Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DpZPsMCC1KH7-o6nHcY3dsB9C8E.roa
File:                     DpZPsMCC1KH7-o6nHcY3dsB9C8E.roa (raw, json)
Hash identifier:          G5bM/JoMyr+bGRa111wIDY3Hf3JBjWP3ukuNz6JyhPU=
Subject key identifier:   0E:96:4F:B0:C0:82:D4:A1:FB:FA:8E:A7:1D:C6:37:76:C0:7D:0B:C1
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0188D7EC118572CDF12DB9759EB231A05C0F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DpZPsMCC1KH7-o6nHcY3dsB9C8E.roa
Signing time:             Tue 20 Jun 2023 08:29:12 +0000
ROA not before:           Tue 20 Jun 2023 08:29:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61190
IP address blocks:        185.0.30.0/24 maxlen: 24
                          2001:7f8:11c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d7:ec:11:85:72:cd:f1:2d:b9:75:9e:b2:31:a0:5c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jun 20 08:29:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e964fb0c082d4a1fbfa8ea71dc63776c07d0bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:8a:85:fd:db:ec:0e:7e:97:1b:08:6f:9e:
                    3c:c8:5b:e0:44:2e:57:14:7b:2a:5b:40:c1:f6:fb:
                    49:dd:15:72:88:e7:74:65:62:b4:62:fc:dd:26:ab:
                    96:29:4b:c0:08:2d:25:c6:4b:99:7a:c4:0f:32:94:
                    89:2c:91:dc:23:9a:d9:06:07:bf:70:ec:b2:e5:65:
                    37:4a:30:5b:41:eb:a9:40:fa:fd:ed:68:d5:c1:dc:
                    89:12:73:1f:42:64:47:5f:97:bc:fe:ba:73:f4:d4:
                    f5:6d:3e:d4:8e:d9:d0:da:f0:da:49:7f:30:e1:e7:
                    56:ce:26:0f:1a:ad:40:b2:61:55:bf:fc:83:73:a3:
                    62:ed:11:7a:93:0d:93:5a:3d:7f:2d:cb:98:5a:05:
                    99:b6:41:d8:e6:26:1e:da:d3:d8:79:2b:63:f0:b9:
                    38:79:c7:76:7e:02:aa:36:26:23:59:a2:21:fa:80:
                    2c:c6:e3:32:5e:59:ef:62:90:1c:9c:82:5c:5c:26:
                    89:c8:82:84:4f:0c:68:76:fd:9f:dc:80:c7:07:0b:
                    38:f8:e1:a3:60:86:72:6a:91:b3:5f:4b:25:7e:fd:
                    03:6a:b3:31:f3:aa:2c:e2:60:03:1e:78:47:b8:c7:
                    ac:61:fe:f4:0d:32:b9:61:39:07:02:90:a2:29:72:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:4F:B0:C0:82:D4:A1:FB:FA:8E:A7:1D:C6:37:76:C0:7D:0B:C1
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DpZPsMCC1KH7-o6nHcY3dsB9C8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.30.0/24
                IPv6:
                  2001:7f8:11c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:8c:f9:af:83:7f:5b:e4:12:90:33:6e:ce:17:d0:0c:1e:
         3b:5d:e8:a7:c6:8f:08:6d:10:47:14:a5:2b:1c:b2:dc:52:48:
         62:9d:bc:b0:ce:b6:b6:9b:b4:07:ab:55:cf:1a:6f:b2:94:96:
         99:80:34:7b:72:4b:00:e3:03:90:61:f4:7c:62:b7:1f:dd:85:
         22:51:f7:b2:ee:a4:e8:e1:9f:6d:0e:e7:57:1e:5b:32:b2:9f:
         e6:3f:b9:1c:f1:48:71:78:c1:e4:69:b0:9a:04:ae:5d:5d:0e:
         70:e9:7d:af:54:02:63:55:c8:d6:a1:21:e5:f0:81:d2:74:96:
         2f:64:55:3d:6b:ab:44:ba:e0:f4:e3:d8:5f:0d:45:ff:3c:a1:
         19:93:46:10:7f:ad:3f:54:d2:bf:8e:19:01:d2:f2:20:5b:81:
         fa:19:a7:cb:6e:cf:a2:18:13:49:aa:67:3d:98:ca:2b:17:f3:
         1e:46:c3:80:ed:55:b7:b1:57:4d:35:f5:10:65:c0:99:4c:06:
         fb:4b:2f:3d:77:b5:f3:7a:56:f7:4f:55:9a:01:ae:5d:3d:b1:
         ab:1f:4a:4b:26:5e:4e:a8:9e:bf:0a:b4:d2:9f:4a:26:ad:c4:
         af:14:13:7b:1b:8e:14:af:10:7b:90:58:50:0b:3b:30:71:8f:
         1a:f1:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----