Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa
File:                     _ZyRgdQOk6PKUuVD6bySkT-_pvk.roa (raw, json)
Hash identifier:          OrhWj0S7MD6pxCUpRuehVqOjGi/EP43KDb+NxCryrww=
Subject key identifier:   FD:9C:91:81:D4:0E:93:A3:CA:52:E5:43:E9:BC:92:91:3F:BF:A6:F9
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018C5EFF1D896AE80BF36D48D59E9FAC6E59
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa
Signing time:             Tue 12 Dec 2023 17:07:06 +0000
ROA not before:           Tue 12 Dec 2023 17:07:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215848
IP address blocks:        2a0e:aa07:e160::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5e:ff:1d:89:6a:e8:0b:f3:6d:48:d5:9e:9f:ac:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Dec 12 17:07:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd9c9181d40e93a3ca52e543e9bc92913fbfa6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:60:39:cf:3e:09:20:8e:de:00:36:50:ac:80:
                    2d:c6:2b:90:22:fe:74:7f:bc:af:a5:00:d3:04:09:
                    38:d5:e0:89:af:28:40:21:81:69:29:e5:6f:e5:03:
                    c5:6f:40:3e:ae:52:a9:26:02:e5:45:26:18:09:a7:
                    a4:aa:bb:68:e8:c6:79:03:e8:a9:00:51:49:d5:70:
                    b5:64:68:97:77:5d:eb:24:3f:71:0e:72:61:de:ed:
                    97:45:fc:1e:ed:82:13:64:80:80:f4:9b:01:a0:a8:
                    ba:27:43:94:6a:2f:17:ac:b5:b2:99:4b:a8:50:bc:
                    2d:3e:9b:f0:09:9d:34:65:09:18:c9:e3:9c:68:dd:
                    f6:b6:14:68:54:c4:ee:34:44:3d:c2:3b:2a:c6:81:
                    86:fa:27:33:82:a5:0b:83:ee:a1:13:bb:97:08:0b:
                    25:76:5e:4a:21:e2:2d:44:d6:f4:37:ca:be:26:88:
                    e1:73:4a:c4:58:c7:46:16:13:2f:69:15:5c:d8:a8:
                    f5:b7:b0:c9:88:6c:0f:65:10:0c:c0:79:8c:9e:45:
                    e7:dc:63:d0:4c:ed:3e:e7:78:e7:25:d2:59:2c:5b:
                    55:4b:2b:07:37:23:fd:36:b8:f2:49:2c:10:8f:0f:
                    9c:a0:72:04:ba:26:a9:ec:e7:60:cb:5a:75:f6:78:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:91:81:D4:0E:93:A3:CA:52:E5:43:E9:BC:92:91:3F:BF:A6:F9
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/_ZyRgdQOk6PKUuVD6bySkT-_pvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e160::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:1b:8b:e7:7d:18:61:d0:ad:f8:67:35:7e:c1:d1:c0:21:
         2a:6b:9a:66:5e:19:a9:ac:bb:4c:01:c1:98:8e:1c:37:9b:35:
         99:f7:c7:ca:95:27:a6:99:cd:10:b5:1a:3c:ee:51:ce:2a:9e:
         2c:f6:09:b1:59:ac:c3:85:23:c9:41:1c:98:a1:4d:85:e7:43:
         fa:9e:52:28:a9:ba:ed:19:c3:57:2f:15:f2:65:f7:08:f4:53:
         2a:08:31:fe:c8:49:af:cc:fc:6a:75:f1:54:c5:01:bf:4a:76:
         89:fd:81:db:ee:a9:83:e4:b1:a4:1d:91:b9:5b:ca:3f:ca:45:
         9c:9d:0e:48:f6:91:b3:c2:79:1c:ed:ca:f0:d4:70:e8:9d:d1:
         ec:3c:22:09:9e:6e:74:fa:70:b4:ba:94:b2:9b:09:22:ae:f0:
         03:8a:65:bb:af:05:77:ac:b9:df:d7:f7:d8:69:ca:d0:f8:67:
         0f:61:c1:01:9e:69:e7:aa:35:fe:5c:80:4f:17:4c:4e:46:e1:
         62:b3:d7:ae:26:be:ae:57:e0:c4:1f:b8:8b:8a:af:0c:a6:df:
         f0:d3:9b:38:13:87:a5:7e:37:82:0a:96:ce:50:70:db:25:86:
         38:bc:ac:fd:b0:43:68:08:b1:12:1f:c9:3c:a6:51:39:02:74:
         a1:c5:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----