Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/R6zurM4i5V5LkH09kfQewFQlj_c.roa
File:                     R6zurM4i5V5LkH09kfQewFQlj_c.roa (raw, json)
Hash identifier:          ZefY9fcuWD5nD5cjIq0ikWeeigMNY4FwQ8hFAh/Zbc8=
Subject key identifier:   47:AC:EE:AC:CE:22:E5:5E:4B:90:7D:3D:91:F4:1E:C0:54:25:8F:F7
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       01856CB81F23A9C158C3D28766B12729727D
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/R6zurM4i5V5LkH09kfQewFQlj_c.roa
Signing time:             Sun 01 Jan 2023 09:44:43 +0000
ROA not before:           Sun 01 Jan 2023 09:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12731
IP address blocks:        185.106.86.0/23 maxlen: 23
                          2a02:8001::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:1f:23:a9:c1:58:c3:d2:87:66:b1:27:29:72:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jan  1 09:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47aceeacce22e55e4b907d3d91f41ec054258ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:c6:54:ce:e5:4e:d6:a6:c1:28:aa:05:55:
                    79:b8:08:6f:2f:2d:d0:93:be:aa:4e:c5:20:22:b6:
                    39:bf:6a:9a:cc:89:32:4b:f7:8b:69:de:e8:3c:1e:
                    82:3e:04:7b:47:60:e0:c1:ed:5e:46:6e:76:60:97:
                    38:d6:c6:9e:db:56:e6:9b:80:bb:20:f6:ae:1f:58:
                    18:39:d3:7f:b3:07:e9:a6:72:a2:0b:8a:be:73:2c:
                    aa:27:ef:85:bd:6f:e4:3b:8c:4e:06:e2:e0:f6:e5:
                    e1:f0:ae:63:9c:d1:c9:46:c9:b9:3f:17:14:32:04:
                    8f:f4:11:1e:4f:8e:28:3a:28:ab:c2:57:22:96:ca:
                    9a:c3:fd:78:42:3a:a9:d5:0e:b3:83:66:5e:39:54:
                    c2:18:40:41:f6:34:9a:74:d1:d2:1d:a5:df:ac:9f:
                    9e:3d:12:03:fc:9e:b8:f8:f1:f5:c5:78:51:bf:a8:
                    14:3a:92:45:be:d2:2b:ba:fd:34:2e:f2:05:3b:94:
                    f3:3b:ef:b8:81:04:7c:50:9e:b2:ef:50:08:f5:66:
                    77:80:f2:00:4d:d3:c7:f3:33:1f:cd:db:7f:ba:98:
                    7f:59:8b:d1:17:54:c3:d3:68:b2:33:87:cf:e3:dd:
                    73:55:ac:47:31:12:ff:db:50:33:32:63:4a:9a:38:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AC:EE:AC:CE:22:E5:5E:4B:90:7D:3D:91:F4:1E:C0:54:25:8F:F7
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/R6zurM4i5V5LkH09kfQewFQlj_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.86.0/23
                IPv6:
                  2a02:8001::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:c7:af:c5:db:c5:c7:d1:dd:51:ea:c1:9b:39:dc:af:c2:
         8c:b5:cb:27:5b:48:af:e8:5c:37:e3:a7:53:c0:ff:bb:2a:24:
         bd:5f:46:dd:98:65:8e:47:2e:f7:f3:36:06:19:8b:8d:d3:e6:
         63:d8:fa:1e:3c:dc:47:b7:c7:0d:da:d0:03:d8:e3:64:54:62:
         67:1f:bf:57:7e:81:7b:fe:d0:c9:65:92:67:72:23:72:a2:81:
         a5:d8:c7:f6:39:82:77:d0:51:6a:71:be:9f:b9:1c:ab:13:f5:
         20:8d:19:57:3d:ca:4b:63:45:ae:47:1b:80:67:29:e4:8c:93:
         6b:c8:32:de:e3:40:a8:cf:e0:8e:25:b6:56:27:4a:48:07:26:
         eb:7b:fa:eb:9d:f9:47:27:a6:ce:fc:0b:cd:15:d7:97:37:39:
         41:30:d8:19:d0:26:d9:94:ff:e9:5f:e9:c8:7d:6d:cc:89:08:
         50:67:bd:ba:90:08:4c:41:2c:01:c9:ed:9e:fd:9d:0f:be:0e:
         90:46:73:0f:1c:01:76:1c:30:f3:e6:9c:27:d0:a8:90:36:98:
         38:b0:98:df:3c:18:f0:ac:7f:42:57:bf:bd:62:9c:54:48:8f:
         35:6c:13:d0:74:25:42:1d:59:4a:42:9f:37:f7:47:9d:53:36:
         47:73:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----