Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfzXSryYO4pMbVxVHDgVutHdFkw.roa
File:                     yfzXSryYO4pMbVxVHDgVutHdFkw.roa (raw, json)
Hash identifier:          s0I8NeqTi9mg/4cXKhxRPwErg3tBefQowqovCNntzCw=
Subject key identifier:   C9:FC:D7:4A:BC:98:3B:8A:4C:6D:5C:55:1C:38:15:BA:D1:DD:16:4C
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018CA2DDDEF795161584851E71726A806C4F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfzXSryYO4pMbVxVHDgVutHdFkw.roa
Signing time:             Mon 25 Dec 2023 21:24:58 +0000
ROA not before:           Mon 25 Dec 2023 21:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208949
IP address blocks:        212.87.204.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a2:dd:de:f7:95:16:15:84:85:1e:71:72:6a:80:6c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Dec 25 21:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9fcd74abc983b8a4c6d5c551c3815bad1dd164c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:aa:89:ed:e8:22:cf:86:78:60:97:a7:18:26:
                    33:d5:e5:dc:29:75:86:9b:f4:2f:7a:fa:cf:94:53:
                    96:59:8c:c9:6a:c0:69:52:9c:c7:db:b5:32:7c:54:
                    e5:cf:79:23:af:88:b8:43:21:a0:01:5f:c7:b5:c8:
                    25:fc:f6:f2:e7:b4:37:14:fa:68:40:32:c1:41:dd:
                    3b:b5:db:f5:87:eb:65:f1:20:eb:4d:a6:c9:8f:44:
                    de:91:98:ad:4a:ab:53:74:2e:ed:4f:15:bf:de:ef:
                    bb:51:7e:99:0b:98:c2:d2:37:e1:cd:25:ae:70:74:
                    53:b2:a2:5e:8a:e1:da:74:8e:e3:11:11:3e:0d:54:
                    da:2a:b4:4e:23:d9:22:fe:13:95:dc:88:e1:81:6d:
                    0e:4f:1b:25:1a:f8:08:97:d2:26:4e:fc:f1:d0:90:
                    9e:b1:d2:cc:fd:0f:ba:61:b5:b2:e7:9a:69:c3:c9:
                    34:23:4e:9e:97:77:19:7a:a6:34:fc:6a:d3:b4:b0:
                    b2:12:f6:9a:b0:b7:f8:a7:a3:76:46:40:f7:32:37:
                    e1:e8:fc:fb:04:f3:7c:6a:ea:5d:ae:ab:22:99:bf:
                    c0:6f:9d:57:85:13:f7:56:24:cb:f3:29:39:4d:b6:
                    ed:7c:d7:85:f3:74:95:64:8c:68:8f:52:f8:ea:df:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FC:D7:4A:BC:98:3B:8A:4C:6D:5C:55:1C:38:15:BA:D1:DD:16:4C
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yfzXSryYO4pMbVxVHDgVutHdFkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.87.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:24:28:a5:27:f5:02:c3:65:60:15:84:55:03:1d:df:6c:
         d8:27:d0:ce:7f:44:30:43:3a:e9:3e:c9:21:a9:d0:08:9f:72:
         bb:9d:ae:55:7b:c5:0d:20:52:ae:e5:13:c6:9b:c8:b2:38:7c:
         9d:10:c3:82:43:07:4f:27:3e:29:f9:a2:7d:e3:aa:93:3f:77:
         f4:5b:5e:72:e9:b1:2f:7e:c0:78:92:ef:d3:c1:65:a1:79:80:
         5b:cc:74:e8:99:a4:3b:fa:84:af:74:0b:4c:73:0c:e3:37:0a:
         ad:77:90:b0:fa:4a:fb:2d:6d:ba:29:90:f9:b6:37:ce:f0:d9:
         a6:29:f8:fb:1a:a2:8c:84:1e:9a:05:b8:06:fe:21:cf:30:85:
         60:a6:11:b1:fc:80:8d:e0:b7:5b:20:cc:4c:62:1f:f5:50:3f:
         c2:06:f3:02:bc:14:da:b7:ab:32:4b:82:f3:c8:26:1d:ea:9b:
         05:1f:32:96:91:0a:3a:5b:ff:9d:15:fc:1a:9a:06:b2:d0:80:
         7a:32:1d:4a:4b:fa:f5:62:b4:37:b7:b7:4e:cb:c7:02:bd:46:
         a4:af:21:4d:66:26:a8:6e:a6:5f:7b:66:5d:f6:1f:af:67:b1:
         42:53:08:de:47:5b:f4:c9:7e:0c:b7:81:63:56:e3:90:b4:54:
         8f:02:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----