Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/TA0-0LbXTvHRoOVAZtThbt7fSWA.roa
File:                     TA0-0LbXTvHRoOVAZtThbt7fSWA.roa (raw, json)
Hash identifier:          OyxEDD8pR7IpBcRVHdL5abDElDChu7Jp6zdKG0GeSg0=
Subject key identifier:   4C:0D:3E:D0:B6:D7:4E:F1:D1:A0:E5:40:66:D4:E1:6E:DE:DF:49:60
Certificate issuer:       /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial:       018572B40F2E6FD3F96AC2923B62E3033BD7
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/TA0-0LbXTvHRoOVAZtThbt7fSWA.roa
Signing time:             Mon 02 Jan 2023 13:38:00 +0000
ROA not before:           Mon 02 Jan 2023 13:38:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3303
IP address blocks:        185.31.180.0/22 maxlen: 23
                          2a00:bf60::/32 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:0f:2e:6f:d3:f9:6a:c2:92:3b:62:e3:03:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Validity
            Not Before: Jan  2 13:38:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c0d3ed0b6d74ef1d1a0e54066d4e16ededf4960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:95:2c:60:16:21:4b:27:3f:49:6d:ac:c9:
                    fe:c8:dc:e3:cd:76:e8:bf:20:7e:bb:61:b5:34:28:
                    e8:83:1d:e8:27:b9:07:aa:6e:13:8d:7b:c3:87:49:
                    13:9a:6c:7f:d7:e8:ce:7f:53:0e:85:97:e1:aa:4a:
                    ac:55:8f:85:ed:35:01:80:47:fb:f2:57:bd:94:a6:
                    56:c2:02:88:78:cb:9c:c8:1b:bf:17:4f:ec:b5:15:
                    62:ba:ad:79:3c:4e:53:6f:49:ba:2a:58:39:2d:68:
                    67:33:c1:60:b3:d4:0a:7a:a5:88:35:a2:02:49:3f:
                    07:c2:cd:53:46:2a:42:06:0b:e8:e2:e9:6e:b4:fb:
                    79:b5:7c:60:0d:78:b2:8f:50:76:4a:36:69:03:6d:
                    b3:e2:7f:65:17:36:b1:11:fa:ca:1a:5b:ba:c2:8b:
                    92:02:6b:28:c8:6b:eb:73:5d:ee:04:53:94:62:bc:
                    36:cd:7e:ef:c8:57:fc:dc:84:bf:90:9f:cd:4f:0c:
                    38:c8:af:88:23:ae:e0:77:67:15:ac:fd:6c:98:ca:
                    eb:07:ad:74:fc:b8:ab:ea:a3:ae:a2:be:cb:fa:c2:
                    2b:32:36:6c:cb:66:45:43:7f:bc:67:46:df:07:9b:
                    c5:f3:f5:90:11:66:32:00:d0:65:c2:92:6c:76:0c:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:3E:D0:B6:D7:4E:F1:D1:A0:E5:40:66:D4:E1:6E:DE:DF:49:60
            X509v3 Authority Key Identifier:
                keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/TA0-0LbXTvHRoOVAZtThbt7fSWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.180.0/22
                IPv6:
                  2a00:bf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:32:9d:0b:94:45:c3:bd:5a:36:6e:85:0c:a9:f3:23:b0:9c:
         12:f4:c8:36:90:30:b7:61:a2:d7:ee:92:f9:70:97:10:d2:6d:
         cb:53:21:cb:cb:36:63:cf:ee:32:ca:05:e4:32:b9:a1:ba:3d:
         88:cb:2a:cf:2e:05:ac:c5:9a:8e:4e:79:81:b5:ae:32:1c:80:
         9f:85:84:ae:0e:a5:ac:86:8c:7e:7d:54:24:2b:3b:f5:26:b1:
         34:81:9d:5e:38:20:45:c4:8a:57:2a:08:fd:94:c5:c6:2c:20:
         69:45:da:1b:a6:85:95:ba:d8:27:1d:64:64:44:3f:9e:b7:c5:
         a1:b6:0f:b5:71:39:f3:a8:2f:bc:50:f0:a0:b8:bf:c8:5d:e9:
         49:24:82:38:cb:db:8c:98:a9:b2:fd:3e:7d:9a:84:f0:5c:35:
         80:fe:0e:1e:42:16:ac:c4:2f:e7:bb:f8:97:cc:c5:c1:66:15:
         d4:b1:7e:42:0a:f0:a1:9a:55:a3:53:2f:eb:64:77:09:b2:4c:
         2f:e6:27:04:6d:ff:80:fe:b3:f4:75:a0:fe:99:de:95:f3:5e:
         60:35:6f:eb:ca:d2:95:37:28:72:65:d5:a2:3f:67:78:25:01:
         26:21:7b:2f:c9:75:96:7e:c0:20:20:a1:20:9c:fa:9f:39:eb:
         dc:4a:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----