Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/7fpdLRAjNBdhg2pf-1qe1fZZFcE.roa
File:                     7fpdLRAjNBdhg2pf-1qe1fZZFcE.roa (raw, json)
Hash identifier:          1QAP4YtPVae8jmjDqhOM1APAkEopOlOUsUQ3+gBproY=
Subject key identifier:   ED:FA:5D:2D:10:23:34:17:61:83:6A:5F:FB:5A:9E:D5:F6:59:15:C1
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       01856B8104ADC25583BD5D75C510BDC60EE9
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/7fpdLRAjNBdhg2pf-1qe1fZZFcE.roa
Signing time:             Sun 01 Jan 2023 04:04:55 +0000
ROA not before:           Sun 01 Jan 2023 04:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16223
IP address blocks:        2a00:1210:fffd::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:81:04:ad:c2:55:83:bd:5d:75:c5:10:bd:c6:0e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Jan  1 04:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edfa5d2d1023341761836a5ffb5a9ed5f65915c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:4d:98:32:66:7b:4e:bb:59:7d:95:78:cb:
                    c5:47:da:cd:4e:8d:a8:b8:b2:c7:62:31:22:6a:d8:
                    de:7c:66:3d:d4:c4:2c:66:6b:61:a9:6f:30:a8:2b:
                    bf:d8:e2:e3:bf:59:c3:a2:d6:ed:f1:b5:18:6f:bd:
                    5e:5d:1e:0a:b6:d8:51:bd:b5:aa:87:59:85:d2:b6:
                    2c:bb:25:3c:47:99:fa:17:d6:71:97:27:ba:3a:6c:
                    65:0a:7a:68:2a:b6:91:60:34:b9:87:91:ee:a4:91:
                    cb:f2:0d:74:81:0f:a0:81:c0:18:70:be:10:48:27:
                    ed:d0:a2:c6:b4:93:79:1c:da:c8:11:9e:f8:7b:c3:
                    6b:7f:c5:d6:32:0a:b9:78:d5:e3:da:50:36:94:c1:
                    2a:fc:d3:fb:c5:24:59:df:7f:c7:96:12:4f:d1:3a:
                    31:77:f2:a5:e8:d4:6a:70:bd:28:b3:95:84:51:7b:
                    92:a2:73:01:85:3e:1b:ce:60:e3:02:f1:07:08:df:
                    ff:1b:e6:22:5b:ac:a3:79:ec:84:06:15:76:00:33:
                    dd:ae:83:a8:cb:0e:77:d0:d3:5f:fb:ff:5c:08:68:
                    36:81:0c:89:68:12:49:0b:f3:21:d8:a0:58:16:5b:
                    f8:f3:79:c2:cb:e9:b5:2b:36:2d:56:e9:cf:54:8b:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:5D:2D:10:23:34:17:61:83:6A:5F:FB:5A:9E:D5:F6:59:15:C1
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/7fpdLRAjNBdhg2pf-1qe1fZZFcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1210:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:f8:be:24:df:cb:cf:02:1d:15:8b:7c:24:b4:ef:a6:bc:
         0d:fa:fb:02:c7:5d:bb:2e:b2:56:01:5a:9d:56:99:39:b5:c6:
         e3:54:27:7e:9a:7d:f7:e8:b0:61:2d:6b:d7:e2:a4:6a:1b:66:
         7c:fd:32:66:57:8a:78:d5:fc:68:a3:1c:16:6f:f8:25:40:db:
         c6:25:f6:4e:66:cf:b2:ee:e6:f5:50:de:dd:eb:a5:94:eb:15:
         28:a3:6d:79:84:f3:e9:24:1a:33:fc:1e:33:59:29:dd:06:0d:
         02:f6:fb:46:1f:97:d8:1d:c3:58:b2:38:e1:1b:b7:1d:a9:06:
         00:7e:df:96:78:74:58:f6:9a:42:c7:fe:0a:75:99:35:b4:62:
         77:3a:f7:cc:1d:fb:9d:63:ad:7d:5b:6d:8a:00:47:ad:e8:cc:
         18:7d:c5:1a:b9:c0:74:3b:b5:ee:81:1b:ec:d3:a1:1b:62:fb:
         a2:92:34:b0:d8:78:5e:25:0a:4d:17:43:56:05:f4:90:10:49:
         42:d7:57:93:aa:9b:c7:c8:b9:3a:b1:61:ce:1f:a2:d1:91:f4:
         07:be:04:f9:10:57:a3:b1:a8:da:77:56:cb:26:ac:e8:56:74:
         c1:0e:b3:12:c8:a4:1a:25:17:b6:f7:74:75:ed:a4:e9:f5:47:
         43:d0:67:18
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVrgQStwlWDvV11xRC9xg7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh
ZmY3YTgwHhcNMjMwMTAxMDQwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGZhNWQyZDEwMjMzNDE3NjE4MzZhNWZmYjVhOWVkNWY2NTkxNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVdNmDJme067WX2VeMvFR9rNTo2o
uLLHYjEiatjefGY91MQsZmthqW8wqCu/2OLjv1nDotbt8bUYb71eXR4KtthRvbWq
h1mF0rYsuyU8R5n6F9Zxlye6OmxlCnpoKraRYDS5h5HupJHL8g10gQ+ggcAYcL4Q
SCft0KLGtJN5HNrIEZ74e8Nrf8XWMgq5eNXj2lA2lMEq/NP7xSRZ33/HlhJP0Tox
d/Kl6NRqcL0os5WEUXuSonMBhT4bzmDjAvEHCN//G+YiW6yjeeyEBhV2ADPdroOo
yw530NNf+/9cCGg2gQyJaBJJC/Mh2KBYFlv483nCy+m1KzYtVunPVItHmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO36XS0QIzQXYYNqX/tantX2WRXBMB8GA1UdIwQY
MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt
Y2M5YTc1OGM5OTE2LzEvN2ZwZExSQWpOQmRoZzJwZi0xcWUxZlpaRmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2
LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgASEP/9
MA0GCSqGSIb3DQEBCwUAA4IBAQAsrvi+JN/LzwIdFYt8JLTvprwN+vsCx127LrJW
AVqdVpk5tcbjVCd+mn336LBhLWvX4qRqG2Z8/TJmV4p41fxooxwWb/glQNvGJfZO
Zs+y7ub1UN7d66WU6xUoo215hPPpJBoz/B4zWSndBg0C9vtGH5fYHcNYsjjhG7cd
qQYAft+WeHRY9ppCx/4KdZk1tGJ3OvfMHfudY619W22KAEet6MwYfcUaucB0O7Xu
gRvs06EbYvuikjSw2HheJQpNF0NWBfSQEElC11eTqpvHyLk6sWHOH6LRkfQHvgT5
EFejsajad1bLJqzoVnTBDrMSyKQaJRe293R17aTp9UdD0GcY
-----END CERTIFICATE-----