Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa
File:                     vryQNRJesX-M3xI58WJsr_aPuDU.roa (raw, json)
Hash identifier:          FX6BoNnOgShJxcwI6tRW5Rv+oYc/yhO/Y9EXt3rhp0k=
Subject key identifier:   BE:BC:90:35:12:5E:B1:7F:8C:DF:12:39:F1:62:6C:AF:F6:8F:B8:35
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       01856F2FE5C317CA3AD7A6BDE8C8CCDD2A78
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa
Signing time:             Sun 01 Jan 2023 21:14:48 +0000
ROA not before:           Sun 01 Jan 2023 21:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140972
IP address blocks:        2a0e:aa07:e015::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:e5:c3:17:ca:3a:d7:a6:bd:e8:c8:cc:dd:2a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 21:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bebc9035125eb17f8cdf1239f1626caff68fb835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:1e:ce:25:8f:9d:e9:98:19:e3:3f:3e:fc:
                    c5:ce:c6:c7:a3:ab:38:5d:a8:cd:9a:1f:ae:f7:f7:
                    13:49:da:86:dc:6f:ec:41:65:95:a0:b6:b8:0a:8d:
                    ab:c2:aa:f9:c2:2c:bc:c0:e3:27:9a:10:43:8f:0e:
                    05:af:40:f9:26:15:ff:bc:fa:ea:6b:b8:b6:75:c8:
                    53:b1:a1:b2:e9:04:bb:2e:52:50:26:d1:4e:32:f9:
                    7e:6f:ae:e2:cb:73:f5:10:ca:c3:3e:e0:77:ee:55:
                    06:67:e1:4a:52:e8:f5:56:78:14:ae:e8:57:20:4e:
                    25:14:30:f8:83:19:7f:a9:a1:ff:f9:da:a0:e3:9d:
                    fe:f3:f5:46:39:1d:bd:b0:7c:c3:1e:2e:9d:46:fa:
                    8c:e0:4f:3d:d4:79:8d:3a:1c:de:72:65:13:e5:87:
                    01:6f:e8:e7:16:0b:e0:aa:29:23:9a:3a:fb:c9:11:
                    ca:49:24:bc:fc:91:76:5a:cb:db:b6:27:d6:5b:7c:
                    68:e4:20:44:c8:14:51:48:8c:f2:b4:db:7f:60:20:
                    32:99:44:fd:30:0d:99:00:bc:bd:90:52:5a:77:9e:
                    27:e5:c5:7b:7d:c7:32:28:08:60:ac:75:72:56:5d:
                    78:48:12:8a:7b:6e:4c:83:c2:a4:45:46:57:fc:61:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:90:35:12:5E:B1:7F:8C:DF:12:39:F1:62:6C:AF:F6:8F:B8:35
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vryQNRJesX-M3xI58WJsr_aPuDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e015::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:86:88:b3:21:cc:59:b8:86:63:c0:73:62:1e:33:a1:2a:
         d5:6e:7b:62:72:b9:5f:80:49:5e:81:33:61:0b:bd:fb:a1:be:
         13:b1:63:07:ac:79:a2:d0:a5:15:97:28:62:73:f6:a6:cc:7b:
         2c:d2:cf:eb:1a:35:9e:db:6e:48:20:9e:ea:a7:84:e3:ba:0f:
         f5:76:74:54:4c:42:88:b8:b8:a6:05:f1:63:85:50:7d:ba:d3:
         4c:d7:e4:b9:af:47:c2:ac:c7:c9:41:f5:41:77:3e:d4:d9:17:
         65:db:97:43:17:92:0c:e4:38:84:d8:18:88:16:43:17:64:b4:
         c7:34:14:e0:11:9c:2c:b0:ce:ee:44:a7:20:55:d1:34:db:27:
         75:da:26:db:c3:6c:f6:0b:97:11:ca:3f:0c:39:9f:74:b8:4f:
         70:b1:d9:d8:fc:cb:c5:b7:ae:5e:af:59:3b:ed:4e:1c:60:d0:
         fe:bc:a7:d8:c6:e0:dd:27:84:3d:0d:4d:0d:90:f5:25:27:de:
         78:47:f8:f9:70:11:6f:c9:ce:90:02:f0:41:aa:21:e3:64:07:
         80:08:fd:e5:11:c5:6e:43:71:31:8e:5d:a2:f7:fa:f3:6f:e5:
         c6:58:d3:4b:50:68:5d:52:a3:bc:9d:99:33:12:41:7d:5b:f3:
         54:7c:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----