Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa
File:                     4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa (raw, json)
Hash identifier:          ROOWzdByLSqfW3wKkktrY5e+Xnt+TaIlj9FUDOfsII0=
Subject key identifier:   E2:89:87:2E:FC:8A:80:7A:91:09:E4:35:5B:0A:45:BE:7D:C8:C0:AB
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01876A21A4252210D2AE1157AEB1F4A66174
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa
Signing time:             Mon 10 Apr 2023 07:46:42 +0000
ROA not before:           Mon 10 Apr 2023 07:46:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        194.87.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6a:21:a4:25:22:10:d2:ae:11:57:ae:b1:f4:a6:61:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 10 07:46:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e289872efc8a807a9109e4355b0a45be7dc8c0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:0a:9c:3a:ac:23:63:ee:31:a7:00:86:bd:
                    df:70:7b:f6:6c:b9:46:d3:a5:98:39:60:e8:42:c8:
                    87:d4:a5:38:41:df:25:61:f4:85:52:9d:d0:90:0e:
                    a7:25:93:03:22:c6:13:ee:b1:67:97:aa:10:67:be:
                    3e:41:d6:39:de:29:6d:00:9e:10:87:42:7f:a0:23:
                    30:bc:f8:53:70:a7:9d:66:64:56:75:ed:27:f7:a3:
                    db:2c:64:bf:c6:c3:89:a1:2c:ef:7f:f7:2d:4b:22:
                    92:3e:81:fe:9b:cd:31:37:d1:6c:29:ae:87:5b:e4:
                    73:32:4d:13:f7:06:bd:13:81:58:ac:37:cd:ae:6f:
                    c0:17:c2:50:83:04:58:94:37:b8:63:86:c0:82:c6:
                    13:9c:a7:b0:ca:01:d6:98:9b:1d:cc:5c:0c:ea:85:
                    45:e1:06:f9:0e:1a:03:00:c9:01:7b:7c:26:05:c3:
                    1a:af:d7:c7:b3:84:9d:98:90:cb:65:2e:a9:b5:20:
                    1a:49:eb:e1:a1:d9:8a:c4:f0:dc:5f:4e:cf:ec:3d:
                    f2:c5:46:0a:64:cc:3b:2d:8c:1f:a7:88:73:d8:ef:
                    25:28:4d:6f:51:ea:b1:2b:4d:00:86:d9:f0:03:6e:
                    0d:bd:46:1a:3c:ce:22:ca:d9:a7:34:4f:a5:4c:b3:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:89:87:2E:FC:8A:80:7A:91:09:E4:35:5B:0A:45:BE:7D:C8:C0:AB
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:c8:bb:b8:49:ac:19:81:33:72:f6:b4:51:78:4b:62:f9:
         c2:c6:cd:e0:4b:85:2a:45:ae:21:1b:c9:9b:31:f1:95:c6:59:
         a0:32:8f:63:fd:59:08:63:ea:d9:7f:b3:a1:23:ed:2e:8c:73:
         9e:0a:0a:e7:f1:20:73:ca:05:58:12:32:48:cc:94:fd:6c:2a:
         3c:de:ab:20:b8:d0:7f:f0:f3:1a:6e:e7:75:f0:d0:28:d3:cf:
         90:28:b2:15:4b:ee:13:a3:7b:19:92:73:b6:ce:92:a6:de:f9:
         f9:7e:81:c7:97:ec:5c:c3:9e:c8:c7:73:29:09:6a:35:2f:02:
         c6:f8:3c:6b:d7:fe:38:4e:bb:6d:f6:05:3c:0b:f8:76:c4:57:
         07:86:e3:81:3d:7d:76:57:b8:b6:c4:50:1a:9c:cf:03:f5:de:
         e0:05:1f:c3:59:91:8c:67:15:90:03:40:44:ff:fa:49:d6:48:
         15:ee:5e:fc:70:e3:84:e4:b9:bf:db:aa:9d:49:15:ea:9b:2f:
         54:b0:6a:45:6c:00:43:f8:de:d7:c7:0d:1c:d0:d3:44:32:32:
         8b:e2:df:98:e8:3f:6b:06:ae:95:f0:b1:10:d1:77:dd:2d:d4:
         3c:ef:a6:87:3a:fa:d3:7f:70:b4:38:a8:0c:f7:3f:bf:a9:07:
         6b:0d:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----