Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa
File:                     YSuMoFeJybFG7KjjEdrErXT8RZ4.roa (raw, json)
Hash identifier:          rM8xCuh9bxbol6typcFvqGHEfyUt2GABSf2jTjvEz8M=
Subject key identifier:   61:2B:8C:A0:57:89:C9:B1:46:EC:A8:E3:11:DA:C4:AD:74:FC:45:9E
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       018571BA05DC3AFA7825304A58D7BCA9CB4C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa
Signing time:             Mon 02 Jan 2023 09:04:54 +0000
ROA not before:           Mon 02 Jan 2023 09:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a09:9f44::/30 maxlen: 30
                          2a09:9f40::/30 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:05:dc:3a:fa:78:25:30:4a:58:d7:bc:a9:cb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jan  2 09:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=612b8ca05789c9b146eca8e311dac4ad74fc459e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:5d:b5:61:d7:3c:01:80:a4:31:5d:ac:c2:
                    5f:09:de:37:bd:86:c2:8d:ab:d5:8d:23:00:23:0c:
                    e4:cc:00:c9:82:85:16:b2:23:c1:a9:b4:7d:ab:66:
                    38:2d:34:39:32:5a:41:07:3d:d4:00:7a:dd:94:46:
                    8a:4e:b1:29:c7:f5:d3:ae:89:dd:7c:da:87:48:5a:
                    e6:a6:91:6e:38:c8:9b:fb:47:b9:94:80:e7:ee:85:
                    88:e3:f1:0d:1b:e4:8f:aa:f7:9a:8b:65:ae:c6:7f:
                    d5:3b:9d:84:b9:53:97:31:b0:bf:d6:6d:ae:ad:e0:
                    1a:a4:97:14:ae:21:ff:8e:5c:63:5c:db:80:0a:d2:
                    10:20:17:c4:cf:d9:2c:d5:21:c5:b4:3a:f4:19:f5:
                    ba:b6:4f:0a:ce:85:47:af:5b:35:0c:f0:b5:12:6a:
                    ae:d1:31:cf:4f:07:6f:cc:08:1e:a3:9b:bd:de:af:
                    48:a3:41:f5:5b:2f:33:f1:81:45:e9:89:59:a8:85:
                    90:d8:58:8f:32:23:54:4d:ff:17:ea:85:ae:24:f6:
                    45:89:e9:6b:8b:d3:98:5a:f1:72:51:47:da:ff:e4:
                    89:62:db:06:42:6e:1d:08:9e:c3:b6:e7:d7:98:a9:
                    7a:b2:4f:cc:7d:3a:57:78:9b:6e:8d:89:96:89:6e:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:8C:A0:57:89:C9:B1:46:EC:A8:E3:11:DA:C4:AD:74:FC:45:9E
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:9f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:40:68:c7:0a:68:e7:b9:ee:63:d9:fe:79:a3:51:8a:60:2f:
         39:9e:d4:c3:f1:a2:fc:11:02:e1:86:34:0e:d9:91:86:8d:2d:
         99:94:c2:c2:be:3a:46:6a:f7:17:9e:98:f3:60:1f:0e:85:30:
         13:ed:57:b4:bc:4f:4a:d7:54:8c:7c:9c:86:1e:cd:eb:7f:b3:
         4e:cb:29:c1:aa:3a:e1:0e:08:50:c8:5f:a9:c3:46:97:dd:71:
         2a:f0:01:66:13:4f:60:16:18:44:b5:65:86:7a:c7:4e:44:f6:
         5f:d3:b6:56:67:ba:43:06:0c:99:3f:93:c5:61:08:7d:88:4c:
         c0:1c:7c:a2:95:94:90:c9:c3:1d:7f:9c:a3:26:a8:a3:fa:ef:
         6f:09:6d:4c:12:3c:cf:09:a5:22:76:7d:18:e6:6a:a9:7d:00:
         19:dd:4f:f7:55:5c:b1:74:48:c0:b7:83:3b:cd:84:72:ff:81:
         e7:95:01:f7:cd:fa:eb:48:47:d1:d7:fb:29:ac:73:3c:24:12:
         b0:9a:bd:a5:eb:e5:95:34:21:7d:44:65:1d:92:4b:66:ff:a1:
         32:51:57:ed:d3:69:92:76:f9:f4:cc:d0:b1:51:9a:91:78:dc:
         97:05:63:f3:b6:a6:e4:81:59:3a:00:45:ba:37:14:12:78:3f:
         93:39:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----