Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa
File:                     NapjLGj6B5uSFsvkw72ytPRlQYQ.roa (raw, json)
Hash identifier:          Io0RCS/RXkxpPjNFOFBR8L0/hYPqORW/KM11r40gbyQ=
Subject key identifier:   35:AA:63:2C:68:FA:07:9B:92:16:CB:E4:C3:BD:B2:B4:F4:65:41:84
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01856F1DD547B969E5F6EB54F8579A047370
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa
Signing time:             Sun 01 Jan 2023 20:55:04 +0000
ROA not before:           Sun 01 Jan 2023 20:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57969
IP address blocks:        2a09:7:2002::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:d5:47:b9:69:e5:f6:eb:54:f8:57:9a:04:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 20:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=35aa632c68fa079b9216cbe4c3bdb2b4f4654184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:21:59:e8:f0:b2:f2:eb:58:1b:46:35:ba:
                    0d:9a:c2:67:5a:fb:c1:5e:29:c6:6f:84:dd:4e:8e:
                    1f:7c:f5:44:cf:35:37:28:f0:be:c0:dc:2f:a2:4c:
                    64:88:9b:78:6c:50:17:49:52:80:ee:5a:f9:d5:1c:
                    e8:f5:46:a6:6d:cf:91:16:d5:23:91:f4:06:0b:bd:
                    4d:83:ff:2d:2c:e3:21:a8:0c:0d:9a:12:85:99:d2:
                    db:27:0b:56:e9:74:7e:a9:41:21:41:6a:de:99:48:
                    85:1e:1d:77:e2:d3:2e:78:3c:38:91:6e:99:3c:d0:
                    fd:14:84:45:43:41:26:d3:4b:72:1f:98:e9:03:08:
                    70:1f:48:d0:21:cc:7b:72:2f:2f:c1:1e:e4:91:e9:
                    c1:af:0e:c2:be:2f:df:ed:9b:19:f3:d4:c5:f3:25:
                    d1:97:60:ae:6f:d0:82:eb:79:8e:fb:6f:b0:52:3a:
                    61:74:c2:6b:e7:d5:a1:20:7c:16:34:0f:a2:b3:2f:
                    e4:b9:a6:24:a0:9d:11:68:58:0f:19:99:98:3d:99:
                    5d:79:5f:e2:fd:eb:f8:2a:c4:78:08:0b:58:af:e1:
                    1e:8c:72:69:1b:e4:59:c6:58:fe:7e:68:5b:24:7e:
                    bf:7c:16:0a:8b:ac:ee:9e:34:37:35:90:57:8d:a4:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:63:2C:68:FA:07:9B:92:16:CB:E4:C3:BD:B2:B4:F4:65:41:84
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NapjLGj6B5uSFsvkw72ytPRlQYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:7:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:f9:f7:67:57:8b:5e:70:44:98:8e:d3:90:98:b6:21:d0:a9:
         f7:ff:b2:f8:6c:cc:48:f8:e2:e8:38:a0:55:49:14:a1:da:66:
         06:ae:ad:c7:67:5d:b8:49:ce:6e:f1:4c:02:76:1b:ae:8c:84:
         33:78:8c:36:6d:7f:a2:ee:2c:60:a0:ef:32:f5:22:c4:7f:5f:
         91:16:aa:d3:31:ba:9a:1d:b5:58:44:6f:37:f8:39:ca:6c:0f:
         9e:be:d0:37:d9:6b:b9:da:ca:f5:7e:be:2e:5e:17:43:72:92:
         a8:68:a6:23:67:b4:93:de:4f:e9:8d:d1:da:04:21:c7:97:6c:
         3d:62:17:a0:81:6b:12:f4:a4:56:4e:4f:55:b7:75:c7:53:8c:
         13:bb:87:69:82:df:bf:89:4d:df:3b:8f:7f:be:68:17:5e:9b:
         56:0d:85:9f:18:94:b2:5f:73:13:1c:8c:b2:ba:79:d7:25:0c:
         11:c2:4b:eb:49:16:fd:80:0b:04:4b:c0:00:70:7d:69:75:3d:
         64:24:15:fa:e6:bd:16:94:c4:56:fd:02:60:e3:0f:b7:0c:f8:
         3a:fc:3b:ec:fb:ab:e1:e5:f2:b9:5e:4a:02:e4:56:ef:51:8d:
         af:19:53:b8:ef:f1:85:b2:32:4e:5c:b5:70:97:6e:87:b8:cd:
         54:7c:4d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----