Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/l0v4DVnU-ItYLGROwD8e9ay5SzI.roa
File:                     l0v4DVnU-ItYLGROwD8e9ay5SzI.roa (raw, json)
Hash identifier:          91U0l0bad/tRNQetDievRne0BJGBrRz9+ylsJCMcwWw=
Subject key identifier:   97:4B:F8:0D:59:D4:F8:8B:58:2C:64:4E:C0:3F:1E:F5:AC:B9:4B:32
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       0185E69578D0324D7C37F16C4B11605F4FD6
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/l0v4DVnU-ItYLGROwD8e9ay5SzI.roa
Signing time:             Wed 25 Jan 2023 01:40:33 +0000
ROA not before:           Wed 25 Jan 2023 01:40:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212865
IP address blocks:        185.82.103.0/24 maxlen: 24
                          2a05:8f00:8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e6:95:78:d0:32:4d:7c:37:f1:6c:4b:11:60:5f:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Jan 25 01:40:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=974bf80d59d4f88b582c644ec03f1ef5acb94b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:95:f4:71:6e:f2:ee:c0:db:3d:48:21:d4:
                    a7:8c:19:49:e8:aa:bf:b7:f7:f4:3a:be:bd:eb:b5:
                    05:6d:49:22:36:e9:24:f2:bd:30:ba:f6:10:1c:46:
                    51:a3:62:92:21:65:7f:60:c0:8e:72:8a:43:6f:c4:
                    2b:63:2e:92:b3:66:f2:9d:28:35:9b:57:49:ed:ff:
                    9b:b0:93:fe:e3:ea:3c:a9:b2:1c:5a:c4:dd:11:84:
                    a5:92:67:36:a9:45:56:a3:8f:66:f3:3f:ca:dc:4c:
                    7f:66:35:eb:97:dc:83:d2:b3:6e:36:53:4f:46:d4:
                    12:14:29:77:ab:d7:2b:63:b2:3d:d1:30:88:de:06:
                    9d:02:32:8e:31:55:d8:db:78:d6:55:e7:47:4f:d1:
                    28:fb:16:d0:24:d9:39:73:62:a3:27:0c:f8:65:ac:
                    c8:4c:cd:e8:8a:39:09:10:24:05:1c:e2:d5:6b:49:
                    79:0a:51:cb:9b:0e:86:9b:e0:3f:3a:39:60:6f:98:
                    04:3d:88:6a:63:7e:22:4c:f6:de:e5:f7:26:b9:66:
                    45:f8:3e:07:d8:9f:5b:ce:df:e3:96:04:98:48:a4:
                    91:a4:fe:d3:6f:1a:3e:99:d9:e0:01:43:a5:26:ba:
                    cf:d5:00:2d:ca:93:b1:33:43:e3:16:cf:90:37:1d:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:F8:0D:59:D4:F8:8B:58:2C:64:4E:C0:3F:1E:F5:AC:B9:4B:32
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/l0v4DVnU-ItYLGROwD8e9ay5SzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.103.0/24
                IPv6:
                  2a05:8f00:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:19:02:54:4e:25:6e:cc:b1:1d:ca:11:a9:96:70:59:42:9f:
         0f:36:99:0f:7a:1c:00:81:f3:a6:dc:0a:24:4d:03:5e:35:e5:
         43:6c:56:a1:cc:2d:18:ac:4c:cf:e6:b8:b1:54:0c:71:b4:a6:
         d2:6d:f9:77:27:bd:cf:da:58:9c:30:15:cf:20:e3:9e:38:27:
         50:7e:c4:bd:8e:5d:57:a6:73:82:3c:80:33:47:bc:62:53:76:
         a9:c9:ff:a7:4b:cb:55:b4:49:c2:d4:54:06:76:f4:c6:05:67:
         e3:07:2b:16:ac:ca:12:4b:30:c4:0e:3d:ca:ab:f1:a9:91:c2:
         fc:b0:4e:8b:b6:b6:57:85:02:d9:e8:4b:2b:a5:f1:af:cd:19:
         4b:5d:28:05:2c:31:cb:4b:5a:7b:49:2a:7f:c0:ce:16:66:48:
         71:0c:01:16:a2:c3:2f:1c:93:0b:13:c3:9a:e3:eb:d4:08:0c:
         ae:92:9b:ba:7b:f1:98:8f:f2:95:82:fb:2a:6e:75:90:73:3c:
         b3:aa:ac:66:9b:69:30:6b:d2:50:35:ce:16:b2:02:e9:14:e7:
         3b:15:81:cc:22:e8:31:0b:99:e2:4c:b4:08:73:d2:5e:3c:45:
         47:b2:8c:71:1f:c7:cc:35:f6:d2:f3:52:d6:d3:99:75:97:2a:
         a9:70:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----