Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0YaZAcGVQuCQ27DwCpV_azQCsu8.roa
File:                     0YaZAcGVQuCQ27DwCpV_azQCsu8.roa (raw, json)
Hash identifier:          BBN/U6T61Ifo9ajseRLW1dk6pQHgVZKbtdS+oSqSauc=
Subject key identifier:   D1:86:99:01:C1:95:42:E0:90:DB:B0:F0:0A:95:7F:6B:34:02:B2:EF
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01864AE50F371C1EEC3F4E54455E75FF64EC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0YaZAcGVQuCQ27DwCpV_azQCsu8.roa
Signing time:             Mon 13 Feb 2023 13:09:30 +0000
ROA not before:           Mon 13 Feb 2023 13:09:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        62.76.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4a:e5:0f:37:1c:1e:ec:3f:4e:54:45:5e:75:ff:64:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Feb 13 13:09:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1869901c19542e090dbb0f00a957f6b3402b2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:dc:67:08:e8:f6:19:9b:b2:3f:b7:9d:97:
                    38:d5:df:7f:e8:16:73:04:6d:cd:87:bc:0c:c1:7b:
                    48:46:94:fa:31:20:6b:9d:91:aa:7c:56:1f:bc:0d:
                    2a:63:c9:f8:33:51:3c:06:5f:8f:c7:b6:3f:8d:fc:
                    ce:7c:8d:45:f7:c9:ce:3d:a9:73:42:63:1e:a3:37:
                    1e:33:77:93:61:e5:b1:3a:62:3b:84:29:4f:f0:57:
                    81:b4:08:e2:2a:18:15:25:2e:3b:99:41:db:62:90:
                    c3:07:be:9f:1b:8a:a8:73:12:81:a2:ef:65:cf:15:
                    01:99:9d:3b:58:20:99:c1:f1:2a:3a:06:a0:a5:97:
                    8c:1c:f6:8d:63:8c:08:cd:9a:6f:b0:73:de:a0:10:
                    80:0c:ff:ad:59:54:f1:81:7a:84:2f:5c:45:9e:aa:
                    e1:66:98:43:86:a4:6a:c4:84:5a:05:31:a2:9d:96:
                    b4:04:a2:9d:bf:d6:c4:0c:e0:5a:ab:cb:61:f5:e9:
                    63:3b:42:d7:cd:18:00:8c:a3:5f:3a:ff:94:bb:b7:
                    60:c3:40:6c:eb:35:24:31:cd:65:f4:85:d1:e8:30:
                    e7:62:57:76:78:3b:80:45:bd:de:b3:45:28:17:c3:
                    6c:d4:94:2c:25:5b:3c:b0:3d:12:ee:f5:74:1b:b4:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:99:01:C1:95:42:E0:90:DB:B0:F0:0A:95:7F:6B:34:02:B2:EF
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0YaZAcGVQuCQ27DwCpV_azQCsu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:36:57:7c:fa:fe:55:a9:2a:5a:03:37:80:34:8e:74:86:
         97:99:a6:67:ca:1b:57:2c:94:66:ba:c1:07:13:2c:c7:ca:5c:
         d8:75:dd:bd:68:11:14:05:45:4c:59:18:54:0c:87:ff:fc:93:
         ea:83:aa:69:24:59:92:c5:38:f7:18:bc:a7:49:60:aa:d7:ce:
         fb:a1:6e:0e:e3:97:b4:0d:3f:19:8a:14:d5:91:f2:cd:38:c8:
         32:00:cc:c5:17:48:18:67:d4:f8:0e:d2:22:44:b6:7e:a9:e2:
         ff:68:87:44:a2:c0:a2:76:f5:3a:89:b9:8a:ae:08:cc:d6:d9:
         48:16:3b:b1:24:be:55:39:b5:c0:37:1e:e1:4a:7e:da:2b:33:
         f6:ea:ca:dc:ee:bc:24:09:dd:87:b2:5e:1f:73:dd:5d:82:67:
         a7:80:58:a8:7d:9c:2d:c0:bf:a6:4f:5a:03:06:97:ce:c5:6b:
         3d:b8:c9:b4:6c:2d:3d:d9:7e:b6:36:f1:62:a5:8f:29:a1:c1:
         f5:b5:18:64:16:e2:b3:54:86:63:fc:0f:9c:96:84:be:b9:4b:
         73:c4:40:2f:cd:f8:1a:fc:92:fc:14:8a:2c:30:67:97:37:3b:
         ac:11:0a:37:0f:a5:a9:02:8c:c2:d9:9b:8b:51:f7:52:bc:2d:
         46:23:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----