Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa
File:                     V7BqcYDuXzPyIgHgPV4yLQjGajY.roa (raw, json)
Hash identifier:          4zFLN4x0IJ56W0+xNYtF/EPoM3q/Y0/El2pGjDDyBX4=
Subject key identifier:   57:B0:6A:71:80:EE:5F:33:F2:22:01:E0:3D:5E:32:2D:08:C6:6A:36
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018571D7BD13C45D3A8A59F963AC65DE14F3
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa
Signing time:             Mon 02 Jan 2023 09:37:22 +0000
ROA not before:           Mon 02 Jan 2023 09:37:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24595
IP address blocks:        2a04:9a01:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:bd:13:c4:5d:3a:8a:59:f9:63:ac:65:de:14:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Jan  2 09:37:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57b06a7180ee5f33f22201e03d5e322d08c66a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:46:2e:46:b7:e4:60:e5:9f:f5:4d:e1:86:
                    c3:61:bf:8d:87:e7:95:f9:d9:8a:38:57:25:fb:e9:
                    33:45:24:64:9a:4f:fc:e3:50:01:4c:7b:39:ea:cf:
                    e8:ee:77:e1:27:db:f9:c9:66:15:82:f0:71:c5:b9:
                    97:87:d5:c4:79:67:c3:45:17:22:ed:25:79:bd:63:
                    4c:0c:3a:20:64:0c:51:a9:b2:84:2e:62:c2:4c:3f:
                    3e:e0:94:62:dc:e0:47:fa:4e:3b:15:16:e3:84:3d:
                    af:52:f2:fb:b2:02:02:46:a7:c2:46:f8:c7:38:54:
                    af:97:55:9e:75:57:8c:a4:5e:35:2c:3b:1a:d3:fb:
                    24:d4:cf:c8:0c:d9:4e:36:e6:2c:ee:7d:a4:6b:17:
                    f0:fc:39:2a:b6:6d:64:bd:d9:42:3a:c2:fb:a2:16:
                    34:39:7f:1e:7e:c8:a9:f5:11:23:ad:4e:62:a2:8d:
                    fd:ad:81:ea:97:34:3c:14:09:dd:0f:17:ae:b8:6f:
                    2a:ad:15:5f:ac:19:ad:7f:31:2a:e2:e4:24:94:86:
                    c2:00:bc:4d:fc:a3:2f:f1:f7:bd:76:50:ce:b0:7a:
                    36:f7:73:5e:a5:d6:76:6a:33:f9:2a:1d:94:55:3a:
                    fd:2a:0e:c3:b1:49:7d:18:5d:5c:49:73:bb:6f:3b:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B0:6A:71:80:EE:5F:33:F2:22:01:E0:3D:5E:32:2D:08:C6:6A:36
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:9a01:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         98:25:fe:04:1d:80:65:54:f5:6c:09:2c:ce:62:1e:04:ac:7b:
         a4:6a:01:1f:2b:e8:55:07:a3:8c:af:57:d1:52:47:1e:ba:f8:
         69:ff:dc:a9:a0:7c:4b:50:d2:48:1b:c4:0e:da:14:d0:7c:b5:
         95:a4:f7:8d:ec:8f:18:a9:8b:33:26:3f:59:43:09:82:ca:f2:
         e7:26:c8:08:2b:0e:da:2a:41:26:5a:75:aa:54:dc:64:bd:65:
         ed:61:cb:b1:b1:6c:7b:86:26:04:67:06:db:c8:43:30:86:7e:
         16:8d:8b:d3:c6:00:1f:f3:55:a3:da:46:87:05:8c:22:b1:58:
         21:c4:6b:31:80:2e:09:6c:bc:78:48:01:01:67:1a:23:23:13:
         30:8d:4b:d1:5b:c5:a3:d2:88:0d:56:97:38:80:5e:89:a6:1e:
         78:01:3c:8e:ff:1d:db:79:60:0b:7d:0d:a5:9a:f7:5f:38:48:
         f7:2a:d3:f4:b8:6b:04:67:db:4a:33:d3:4d:84:74:5c:ab:63:
         3f:1a:b5:9f:54:b2:a5:ec:cc:a0:12:76:fb:00:48:31:56:e0:
         92:0f:75:8d:1e:e3:56:5e:d0:70:94:55:de:29:44:c1:de:1e:
         b5:6a:62:8e:91:13:bc:ce:91:50:d1:fa:cf:f2:24:7b:99:59:
         38:18:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----