Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa
File:                     rRel0c37Q9jJ39qNzCWJcUZY31Y.roa (raw, json)
Hash identifier:          GEn9uBE2DvGRjhvXPl8M1LH84FMDdNq08AydkyYUS/E=
Subject key identifier:   AD:17:A5:D1:CD:FB:43:D8:C9:DF:DA:8D:CC:25:89:71:46:58:DF:56
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01883443E5B8EA3B9C5655E29F6E95BBA8BB
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa
Signing time:             Fri 19 May 2023 13:47:24 +0000
ROA not before:           Fri 19 May 2023 13:47:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198527
IP address blocks:        2a0e:aa07:e0e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:43:e5:b8:ea:3b:9c:56:55:e2:9f:6e:95:bb:a8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: May 19 13:47:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad17a5d1cdfb43d8c9dfda8dcc2589714658df56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:ef:1a:3c:fa:eb:80:30:91:50:aa:c4:b3:
                    be:f8:90:56:33:de:86:75:3b:0e:ef:3d:79:49:0b:
                    ae:01:26:f9:8a:2b:4e:29:ac:7c:67:b8:ed:65:68:
                    92:26:12:2b:e2:eb:36:55:0c:cd:52:61:f3:cf:15:
                    46:a8:fa:90:3b:d6:aa:21:20:c4:e0:3a:b0:1e:80:
                    d6:a0:61:a8:fd:7d:b2:f1:96:20:20:c2:b2:f5:9c:
                    35:0f:7b:99:3b:c0:d1:d3:28:0a:b4:34:cc:3d:e3:
                    c0:a6:f4:35:1b:8b:5e:a3:cc:3c:61:69:27:b9:b8:
                    38:d1:c4:95:6d:91:f9:b8:63:1c:00:b2:1f:4b:45:
                    63:0e:b9:17:1e:0f:ab:55:4b:1a:28:b4:a1:c9:ed:
                    fe:5e:c2:5d:96:fa:dd:71:a6:0e:6c:69:cd:fe:94:
                    b6:85:00:81:3d:d2:64:74:58:39:ed:1b:d3:8b:51:
                    38:47:27:a0:18:20:93:f9:82:ee:02:39:73:2b:37:
                    e6:7e:a4:e5:b8:2c:79:e3:50:ee:55:5e:c7:7e:d1:
                    56:ad:a4:d3:f0:58:a9:95:40:e4:aa:5d:ee:67:88:
                    f4:89:ac:c6:b2:a3:0c:3b:47:41:f9:51:51:28:0a:
                    e8:41:70:d5:66:21:42:16:72:e2:ae:39:e2:6e:9f:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:17:A5:D1:CD:FB:43:D8:C9:DF:DA:8D:CC:25:89:71:46:58:DF:56
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e0e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:88:a4:59:73:61:d9:1c:d2:0d:54:f5:8e:92:94:bc:ba:
         4b:e2:25:e2:78:f8:bc:70:22:d3:52:ab:0b:d2:83:08:14:62:
         09:ed:fd:ce:14:46:65:a7:51:19:7c:a9:8d:d4:9d:25:13:b1:
         1e:7f:59:80:2d:e2:70:93:3d:c8:46:48:9a:1b:65:cc:3c:9c:
         0a:43:c6:a7:bb:98:37:41:a6:53:fd:e3:48:28:7a:98:f7:ed:
         dd:c0:ed:16:6a:4b:be:ed:e1:e1:41:6f:d8:c5:45:70:03:b4:
         ab:af:72:4b:d7:f6:8a:49:a3:2e:0d:75:dd:37:8d:1d:07:87:
         86:bf:36:13:86:b8:16:0b:fd:ee:2a:94:f9:b4:47:12:e7:34:
         aa:99:ab:86:4d:5d:1f:35:0c:db:03:c9:f0:f4:f1:0b:75:f3:
         53:0c:12:02:60:a3:57:61:84:4f:83:d1:16:1d:28:e0:fd:c4:
         80:53:c0:e4:08:da:2b:7e:f9:7e:20:36:8e:3f:fc:2f:dd:44:
         d6:75:c8:cc:91:87:dd:47:67:76:35:a2:cc:b4:44:7c:d1:68:
         b8:7a:27:bd:19:84:36:09:bc:74:15:c0:f4:ed:e8:5f:4c:97:
         cb:86:ca:fd:88:3e:ba:bc:2f:c7:69:07:e4:af:1a:18:0c:41:
         c4:66:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----