Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/1-3yZ13QVhtKdmokYqkRYdbnjNoI.roa
File:                     1-3yZ13QVhtKdmokYqkRYdbnjNoI.roa (raw, json)
Hash identifier:          5SV/RtJlvk3PGdNdjPPi/5t3uGaINnLr1OvDngdwDeU=
Subject key identifier:   FB:7C:99:D7:74:15:86:D2:9D:9A:89:18:AA:44:58:75:B9:E3:36:82
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       01856F42A9EA40FF39F83AA4209B3B9D3F58
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/1-3yZ13QVhtKdmokYqkRYdbnjNoI.roa
Signing time:             Sun 01 Jan 2023 21:35:17 +0000
ROA not before:           Sun 01 Jan 2023 21:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208970
IP address blocks:        2a09:e440:100::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a9:ea:40:ff:39:f8:3a:a4:20:9b:3b:9d:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: Jan  1 21:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb7c99d7741586d29d9a8918aa445875b9e33682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:c8:44:a6:b4:ad:36:cb:e4:09:cc:a7:ee:
                    ef:61:7f:80:8f:2f:1f:6d:4e:79:f1:89:4d:08:1a:
                    3e:ea:c4:f9:c8:bb:af:a5:b8:91:1c:1d:3e:33:e0:
                    69:da:a6:22:9c:92:35:53:98:d7:c2:b3:19:9b:45:
                    fd:95:2f:ea:c0:0c:57:ee:11:46:c3:21:5e:00:05:
                    69:54:00:c5:68:18:b6:80:b4:1b:6d:03:6d:d4:ee:
                    e9:33:f6:c1:bc:19:15:50:26:91:59:08:6d:43:c8:
                    08:f7:bf:ad:e0:92:97:8c:92:0b:a5:be:e1:10:5c:
                    ba:58:c2:8c:e9:f9:9a:4e:9e:3f:aa:c8:35:e8:14:
                    30:56:f6:ca:f7:85:6c:38:cd:7b:8b:74:34:6d:ba:
                    7f:e9:d6:ae:24:6b:7a:ae:fb:28:bb:1b:76:7b:5c:
                    25:9f:bc:f3:27:7f:6e:c2:82:58:6a:c9:c9:97:03:
                    a5:0a:cc:04:d1:fb:90:bd:1d:38:c1:20:78:68:16:
                    61:8e:99:a0:7c:57:7b:4c:87:b6:cc:b4:6a:6f:b2:
                    fb:ee:6e:b1:35:c0:98:67:8a:3a:1e:66:0a:45:16:
                    82:f6:7c:82:a8:f1:5f:34:a6:8b:fb:26:0d:85:bb:
                    11:10:15:32:3c:9a:5f:0d:52:fc:a9:e0:c0:93:64:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:99:D7:74:15:86:D2:9D:9A:89:18:AA:44:58:75:B9:E3:36:82
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/1-3yZ13QVhtKdmokYqkRYdbnjNoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:e440:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:7a:cb:e5:fe:d3:b7:07:94:fc:9a:54:a4:3a:61:97:10:
         17:da:04:34:d2:2a:e3:a1:c1:eb:fa:5b:d7:72:69:25:4f:33:
         12:42:35:1f:7c:da:d7:aa:df:30:0e:ed:e8:09:f3:16:7b:33:
         85:47:12:67:18:68:4c:3c:de:ce:b4:a2:c6:df:f9:00:17:85:
         25:32:6f:50:da:8d:11:eb:3e:8f:80:8b:69:4d:56:48:2a:76:
         f5:33:93:a5:00:33:4f:5a:73:35:74:ad:6d:1e:d8:79:be:20:
         a5:ed:bd:c8:3d:e1:c4:13:48:28:12:ad:79:d8:79:a9:18:e9:
         12:79:84:c6:96:20:11:3a:81:b6:b4:57:0f:ac:d5:e0:5e:ca:
         02:55:1e:ed:21:a8:3b:9e:be:73:c8:99:2e:ee:32:fb:79:ea:
         0b:35:82:dc:a5:a3:17:da:11:8f:a9:af:40:d2:e0:02:09:c5:
         56:09:66:1e:79:61:95:84:f6:c1:49:0b:2a:e7:96:bd:36:78:
         44:1f:8e:62:d3:0f:53:0f:d0:11:47:00:5d:92:31:88:bc:34:
         8a:9f:6f:02:30:6e:2f:b1:b2:47:cd:6f:fc:bb:00:7a:d4:01:
         5e:24:ce:15:c2:27:0d:3f:6a:1b:e1:f0:f6:cc:00:46:e6:30:
         22:cd:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----