Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa
File:                     9yJIUhmOsiplIY12ZKz4qcpPTIw.roa (raw, json)
Hash identifier:          YR/hPq3W83DP+1l3bk8xMV+0OB9nQgyVdu/+hM/IEZQ=
Subject key identifier:   F7:22:48:52:19:8E:B2:2A:65:21:8D:76:64:AC:F8:A9:CA:4F:4C:8C
Certificate issuer:       /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial:       01856B93504CD0BF20879C4E47D540FA8366
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa
Signing time:             Sun 01 Jan 2023 04:24:54 +0000
ROA not before:           Sun 01 Jan 2023 04:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206290
IP address blocks:        2001:67c:9e0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:93:50:4c:d0:bf:20:87:9c:4e:47:d5:40:fa:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
        Validity
            Not Before: Jan  1 04:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7224852198eb22a65218d7664acf8a9ca4f4c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:bc:f4:6a:52:c4:50:62:70:80:a8:79:36:
                    54:dd:4e:5c:8b:64:63:4c:99:a9:38:e8:02:87:b2:
                    82:83:b2:24:c0:f3:cf:11:6b:37:d8:33:54:f1:eb:
                    c3:d1:20:ff:47:cd:e5:64:de:9a:79:a8:b9:2f:4a:
                    98:67:b1:b7:10:be:3f:49:a9:6d:35:d7:4e:8c:58:
                    7e:6f:b0:7a:d0:35:e1:1b:bf:a7:6f:ee:be:56:50:
                    3e:18:4e:bc:92:c2:a8:e7:65:a3:7c:f0:1f:7b:4e:
                    45:19:ac:dd:ed:77:96:3a:b3:17:75:06:0b:4e:6c:
                    17:49:12:12:53:27:86:52:39:bd:0d:de:21:26:20:
                    25:c5:9b:08:3d:d7:76:a2:5d:91:44:3f:95:26:7c:
                    3f:2e:a0:3b:21:85:45:60:f6:a8:5a:ed:56:0b:a1:
                    e1:04:38:f6:f6:5f:2c:fa:4f:51:00:85:d6:d3:d6:
                    db:6b:37:f9:10:22:e8:6a:96:c9:b3:08:b6:38:7b:
                    72:06:86:de:70:de:93:b3:9a:14:9b:6b:42:67:5c:
                    15:05:c9:5d:8c:0c:0e:df:83:18:bd:2b:55:ef:ca:
                    44:85:ff:9c:b3:56:43:fa:df:08:be:d5:cd:29:21:
                    db:52:1e:2a:26:1d:9c:b4:c3:ef:8f:b5:16:ea:37:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:48:52:19:8E:B2:2A:65:21:8D:76:64:AC:F8:A9:CA:4F:4C:8C
            X509v3 Authority Key Identifier:
                keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/9yJIUhmOsiplIY12ZKz4qcpPTIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:30:72:33:6e:d1:70:52:e4:ce:85:25:74:3c:61:37:27:8a:
         fa:c6:18:dc:0d:d0:ea:ec:09:86:e2:a5:95:89:e9:86:bf:b7:
         9e:ba:1a:a5:68:ed:8b:17:04:64:43:8e:24:d1:5d:a8:34:60:
         c2:38:77:51:53:bd:16:da:23:f4:b2:67:93:f0:96:87:9e:bc:
         bd:48:57:1f:ee:e3:8d:1b:61:ce:39:68:ed:98:f2:a4:55:41:
         61:0e:e0:9b:22:e4:89:6d:7c:31:0e:da:bd:68:16:82:15:65:
         86:45:98:59:1e:ef:86:9f:7b:f7:d7:f7:ea:62:16:79:85:7f:
         98:38:ea:b7:e1:25:3c:e3:2e:9f:3a:36:72:eb:a7:4d:64:4f:
         30:9a:58:e7:8c:90:53:e1:0f:e4:38:9f:fe:0c:3d:b1:b1:24:
         78:57:34:85:e9:74:f1:11:04:bb:08:ec:3e:1d:72:30:5e:c6:
         2d:e6:15:d1:4b:0c:96:21:24:4d:d2:4a:60:0d:e4:bf:03:c4:
         fc:03:bc:64:e5:72:58:39:01:b2:52:d6:f0:ee:5a:da:3a:58:
         5e:7e:64:bc:df:eb:4e:cb:72:6a:8c:2c:31:c1:b6:2c:f8:b7:
         d7:da:04:df:22:c7:d5:5a:ee:93:84:e7:fb:68:81:7f:2f:db:
         b3:73:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----