Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qX9PknHQx2FhT3aYUu81jBzLzbU.roa
File:                     qX9PknHQx2FhT3aYUu81jBzLzbU.roa (raw, json)
Hash identifier:          803mJdqNHJyDzxH7DIZSjO7+MisBD6yJayApCB+ZV1Q=
Subject key identifier:   A9:7F:4F:92:71:D0:C7:61:61:4F:76:98:52:EF:35:8C:1C:CB:CD:B5
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FF8145626F3209EA9C4D600406086
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qX9PknHQx2FhT3aYUu81jBzLzbU.roa
Signing time:             Sun 01 Jan 2023 21:14:52 +0000
ROA not before:           Sun 01 Jan 2023 21:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209290
IP address blocks:        2a0e:aa07:e032::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:f8:14:56:26:f3:20:9e:a9:c4:d6:00:40:60:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a97f4f9271d0c761614f769852ef358c1ccbcdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:36:84:6a:93:36:67:7d:63:5d:ad:ae:6a:
                    d8:63:1c:3f:1d:57:64:58:49:41:c5:1d:17:c6:46:
                    d8:b5:b6:9f:a3:8c:4b:b2:ab:62:7d:05:2e:14:3b:
                    60:60:62:cb:1a:37:23:14:ae:af:41:8e:5a:a5:b5:
                    72:89:ff:be:31:12:73:af:17:99:19:95:0a:02:7b:
                    6f:3a:35:d5:d3:53:0d:31:d8:44:0c:89:c2:de:fd:
                    68:8f:39:3f:98:06:3d:22:f4:99:03:4e:f3:9e:30:
                    fe:9d:76:76:76:1e:d3:76:c1:4f:56:78:0d:33:00:
                    8c:f1:9d:ad:39:f5:3e:69:cd:6b:7b:9b:26:a7:12:
                    bc:32:cd:ac:5a:9f:8d:54:c8:96:4b:3e:f7:d8:a9:
                    5b:18:e1:67:5e:61:37:08:73:13:20:09:bd:72:da:
                    d4:a3:5f:a3:25:6b:ec:07:e7:a6:8c:d3:23:bc:46:
                    10:74:45:57:ce:5e:56:c9:b3:f9:bc:e9:c2:f9:6e:
                    45:20:37:dc:c1:6a:ba:d1:72:16:3d:3d:e8:88:93:
                    02:33:1c:4c:e3:e0:f2:2d:28:eb:00:f6:ef:5f:48:
                    f2:df:af:33:15:fd:2b:eb:81:8c:83:b9:99:fc:f9:
                    25:52:b2:12:e4:49:7b:c8:f6:80:0a:0c:fe:e4:2a:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7F:4F:92:71:D0:C7:61:61:4F:76:98:52:EF:35:8C:1C:CB:CD:B5
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qX9PknHQx2FhT3aYUu81jBzLzbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e032::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:cc:4b:07:6b:24:be:48:86:65:61:d2:1b:54:ae:b7:01:
         a0:2e:b9:55:17:35:58:03:49:01:16:81:71:68:c0:7e:06:2f:
         e7:b5:ad:c8:6e:85:fb:a6:03:c1:e2:5c:d0:8d:68:8d:ce:e1:
         12:37:c1:31:a4:c6:6d:e2:e4:8b:d1:85:1d:60:96:f3:97:0f:
         9c:04:8c:d8:de:9c:12:92:73:1f:a9:d4:00:c2:00:73:79:c2:
         34:46:00:f0:ce:23:d3:1c:a7:87:62:00:83:db:7b:93:e3:62:
         e6:ac:7e:3c:26:40:32:ac:d7:3a:d8:f1:10:f0:ff:00:85:73:
         c8:9d:b0:52:08:ae:71:57:fa:a6:6d:6a:2e:89:bd:d0:da:52:
         30:9f:95:15:4a:1e:40:d6:6f:50:f9:a4:e4:88:ab:76:3e:a8:
         37:f8:52:ca:33:f3:c1:5d:0e:8e:e8:99:37:34:53:c6:12:55:
         d7:fe:4b:16:8c:42:d6:8d:18:e9:ea:3b:2d:11:53:0d:bd:42:
         8f:f4:cf:06:93:e1:0b:77:10:fd:0d:c0:c0:0c:38:f0:3d:a2:
         ea:ce:95:17:4f:ae:8d:ac:c9:be:2e:0d:0c:d9:3f:47:28:e0:
         48:04:a1:bf:87:9a:d9:c5:0a:de:95:07:19:c4:18:5c:0f:3b:
         5d:c7:05:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL/gUVibzIJ6pxNYAQGCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTdmNGY5MjcxZDBjNzYxNjE0Zjc2OTg1MmVmMzU4YzFjY2JjZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoag2hGqTNmd9Y12trmrYYxw/HVdk
WElBxR0XxkbYtbafo4xLsqtifQUuFDtgYGLLGjcjFK6vQY5apbVyif++MRJzrxeZ
GZUKAntvOjXV01MNMdhEDInC3v1ojzk/mAY9IvSZA07znjD+nXZ2dh7TdsFPVngN
MwCM8Z2tOfU+ac1re5smpxK8Ms2sWp+NVMiWSz732KlbGOFnXmE3CHMTIAm9ctrU
o1+jJWvsB+emjNMjvEYQdEVXzl5WybP5vOnC+W5FIDfcwWq60XIWPT3oiJMCMxxM
4+DyLSjrAPbvX0jy368zFf0r64GMg7mZ/PklUrIS5El7yPaACgz+5CpHfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKl/T5Jx0MdhYU92mFLvNYwcy821MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvcVg5UGtuSFF4MkZoVDNhWVV1ODFqQnpMemJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ay
MA0GCSqGSIb3DQEBCwUAA4IBAQC1SMxLB2skvkiGZWHSG1SutwGgLrlVFzVYA0kB
FoFxaMB+Bi/nta3IboX7pgPB4lzQjWiNzuESN8ExpMZt4uSL0YUdYJbzlw+cBIzY
3pwSknMfqdQAwgBzecI0RgDwziPTHKeHYgCD23uT42LmrH48JkAyrNc62PEQ8P8A
hXPInbBSCK5xV/qmbWouib3Q2lIwn5UVSh5A1m9Q+aTkiKt2Pqg3+FLKM/PBXQ6O
6Jk3NFPGElXX/ksWjELWjRjp6jstEVMNvUKP9M8Gk+ELdxD9DcDADDjwPaLqzpUX
T66NrMm+Lg0M2T9HKOBIBKG/h5rZxQrelQcZxBhcDztdxwWa
-----END CERTIFICATE-----