Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa
File:                     rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa (raw, json)
Hash identifier:          sxhP6zWRGLyuoj2ORGdbDe+0TiaXoHuwKGaGrp5TK0U=
Subject key identifier:   AF:1F:59:65:E4:D8:5A:00:41:7F:AD:19:8C:40:BF:11:9F:42:EA:D1
Certificate issuer:       /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial:       0187E84F1F6DD0B8E4023E815B039B6013F6
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa
Signing time:             Thu 04 May 2023 19:48:32 +0000
ROA not before:           Thu 04 May 2023 19:48:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29491
IP address blocks:        2a0b:ad00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e8:4f:1f:6d:d0:b8:e4:02:3e:81:5b:03:9b:60:13:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
        Validity
            Not Before: May  4 19:48:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af1f5965e4d85a00417fad198c40bf119f42ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:90:12:bb:c2:ae:4c:d2:32:18:d1:6b:24:
                    e8:ef:8f:36:a4:b0:b2:b9:ce:a9:aa:a1:60:ec:f1:
                    d2:7c:dd:ae:a5:50:45:90:af:1c:e8:50:6a:8c:54:
                    58:93:04:53:62:1d:41:a6:7a:a0:9c:6f:3a:9b:77:
                    24:21:a5:d0:2b:41:3d:90:87:13:c3:15:6e:6d:b4:
                    cd:76:42:cb:17:96:1f:54:2d:e6:4c:3a:d8:95:58:
                    f0:45:d0:4d:98:5c:c0:46:05:ff:94:1b:ab:01:dd:
                    8b:c4:35:8f:be:ee:00:fc:f0:d0:4c:46:c7:49:a0:
                    16:99:4f:46:4a:75:39:00:60:db:fd:a2:53:8c:19:
                    33:02:b1:2b:55:5e:2a:89:36:c5:60:5d:0d:35:23:
                    9f:4c:cd:68:6d:2e:e1:0f:11:ee:23:fd:6c:2f:e7:
                    af:28:74:fb:52:fa:a5:82:5e:3a:93:08:d7:51:ff:
                    6c:f2:28:44:a7:cb:73:ee:36:3f:23:42:41:ef:7c:
                    18:ea:66:56:84:06:78:e3:21:6b:52:1f:93:de:16:
                    c6:bf:3e:ec:88:ff:26:d7:75:22:6e:31:34:77:a8:
                    15:96:fb:c4:60:bd:c7:a3:37:3a:e8:86:ce:46:81:
                    8c:be:79:d2:0d:7b:09:75:c7:5d:04:05:f1:dd:87:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:59:65:E4:D8:5A:00:41:7F:AD:19:8C:40:BF:11:9F:42:EA:D1
            X509v3 Authority Key Identifier:
                keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:ad00::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:ba:bc:0c:b7:19:7e:6c:4f:fd:3e:78:89:58:b2:8e:b7:
         59:dd:0a:27:94:0d:50:31:dd:e8:ed:ca:9e:6c:60:48:89:50:
         b2:50:62:c1:c2:46:5a:e1:64:0f:e1:52:21:bb:a6:a4:37:e7:
         39:c4:43:23:15:31:84:b1:95:9e:64:e2:2b:1b:f8:aa:77:c9:
         e3:e0:75:67:a8:86:75:a9:bd:ae:0c:db:f6:06:ba:69:08:c7:
         18:a6:89:d6:6b:6c:c8:b4:64:5b:59:47:4a:38:7d:81:5a:05:
         1a:23:da:3b:96:57:d4:c8:2d:18:26:82:1c:6b:a1:d4:49:90:
         fb:11:c8:46:4e:e7:fc:30:8a:e6:2a:27:86:d1:fa:1d:75:4c:
         41:b6:aa:a7:f4:c9:71:16:68:66:c3:c3:01:b3:5d:23:95:2a:
         7c:ae:57:94:05:75:26:0f:f2:e0:be:d4:2f:ca:99:cc:7f:50:
         64:08:3c:a2:1f:2f:f3:54:ca:43:c2:6c:18:02:5d:66:a5:88:
         cd:0c:0a:81:91:3a:80:45:b2:39:61:f4:50:99:64:70:c5:c1:
         bf:a2:01:dc:62:cc:14:0f:51:64:2f:13:6d:81:71:e9:cf:7e:
         fd:c9:57:f3:6b:20:f9:25:39:54:1a:dd:ce:a5:11:02:51:c3:
         a3:cf:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----