Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa
File:                     ToNoDqHmBCxHwC8wmsxDMouLtN8.roa (raw, json)
Hash identifier:          Jzn/EvJdGz4dOAOWpLopuY8eabtyvNpGuj51flvS1Xg=
Subject key identifier:   4E:83:68:0E:A1:E6:04:2C:47:C0:2F:30:9A:CC:43:32:8B:8B:B4:DF
Certificate issuer:       /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial:       01856BDC9C8FCFBD7B2E123F9EBA379076B5
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa
Signing time:             Sun 01 Jan 2023 05:44:58 +0000
ROA not before:           Sun 01 Jan 2023 05:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.219.118.0/24 maxlen: 24
                          2001:67c:788::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:9c:8f:cf:bd:7b:2e:12:3f:9e:ba:37:90:76:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
        Validity
            Not Before: Jan  1 05:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e83680ea1e6042c47c02f309acc43328b8bb4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:24:c2:f4:1f:8f:65:dc:e0:aa:c8:c2:e2:
                    a7:cd:e5:98:d4:c5:8a:36:a8:1b:0a:75:2f:55:70:
                    31:bf:04:45:01:aa:63:4b:33:f3:c7:ef:94:01:35:
                    70:cf:4b:53:1c:a6:ee:10:9c:5d:40:0b:4d:2b:78:
                    fd:9f:7b:2a:0d:57:17:50:08:52:31:2d:13:d3:80:
                    13:86:02:b7:c3:a5:2b:50:6f:47:c9:92:8d:1a:9f:
                    9d:bc:61:38:03:4e:a4:a1:b3:63:95:f4:b3:28:a7:
                    ea:22:8f:ec:77:41:e5:7d:a3:60:fd:47:fe:44:04:
                    2a:d1:f1:6a:95:13:1a:be:2c:26:4e:72:a7:eb:27:
                    76:69:37:bd:ec:2e:0d:e9:e0:66:41:0b:12:0c:0c:
                    c3:8b:33:2a:28:21:a8:9b:8d:69:3a:28:71:d0:10:
                    3b:0e:a2:3a:fe:5f:d8:d1:f3:f1:b6:cc:0c:de:64:
                    ee:6e:d9:94:1a:b5:87:df:e6:8e:98:6f:b1:79:37:
                    3f:f3:38:e1:2e:2f:6d:98:bc:bf:55:10:1c:4a:23:
                    e1:9e:df:74:d5:d1:76:17:4c:b6:da:cf:79:fb:1f:
                    2c:e9:82:b3:71:8f:6d:ee:53:5c:ab:5a:7f:45:87:
                    20:78:4f:1d:f8:59:0e:ea:bb:8e:eb:e6:2c:3b:f8:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:83:68:0E:A1:E6:04:2C:47:C0:2F:30:9A:CC:43:32:8B:8B:B4:DF
            X509v3 Authority Key Identifier:
                keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.118.0/24
                IPv6:
                  2001:67c:788::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:44:97:be:5e:84:0d:2f:06:a0:be:dd:b8:2e:5e:1f:22:f4:
         3b:88:01:72:da:1b:77:61:4b:15:34:e9:23:eb:1b:61:e1:fd:
         e4:fd:93:b4:3b:0c:31:71:d0:fb:aa:6a:0c:8a:9d:9f:ae:cd:
         fc:c5:b4:37:2e:a5:e4:2d:a6:89:b9:9c:33:91:b0:67:94:49:
         09:de:d7:ab:70:3d:59:5e:08:8d:0d:2c:72:c8:74:a2:34:f2:
         d1:40:72:a3:ba:6f:46:da:3e:00:3d:f1:af:71:e9:43:38:ab:
         79:ec:c0:50:aa:f7:96:97:b1:6e:aa:d5:d3:3b:b4:e5:b0:60:
         c2:7b:10:27:e2:e1:94:3a:84:99:63:e9:46:e9:60:57:e7:ef:
         f2:c1:af:6a:ae:bf:f4:8d:bd:34:3b:c8:8c:4b:67:bf:2a:2b:
         ca:88:c9:7a:44:ef:66:30:73:89:64:65:e8:12:c4:93:23:81:
         5f:ea:e6:c6:3e:5e:bd:5b:ab:ed:a7:54:e1:06:24:f6:9b:cd:
         66:0f:53:ab:4a:f1:6e:f7:65:4e:5b:8b:c9:7c:61:dd:12:f7:
         06:86:42:86:74:dc:9f:cc:f1:7d:c0:05:6f:7e:c5:29:f9:58:
         25:d2:1b:6e:f1:b3:cf:d1:25:51:b4:2b:d0:36:0f:f0:24:b4:
         14:aa:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----