:e6:56:6d:82:22:cc:a6:1c:0b:d1:40:
                    48:c4:92:1c:3c:c4:95:0b:70:da:86:43:14:58:ac:
                    39:9a:53:b5:a0:3c:e1:ec:18:3e:94:bd:1f:7d:13:
                    59:92:e4:59:5e:86:0d:68:69:9d:c8:d4:1c:b2:2b:
                    b2:f0:cb:e2:04:9b:5d:5b:5e:b3:65:b7:aa:37:69:
                    44:83:dc:fa:ed:ae:4e:cd:d6:a8:33:33:bd:1a:d4:
                    96:48:3a:5d:fb:45:51:63:7d:2b:f8:07:ca:82:07:
                    55:02:62:84:36:a6:d8:1e:35:65:7c:ab:de:e2:35:
                    e9:47:4f:99:63:ce:f6:4c:57:c1:ea:34:7d:4e:d1:
                    d8:ff:c4:ec:0e:21:24:2a:12:a7:f9:30:7a:0c:c0:
                    4f:ab:e2:32:16:b7:26:46:16:42:ff:f3:2b:52:d1:
                    8d:e7:7c:e8:bc:c8:18:c9:04:47:6f:a2:bb:b1:3a:
                    04:c6:0e:86:85:d2:2a:6f:24:14:73:02:bd:99:c1:
                    7c:9a:8b:5a:32:de:af:c7:fd:a0:17:69:ea:62:66:
                    97:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:41:67:BC:EF:C0:FC:E6:F6:3B:82:24:BA:03:B3:A9:A9:01:9F
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_PZBZ7zvwPzm9juCJLoDs6mpAZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e04a::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:ae:43:a1:47:66:dd:5e:84:fa:c3:1f:54:b0:cf:b9:7f:48:
         69:7d:68:46:a2:be:2a:1f:4b:88:e9:19:90:61:85:7b:8e:51:
         ea:8e:4f:86:bd:53:66:6d:ed:26:68:62:87:65:57:84:a0:6c:
         97:41:c8:ba:90:17:83:c6:e2:89:39:28:0b:08:4d:af:39:97:
         b1:c6:67:5d:af:1a:a5:40:4f:d2:4d:0d:1e:ec:80:61:0e:54:
         1d:61:85:cd:ba:7b:e7:e7:7c:f4:d1:ac:7d:d8:50:52:ae:dc:
         a2:0c:45:8b:dd:ad:ad:44:1f:c2:9a:30:c4:a8:56:b6:21:cc:
         90:45:c7:06:f0:08:a4:4b:aa:1c:e0:cb:37:bc:55:ae:a3:ea:
         06:e4:fb:9d:e3:de:f7:f7:5b:ec:56:d0:d9:e7:8b:c5:63:1e:
         65:c2:1f:a8:03:b7:14:e2:4e:d3:b6:1a:16:90:a3:19:09:00:
         5a:d5:91:8c:0b:fb:97:81:85:dd:e1:26:53:9f:8f:ec:dd:c7:
         35:1c:f8:4f:ba:0d:42:ee:f8:b7:f5:9c:49:6f:dd:46:a9:82:
         06:2c:a2:a8:f7:fb:fc:4c:07:b8:35:2f:55:90:d5:53:93:59:
         d8:75:64:43:62:a3:f2:6c:67:43:0b:da:6a:97:6b:71:c7:a2:
         8e:ac:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----