Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/ieuxMrk2soU52bDTm0pT91dGnBA.roa
File:                     ieuxMrk2soU52bDTm0pT91dGnBA.roa (raw, json)
Hash identifier:          ou7zFHY6rVavl5tZ4z+kg9xFuAoQU6Xz0TsTPqbmFqU=
Subject key identifier:   89:EB:B1:32:B9:36:B2:85:39:D9:B0:D3:9B:4A:53:F7:57:46:9C:10
Certificate issuer:       /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial:       01857E23A0365F14C2346DD22E1B8AFBF900
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/ieuxMrk2soU52bDTm0pT91dGnBA.roa
Signing time:             Wed 04 Jan 2023 18:55:41 +0000
ROA not before:           Wed 04 Jan 2023 18:55:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        2a09:9f44::/30 maxlen: 30
                          2a12:7340::/30 maxlen: 30
                          2a12:a2c0::/30 maxlen: 30
                          2a11:ed00::/30 maxlen: 30
                          2a12:a1c0::/30 maxlen: 30
                          2a12:a740::/30 maxlen: 30
                          2a11:ef00::/30 maxlen: 30
                          2a10:1c80::/30 maxlen: 30
                          2a12:7440::/30 maxlen: 30
                          2a11:f900::/30 maxlen: 30
                          2a11:fb00::/30 maxlen: 30
                          2a12:9f40::/30 maxlen: 30
                          2a12:7540::/30 maxlen: 30
                          2a12:a140::/30 maxlen: 30
                          2a12:a6c0::/30 maxlen: 30
                          2a11:f100::/30 maxlen: 30
                          2a12:73c0::/30 maxlen: 30
                          2a09:9f40::/30 maxlen: 30
                          2a11:f300::/30 maxlen: 30
                          2a12:72c0::/30 maxlen: 30
                          2a10:2500::/30 maxlen: 30
                          2a12:a240::/30 maxlen: 30
                          2a12:9ec0::/30 maxlen: 30
                          2a12:74c0::/30 maxlen: 30
                          2a12:a540::/30 maxlen: 30
                          2a11:f500::/30 maxlen: 30
                          2a12:a640::/30 maxlen: 30
                          2a12:7240::/30 maxlen: 30
                          2a11:f700::/30 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7e:23:a0:36:5f:14:c2:34:6d:d2:2e:1b:8a:fb:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
        Validity
            Not Before: Jan  4 18:55:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89ebb132b936b28539d9b0d39b4a53f757469c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:c7:fb:77:a4:6a:5c:19:55:15:02:9d:d9:
                    55:bf:da:8f:df:4e:a6:a4:60:3a:06:8d:38:43:02:
                    29:ab:b6:c6:a3:22:49:03:4a:4a:71:e4:9a:fb:72:
                    dd:3c:07:7f:58:10:c1:77:16:18:1f:22:79:fb:38:
                    11:d0:54:fb:98:7e:7d:85:da:ce:eb:8e:5c:34:af:
                    da:5a:84:50:42:77:d4:bd:96:a6:c9:45:3d:04:1c:
                    46:08:8e:da:9e:4f:c5:b6:df:1f:bc:e0:0a:9a:99:
                    01:6e:d1:47:f8:26:f4:4e:09:eb:80:84:fc:1b:6e:
                    1e:11:82:84:23:19:d8:59:ce:47:4c:20:09:25:40:
                    1b:0b:62:77:bf:54:b6:1e:60:02:7a:a1:87:a8:a4:
                    b9:6f:44:03:bc:df:dd:9c:88:eb:82:9b:85:29:c3:
                    d3:7e:fc:af:b1:40:14:c5:29:b8:8c:c2:80:c0:2a:
                    36:48:31:61:2b:1c:9a:d0:ab:e5:67:ec:7f:7c:b2:
                    1a:ff:a2:85:d7:aa:cf:ad:a3:2a:90:75:dd:1e:5d:
                    df:41:69:c4:7a:00:c0:cc:33:ea:40:b1:af:89:b5:
                    6a:b0:d6:33:8e:12:96:70:43:8f:99:d8:d2:f9:2c:
                    b7:e9:2b:d7:04:88:79:c8:aa:7a:95:f2:c8:0e:3d:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:B1:32:B9:36:B2:85:39:D9:B0:D3:9B:4A:53:F7:57:46:9C:10
            X509v3 Authority Key Identifier:
                keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/ieuxMrk2soU52bDTm0pT91dGnBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:9f40::/29
                  2a10:1c80::/30
                  2a10:2500::/30
                  2a11:ed00::/30
                  2a11:ef00::/30
                  2a11:f100::/30
                  2a11:f300::/30
                  2a11:f500::/30
                  2a11:f700::/30
                  2a11:f900::/30
                  2a11:fb00::/30
                  2a12:7240::/30
                  2a12:72c0::/30
                  2a12:7340::/30
                  2a12:73c0::/30
                  2a12:7440::/30
                  2a12:74c0::/30
                  2a12:7540::/30
                  2a12:9ec0::/30
                  2a12:9f40::/30
                  2a12:a140::/30
                  2a12:a1c0::/30
                  2a12:a240::/30
                  2a12:a2c0::/30
                  2a12:a540::/30
                  2a12:a640::/30
                  2a12:a6c0::/30
                  2a12:a740::/30

    Signature Algorithm: sha256WithRSAEncryption
         86:51:10:0d:e5:a7:00:5c:78:ac:cd:f4:92:17:98:d2:80:f8:
         0d:df:7d:e6:66:3b:af:5e:d1:ab:dc:0e:3b:44:d8:bc:90:51:
         05:f9:8e:03:c9:ff:32:d8:20:80:5a:67:28:4b:be:de:da:18:
         3a:f7:a8:95:62:62:93:b4:80:dd:b9:80:ad:7d:2f:58:a4:c7:
         94:aa:d4:96:03:be:bc:53:a7:1d:dc:1f:6b:82:3c:2c:e7:37:
         be:0d:3b:86:23:63:be:ee:27:78:47:89:d7:3e:66:8e:56:91:
         d8:ba:c5:af:20:71:95:ad:5c:b7:6f:e7:72:90:46:ee:d8:cc:
         b3:e2:44:4b:7d:e2:75:30:91:e8:a5:5c:0b:13:04:8c:f0:29:
         38:6c:43:9b:2a:ce:fe:e1:77:f2:c3:00:c9:fc:90:b7:69:a2:
         52:67:b7:94:e7:60:a7:25:9f:f8:b3:d5:94:8d:b5:2a:ae:b7:
         cb:a8:ad:1e:91:b8:e1:99:5f:56:ea:3c:bd:b2:ff:61:4d:bd:
         7a:86:6c:09:37:be:70:fb:e4:ea:1b:6a:0a:66:b2:45:61:da:
         c0:3b:cb:36:a0:5a:cd:6a:3e:47:77:74:19:0c:7b:12:0f:6c:
         91:ea:de:b9:df:22:c9:b5:49:ef:29:9c:27:6a:db:15:4b:f1:
         c0:67:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----