Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/QmzvVbfPtMtANADd71wrcQzkG1U.roa
File:                     QmzvVbfPtMtANADd71wrcQzkG1U.roa (raw, json)
Hash identifier:          vWxhtr7cDfG0l/mG2gT6XzX/PDG9zOk2HDl0kqbb8jU=
Subject key identifier:   42:6C:EF:55:B7:CF:B4:CB:40:34:00:DD:EF:5C:2B:71:0C:E4:1B:55
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       0185A10B352226F0165EC29EA1E7AB671586
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/QmzvVbfPtMtANADd71wrcQzkG1U.roa
Signing time:             Wed 11 Jan 2023 13:35:44 +0000
ROA not before:           Wed 11 Jan 2023 13:35:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        155.254.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a1:0b:35:22:26:f0:16:5e:c2:9e:a1:e7:ab:67:15:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan 11 13:35:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=426cef55b7cfb4cb403400ddef5c2b710ce41b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:a9:d8:d9:4e:39:61:8f:7a:9c:b1:ba:10:
                    24:0f:5e:e9:16:8a:78:9e:1a:c3:c1:40:76:53:4a:
                    af:6d:24:44:3d:01:a6:eb:37:5b:ac:f2:5b:66:54:
                    ef:ff:cd:7a:e1:8d:8b:d0:76:61:78:4c:72:a0:44:
                    aa:a3:99:c9:60:56:ea:31:ee:83:38:25:a2:b5:54:
                    3d:07:e4:66:76:a8:7b:fc:40:ec:ab:60:2c:e4:f2:
                    3c:79:06:b6:a4:8f:20:3e:75:77:07:07:fa:a1:db:
                    dd:df:e6:13:6c:b4:d8:22:dd:09:ae:4f:8a:35:8e:
                    f2:2b:86:dd:41:d5:8d:c0:7f:27:6e:ab:90:b4:c9:
                    cf:97:a8:bb:e0:f9:71:df:57:50:ca:eb:46:77:98:
                    2b:c4:bb:bd:94:11:6a:04:f4:da:44:91:13:d4:c1:
                    02:fa:5c:ed:9f:d5:44:bb:84:ef:d0:34:c0:66:3c:
                    90:5b:84:51:12:22:24:31:94:d2:0a:26:33:60:db:
                    ac:f9:d3:6f:ce:c7:bb:6d:6d:aa:2e:25:8b:ec:62:
                    a9:f9:b7:6f:74:ef:cb:4d:c4:56:94:d6:a8:0f:79:
                    09:a9:3f:39:a2:b5:73:48:aa:3f:27:eb:34:a8:21:
                    c1:79:51:5a:7c:90:53:b3:0e:ea:5c:29:0f:84:ca:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6C:EF:55:B7:CF:B4:CB:40:34:00:DD:EF:5C:2B:71:0C:E4:1B:55
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/QmzvVbfPtMtANADd71wrcQzkG1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:05:e5:0b:1c:d5:3c:54:c6:73:a0:c5:5d:25:47:a6:ee:58:
         ad:2a:46:fc:bc:fe:6d:e9:fd:a2:a1:18:23:27:3a:8f:ce:dd:
         57:06:fb:2b:ac:b6:8c:42:93:f9:2c:b7:b8:e3:9d:22:c5:1a:
         0b:b8:33:92:97:cf:4e:2f:05:e4:d0:b5:a1:e7:88:fa:b5:e8:
         e6:aa:88:2d:8b:fb:98:56:fb:c8:d9:a4:1e:06:eb:1b:dc:1a:
         3a:ce:a9:b8:7a:e0:3b:02:11:22:f8:72:50:54:c2:fc:98:1d:
         df:91:75:93:85:6c:94:02:23:b1:84:1b:f0:75:29:05:a3:90:
         ac:e4:e0:3b:67:ba:8f:b7:61:56:e5:40:0c:f5:b4:0b:18:67:
         e6:20:e4:a2:15:e5:86:58:1a:37:f7:5a:87:cc:bc:86:69:33:
         4c:fc:24:95:11:c2:a7:40:9e:02:bf:d4:8f:1c:5e:2d:47:8d:
         79:e6:c8:c3:33:88:3d:3f:40:86:13:60:69:24:01:8b:27:9d:
         02:d0:3a:da:e8:89:3a:e4:e3:90:96:f3:c7:a2:4a:ba:69:32:
         a1:ac:93:3f:d2:92:21:50:b0:f6:03:4a:4c:6d:ae:d7:3c:3f:
         ad:27:55:94:8b:c5:70:f1:79:8e:8e:7e:00:4a:7a:44:7c:fa:
         56:60:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----