Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa
File:                     mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa (raw, json)
Hash identifier:          Uk7WaE1wgTgdiO0e2Nr1aPldp0TYbyl4Dz/1VHoef5Y=
Subject key identifier:   99:19:03:1D:19:97:61:6D:AB:14:42:2A:88:E8:F1:99:9B:D6:F1:01
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       018A8E50BBCF8DB7A5402BFA354B54E06723
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa
Signing time:             Wed 13 Sep 2023 11:32:50 +0000
ROA not before:           Wed 13 Sep 2023 11:32:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0d:d600::/42 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8e:50:bb:cf:8d:b7:a5:40:2b:fa:35:4b:54:e0:67:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: Sep 13 11:32:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9919031d1997616dab14422a88e8f1999bd6f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:ff:6a:63:18:48:ef:7f:1c:38:b2:e7:38:
                    42:6b:60:cc:65:65:17:9c:de:6e:b6:4a:90:9d:69:
                    bf:2d:af:34:e4:7c:e1:6e:59:56:aa:93:ca:db:6c:
                    7a:ce:99:c8:8e:8b:23:38:94:29:93:69:08:22:6d:
                    79:0f:b0:cf:78:4d:8b:e5:9a:97:ea:ca:8d:2a:43:
                    96:1c:2c:b7:2c:47:5b:f9:a8:32:96:46:2d:98:bc:
                    66:a0:57:6c:cb:b1:f0:49:86:a7:42:5d:e4:79:58:
                    75:e5:33:ad:ce:a1:d0:93:1f:86:ba:bd:e0:11:9f:
                    2b:2a:86:36:88:39:dd:b9:03:cd:d7:b2:66:d4:ef:
                    4f:51:9c:54:d0:a0:3f:a0:b8:9a:59:e3:75:8d:10:
                    41:77:7c:bd:cf:6e:48:9a:25:93:22:1f:34:18:0d:
                    95:9c:f2:79:fe:67:4a:0f:a8:7e:3d:80:11:ae:da:
                    75:ec:1b:ee:df:02:69:49:19:8b:26:cb:08:cb:46:
                    65:a9:e5:27:33:fa:01:56:98:d8:4a:3c:3e:e7:ff:
                    c5:c9:57:00:57:b7:7a:71:2b:a9:d8:5b:69:17:af:
                    58:a0:6b:3f:f1:9b:f6:e6:4d:bd:34:84:9d:e9:f1:
                    b5:60:aa:8b:0f:46:8b:1c:66:f9:97:86:37:ba:29:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:03:1D:19:97:61:6D:AB:14:42:2A:88:E8:F1:99:9B:D6:F1:01
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d600::/42

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:9f:22:b7:1d:f6:27:24:e4:b9:b7:56:6d:07:54:25:71:
         8e:e4:2d:da:ec:36:e0:09:92:f4:bc:41:ba:c7:cc:59:81:50:
         29:66:bf:52:87:7d:e8:55:c0:42:41:dd:e9:e9:81:73:0d:bf:
         6d:62:b2:cb:15:76:6a:40:79:58:ef:c4:6a:80:6b:8b:89:ae:
         b6:b7:cd:0f:db:46:e0:47:b8:64:cc:2d:f6:fa:a3:c9:b2:0a:
         c5:8d:33:20:26:e3:17:85:1b:35:33:30:bf:4b:67:70:71:2f:
         f9:74:25:97:06:83:76:05:68:e4:ea:c0:c8:59:7a:26:9b:a8:
         df:1b:3b:a0:4c:af:db:3f:04:b3:12:5e:52:36:9b:83:79:d1:
         d7:08:ae:45:2a:da:38:41:4b:32:0b:06:a1:a8:ab:3e:a2:6a:
         e2:c9:f6:f3:a5:93:d1:e6:e4:03:b8:04:9c:4a:fa:40:8c:26:
         02:ce:67:ad:8d:cd:3b:d9:69:eb:df:57:39:32:2c:85:f1:f2:
         7b:c9:04:47:34:63:d1:ef:14:67:cb:5c:bd:40:ea:e0:8f:79:
         b9:67:3f:40:76:f7:e4:b8:a2:19:85:94:4f:a3:6e:2f:61:10:
         8e:56:29:b2:c3:a4:3e:d0:ea:70:34:61:32:e5:16:75:93:75:
         83:c4:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----