Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa
File:                     7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa (raw, json)
Hash identifier:          KZCQEP0YkF5QzLwmTPvo8FIWL4NpA8fHCUmTzo7LmG0=
Subject key identifier:   ED:01:A5:E4:00:1E:14:2D:C1:62:23:27:86:5F:4C:E9:9D:FB:9A:08
Certificate issuer:       /CN=e93114001872fabc939db6bedc1e6cd691462117
Certificate serial:       01856E264D0FEA5B31283AB3142B25E43A85
Authority key identifier: E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa
Signing time:             Sun 01 Jan 2023 16:24:41 +0000
ROA not before:           Sun 01 Jan 2023 16:24:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207901
IP address blocks:        2a0f:5740::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:4d:0f:ea:5b:31:28:3a:b3:14:2b:25:e4:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93114001872fabc939db6bedc1e6cd691462117
        Validity
            Not Before: Jan  1 16:24:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed01a5e4001e142dc1622327865f4ce99dfb9a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:d0:52:02:e6:7a:1e:8d:40:cd:80:d5:d6:
                    7c:c3:54:9f:f5:90:16:06:1b:4d:6d:e0:1d:d5:2c:
                    61:0e:37:35:7a:16:34:bf:a7:23:4b:a4:f8:85:d3:
                    4b:64:8e:42:ad:63:2b:51:ef:2a:d0:d1:d3:a0:b7:
                    70:9e:a1:33:00:c3:f5:9f:0c:c2:3a:3e:6c:91:ce:
                    e8:1a:4b:84:1e:e7:8f:c7:25:47:c6:5b:d2:d2:5b:
                    0d:4c:f4:8f:19:87:db:c7:44:f6:9a:c4:ba:be:3b:
                    c4:1b:23:46:f4:72:de:3f:c5:f9:e4:2a:67:ea:5d:
                    21:af:fb:5a:e0:6b:f6:5c:8c:e4:eb:76:b9:55:9d:
                    18:81:d3:28:a0:1a:84:16:8a:ba:04:ce:f1:ee:c7:
                    f0:c9:83:91:ff:58:a4:3c:5d:04:e7:b7:0a:46:16:
                    5b:25:1c:8d:0e:c5:ff:f7:94:0b:bc:2b:a2:4d:81:
                    4c:dc:3d:39:a3:3f:8d:e3:ae:43:b3:e8:04:be:72:
                    a8:7a:6d:0b:19:bf:e6:c4:eb:95:27:3d:d1:c4:d0:
                    bb:b7:2a:e5:b5:1d:18:cd:ad:5b:ca:bd:2c:f0:11:
                    a5:c7:be:12:10:30:66:59:05:ef:84:10:dd:31:ea:
                    b9:1f:01:4e:f7:4c:c1:13:23:26:43:bb:43:9d:23:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:01:A5:E4:00:1E:14:2D:C1:62:23:27:86:5F:4C:E9:9D:FB:9A:08
            X509v3 Authority Key Identifier:
                keyid:E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/7QGl5AAeFC3BYiMnhl9M6Z37mgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5740::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:c4:2e:ef:17:c8:0b:df:9e:e2:fa:ee:c9:11:55:04:34:c2:
         3b:ca:4c:3c:30:57:ac:3e:8d:7b:81:53:83:15:33:6d:f1:70:
         dc:e6:b3:b8:5b:57:de:20:94:21:ee:79:49:71:c5:70:a0:38:
         70:19:62:c7:bf:a5:e3:d7:49:03:7b:73:e8:16:bc:5d:b3:18:
         9a:92:27:0b:87:36:01:4c:43:0b:c5:83:dc:9d:0c:08:6e:dc:
         ae:cb:c4:bf:37:ca:86:25:a9:0c:34:de:4b:0e:ee:83:04:d7:
         2c:1e:19:1d:60:eb:71:fe:45:3e:0a:8b:29:16:4c:1b:94:75:
         60:8b:dc:5c:02:56:9b:ee:9b:bc:79:61:bd:f4:4a:26:3a:6f:
         dd:56:db:3a:3a:89:8c:6b:63:77:00:62:4f:f5:a5:be:10:a7:
         19:96:d9:96:01:42:22:4c:1b:14:45:c3:ca:c9:3c:4d:c1:63:
         74:38:b5:89:43:d0:2c:03:1b:28:98:f5:77:51:58:cb:d8:1e:
         97:4e:e5:ee:b5:5e:5b:2d:3d:b8:62:4f:d3:33:27:e9:8c:70:
         c7:1c:e7:00:af:5c:37:6a:d2:df:3f:61:ca:de:3d:aa:5c:61:
         2a:56:22:71:95:39:10:1e:c5:9a:67:99:39:18:01:a8:a8:b0:
         5d:2f:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----