Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa
File:                     Ga-WcRb9G_V0l09MOLdSXhxGem4.roa (raw, json)
Hash identifier:          ZxbzMmfmtY6cXd0wdYqtG/z2jnbAV35aW1JoEoIKiPo=
Subject key identifier:   19:AF:96:71:16:FD:1B:F5:74:97:4F:4C:38:B7:52:5E:1C:46:7A:6E
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018C0FCFBC132A0D7A17E46D4990FB08A87D
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa
Signing time:             Mon 27 Nov 2023 08:05:21 +0000
ROA not before:           Mon 27 Nov 2023 08:05:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198231
IP address blocks:        2a10:9c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:cf:bc:13:2a:0d:7a:17:e4:6d:49:90:fb:08:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Nov 27 08:05:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19af967116fd1bf574974f4c38b7525e1c467a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:62:68:8b:67:2b:2f:c9:1f:17:ef:bb:32:
                    44:4c:de:13:5f:b2:f2:95:4b:bf:aa:b2:80:f1:e2:
                    6b:11:de:f8:5a:ee:31:53:c1:de:c7:c7:70:6f:2d:
                    a4:3c:2c:10:be:cd:2d:9c:34:d2:7a:82:f3:8d:86:
                    a7:a5:b6:f7:e3:70:0f:fb:d8:ff:5c:05:eb:21:e5:
                    59:70:38:b7:43:5c:40:46:5d:46:12:b9:b3:a5:89:
                    a5:81:23:23:d1:83:b0:79:56:c2:b6:83:84:a3:dc:
                    64:46:05:5c:2f:6e:19:0b:26:4e:99:d7:db:8a:fe:
                    0f:3e:be:2f:c5:aa:1b:60:90:c9:74:6d:43:c3:01:
                    75:36:11:ac:bf:d2:2e:b0:3a:32:57:67:b7:55:f4:
                    e0:87:2d:aa:2f:61:39:e1:1a:7b:d3:df:e4:0e:e0:
                    2b:c4:65:57:eb:43:77:e8:c8:53:50:24:a7:cb:bd:
                    a1:b6:b1:88:e0:6f:f9:c4:24:82:4d:bb:08:cd:5f:
                    59:d5:4a:8b:b1:42:d2:64:64:3f:c3:1d:9d:79:1d:
                    32:14:06:ad:4e:7a:3a:17:b7:e9:aa:4b:e5:d3:ec:
                    d2:13:ae:79:bb:c4:f4:c4:88:8b:c7:b0:b5:91:ac:
                    93:e9:83:c9:ec:b0:32:3c:dc:c0:58:09:fe:33:58:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:96:71:16:FD:1B:F5:74:97:4F:4C:38:B7:52:5E:1C:46:7A:6E
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Ga-WcRb9G_V0l09MOLdSXhxGem4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:15:ce:4e:3a:5e:77:7e:54:96:2f:6e:d8:7f:07:2a:1a:db:
         5a:7c:1a:96:f8:7b:84:ff:30:ed:61:04:f7:25:e9:c5:e3:e8:
         73:b6:9c:f8:c7:bb:b1:36:18:6c:94:54:6a:7d:e6:25:63:c7:
         5a:f6:e6:ff:da:d3:30:19:5d:47:25:47:bd:54:7b:42:79:db:
         6e:32:ab:5b:ee:1f:35:68:16:0d:64:c5:b3:e4:55:0f:20:e0:
         bd:4e:00:6d:ce:0a:31:e9:2e:82:d8:9d:4e:2e:11:2d:0d:20:
         ab:b8:8d:2a:2c:2e:9f:0c:63:14:52:18:e6:5b:a4:88:c6:30:
         6e:da:0a:f4:a8:70:e6:1e:52:42:45:f2:1c:cf:04:c2:26:76:
         40:85:18:b4:9c:a5:29:e1:f2:73:96:39:53:a2:ce:bb:4c:55:
         9f:61:32:91:e8:3c:15:13:f5:22:17:5b:2e:52:38:ab:d1:1e:
         dc:26:70:4d:bb:3d:b9:fb:e2:68:c2:bd:fc:bd:f5:81:fd:00:
         26:21:c4:a1:15:f1:28:dd:5e:f3:89:48:7b:2c:43:e1:5a:db:
         39:db:07:7a:87:46:37:33:83:70:15:cc:44:a6:f2:af:bc:3f:
         35:10:5c:f7:67:9c:c6:7e:25:1f:97:21:7c:cd:06:2f:fc:20:
         fd:39:e6:de
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYwPz7wTKg16F+RtSZD7CKh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjMxMTI3MDgwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWFmOTY3MTE2ZmQxYmY1NzQ5NzRmNGMzOGI3NTI1ZTFjNDY3YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjapiaItnKy/JHxfvuzJETN4TX7Ly
lUu/qrKA8eJrEd74Wu4xU8Hex8dwby2kPCwQvs0tnDTSeoLzjYanpbb343AP+9j/
XAXrIeVZcDi3Q1xARl1GErmzpYmlgSMj0YOweVbCtoOEo9xkRgVcL24ZCyZOmdfb
iv4PPr4vxaobYJDJdG1DwwF1NhGsv9IusDoyV2e3VfTghy2qL2E54Rp709/kDuAr
xGVX60N36MhTUCSny72htrGI4G/5xCSCTbsIzV9Z1UqLsULSZGQ/wx2deR0yFAat
Tno6F7fpqkvl0+zSE655u8T0xIiLx7C1kayT6YPJ7LAyPNzAWAn+M1izhwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBmvlnEW/Rv1dJdPTDi3Ul4cRnpuMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvR2EtV2NSYjlHX1YwbDA5TU9MZFNYaHhHZW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhAJwDAN
BgkqhkiG9w0BAQsFAAOCAQEARRXOTjped35Uli9u2H8HKhrbWnwalvh7hP8w7WEE
9yXpxePoc7ac+Me7sTYYbJRUan3mJWPHWvbm/9rTMBldRyVHvVR7QnnbbjKrW+4f
NWgWDWTFs+RVDyDgvU4Abc4KMekugtidTi4RLQ0gq7iNKiwunwxjFFIY5lukiMYw
btoK9Khw5h5SQkXyHM8EwiZ2QIUYtJylKeHyc5Y5U6LOu0xVn2Eykeg8FRP1Ihdb
LlI4q9Ee3CZwTbs9ufviaMK9/L31gf0AJiHEoRXxKN1e84lIeyxD4VrbOdsHeodG
NzODcBXMRKbyr7w/NRBc92ecxn4lH5chfM0GL/wg/Tnm3g==
-----END CERTIFICATE-----