Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa
File:                     Ql_t9T3E18xRsdvzzhArDP62O9Y.roa (raw, json)
Hash identifier:          lVdtXN5qZoOW4vWsXAQhlaURER7cZ7dl+ezaUGkoK/I=
Subject key identifier:   42:5F:ED:F5:3D:C4:D7:CC:51:B1:DB:F3:CE:10:2B:0C:FE:B6:3B:D6
Certificate issuer:       /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial:       01856F796C4B95A3DBA00A524E79E0B9D48D
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa
Signing time:             Sun 01 Jan 2023 22:35:06 +0000
ROA not before:           Sun 01 Jan 2023 22:35:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42845
IP address blocks:        2a00:7200::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:6c:4b:95:a3:db:a0:0a:52:4e:79:e0:b9:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
        Validity
            Not Before: Jan  1 22:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=425fedf53dc4d7cc51b1dbf3ce102b0cfeb63bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:f7:4e:79:31:a7:eb:5f:29:ff:27:64:bc:
                    a8:09:c9:62:80:9e:bd:8a:2f:f5:b2:6b:5b:53:e3:
                    bc:4f:f0:76:c3:7f:15:94:1e:1d:10:7b:4e:0d:b3:
                    ef:60:d9:25:70:ed:dd:a9:68:83:eb:65:99:d5:f9:
                    aa:9e:91:a4:70:e5:90:c3:db:13:be:6d:63:e3:c3:
                    73:2a:02:13:35:c7:98:d9:d9:71:ad:a4:cc:14:55:
                    fb:b0:55:2f:d2:99:f6:56:91:0c:16:a7:a4:c2:95:
                    57:2f:6f:68:63:d3:04:7c:81:85:f1:ac:51:2f:a0:
                    58:67:73:52:54:fa:2e:01:7e:ff:b2:76:09:47:05:
                    27:1e:b6:71:9c:6d:09:dd:5e:6a:38:ba:24:56:e1:
                    20:35:d2:94:26:d3:43:82:1f:05:9c:fe:31:8e:0a:
                    0b:ef:ef:47:5d:d2:71:1b:16:38:55:c6:6a:be:9d:
                    1b:a1:2c:f9:9e:44:66:b8:c8:4d:f4:ff:4c:8c:4d:
                    34:3c:5a:c7:56:e5:d9:f2:46:b2:06:c8:7a:0a:7f:
                    31:af:3d:aa:b0:32:03:61:01:85:d0:95:5b:6d:1d:
                    ea:29:ef:4c:f5:4a:54:0e:ac:0a:a2:df:2c:2c:a9:
                    6c:d0:a9:9a:f2:83:69:ee:df:73:0a:d2:77:66:ae:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5F:ED:F5:3D:C4:D7:CC:51:B1:DB:F3:CE:10:2B:0C:FE:B6:3B:D6
            X509v3 Authority Key Identifier:
                keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/Ql_t9T3E18xRsdvzzhArDP62O9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:56:66:e6:5a:9a:ed:b7:55:1f:ff:7a:98:47:45:2c:2d:36:
         8c:37:35:b8:45:78:2a:e9:76:7a:ae:8b:9e:ca:c0:5c:42:c0:
         6d:27:28:79:c0:9e:5f:d7:06:cf:0a:ad:5b:37:9d:30:b7:e2:
         31:41:74:f7:9b:76:fc:31:9c:9a:ed:a1:79:7d:bc:a7:72:19:
         e1:96:36:16:94:69:89:35:7f:1a:fd:2a:fb:68:2e:6e:4a:ed:
         89:23:cb:45:cb:39:cc:13:ba:d0:ce:a9:4b:a1:7b:7e:d8:d5:
         0c:a1:30:a5:d8:6b:11:e0:89:bc:73:76:34:1f:b2:10:54:8b:
         8b:b2:3c:4c:2c:7e:e2:75:43:e6:60:b9:5a:13:27:99:2e:42:
         b9:3a:54:13:2e:33:8d:71:9b:60:c7:3a:02:2a:eb:01:06:57:
         9e:b5:32:0b:6b:20:64:05:1a:1b:31:a0:0e:6a:7f:37:20:50:
         1f:00:56:ef:0f:73:ce:5d:4c:e0:2f:60:b6:3d:ac:9f:ec:e3:
         27:01:05:08:e5:30:a1:40:38:de:7e:7a:27:50:65:a4:d9:d8:
         5b:07:2a:95:58:a9:67:7b:1d:7d:ec:d1:05:b1:34:bf:b1:1d:
         da:8a:d8:e8:23:6b:cf:5c:b9:79:41:6d:d9:d8:c7:5c:48:88:
         88:7a:6b:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVveWxLlaPboApSTnngudSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4
YjE0ZDYwHhcNMjMwMTAxMjIzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjVmZWRmNTNkYzRkN2NjNTFiMWRiZjNjZTEwMmIwY2ZlYjYzYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeP3Tnkxp+tfKf8nZLyoCcligJ69
ii/1smtbU+O8T/B2w38VlB4dEHtODbPvYNklcO3dqWiD62WZ1fmqnpGkcOWQw9sT
vm1j48NzKgITNceY2dlxraTMFFX7sFUv0pn2VpEMFqekwpVXL29oY9MEfIGF8axR
L6BYZ3NSVPouAX7/snYJRwUnHrZxnG0J3V5qOLokVuEgNdKUJtNDgh8FnP4xjgoL
7+9HXdJxGxY4VcZqvp0boSz5nkRmuMhN9P9MjE00PFrHVuXZ8kayBsh6Cn8xrz2q
sDIDYQGF0JVbbR3qKe9M9UpUDqwKot8sLKls0Kma8oNp7t9zCtJ3Zq5vrQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEJf7fU9xNfMUbHb884QKwz+tjvWMB8GA1UdIwQY
MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt
NDhiOGI1YTliNDExLzEvUWxfdDlUM0UxOHhSc2R2enpoQXJEUDYyTzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx
LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgByADAN
BgkqhkiG9w0BAQsFAAOCAQEAVVZm5lqa7bdVH/96mEdFLC02jDc1uEV4Kul2eq6L
nsrAXELAbScoecCeX9cGzwqtWzedMLfiMUF095t2/DGcmu2heX28p3IZ4ZY2FpRp
iTV/Gv0q+2gubkrtiSPLRcs5zBO60M6pS6F7ftjVDKEwpdhrEeCJvHN2NB+yEFSL
i7I8TCx+4nVD5mC5WhMnmS5CuTpUEy4zjXGbYMc6AirrAQZXnrUyC2sgZAUaGzGg
Dmp/NyBQHwBW7w9zzl1M4C9gtj2sn+zjJwEFCOUwoUA43n56J1BlpNnYWwcqlVip
Z3sdfezRBbE0v7Ed2orY6CNrz1y5eUFt2djHXEiIiHprcQ==
-----END CERTIFICATE-----