Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/kv1otDcEr-lFee6Gb8P8c3drsq8.roa
File:                     kv1otDcEr-lFee6Gb8P8c3drsq8.roa (raw, json)
Hash identifier:          VuxAR3BJgvkBBiOtw0cJ9cgGgTyA3JE46nsZ4oUb3Zc=
Subject key identifier:   92:FD:68:B4:37:04:AF:E9:45:79:EE:86:6F:C3:FC:73:77:6B:B2:AF
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       018C83EDEBEAAB7A3598C7FBCC9AAAF220EB
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/kv1otDcEr-lFee6Gb8P8c3drsq8.roa
Signing time:             Tue 19 Dec 2023 21:14:16 +0000
ROA not before:           Tue 19 Dec 2023 21:14:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208143
IP address blocks:        185.179.34.0/24 maxlen: 24
                          2a02:6c20:5::/48 maxlen: 48
                          2a02:6c20:810::/48 maxlen: 48
                          2a02:6c20:828::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:83:ed:eb:ea:ab:7a:35:98:c7:fb:cc:9a:aa:f2:20:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Dec 19 21:14:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92fd68b43704afe94579ee866fc3fc73776bb2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:88:0e:61:ff:f5:c6:5d:be:a2:7b:5e:ae:8a:
                    9e:20:a7:01:c0:92:ba:e2:9f:c7:1e:06:85:f8:c2:
                    df:c1:12:0e:9b:b2:61:7d:14:dd:c3:71:2b:ee:34:
                    d4:3d:e9:fe:b8:64:84:1c:60:48:2b:90:3e:c3:79:
                    22:e9:9c:05:20:ba:c8:e4:ee:4e:e2:7f:9d:66:df:
                    18:2f:6e:0d:c5:96:1f:13:d9:f0:60:6b:12:4c:d3:
                    7b:99:20:0c:9a:36:85:7b:42:07:4b:77:89:1f:b9:
                    d5:4d:f2:8e:f6:87:8a:cf:84:5a:57:10:9a:5b:ab:
                    2e:a9:18:d1:af:a7:75:21:62:09:c3:93:cc:c9:94:
                    de:a9:13:8c:ea:d5:32:ad:cd:25:f8:09:d6:05:69:
                    f8:84:c1:08:e8:e9:d6:b0:99:cc:93:bd:a8:9f:46:
                    92:37:5d:d3:7a:03:34:94:cc:64:f7:9e:d2:e8:21:
                    26:3b:1c:35:26:45:b1:33:83:8b:c9:1f:9b:ff:04:
                    4d:dd:3b:b1:fc:a3:85:a4:61:f6:5a:d3:ac:a3:ba:
                    a7:db:a6:2e:49:10:32:9f:4e:c5:73:34:05:03:fc:
                    6d:39:67:87:1f:35:4b:09:7b:88:21:2a:5d:8a:42:
                    3f:4d:c2:3a:be:25:c3:db:87:66:a1:b7:53:3d:2b:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FD:68:B4:37:04:AF:E9:45:79:EE:86:6F:C3:FC:73:77:6B:B2:AF
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/kv1otDcEr-lFee6Gb8P8c3drsq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.34.0/24
                IPv6:
                  2a02:6c20:5::/48
                  2a02:6c20:810::/48
                  2a02:6c20:828::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:47:4d:89:32:fb:58:45:fc:c1:b4:ca:8b:b5:fc:e3:2d:16:
         19:d0:a8:87:f9:43:97:74:b4:f1:39:c1:b6:17:6a:bd:4f:e9:
         60:6d:8b:79:d7:02:d4:7f:dc:1a:c8:24:11:72:84:8c:83:b7:
         c9:3a:cb:69:49:ae:90:65:bc:27:1e:77:f6:d4:8a:3d:6e:3a:
         18:42:fe:4f:76:c1:ae:70:56:61:1b:26:73:8b:99:6d:30:92:
         6c:58:24:30:6c:3a:0b:30:8d:b6:56:a6:7d:1b:ef:8e:d8:c9:
         5a:a2:8c:fe:85:fd:02:52:45:16:eb:72:f0:f6:96:d5:3f:31:
         81:52:a1:4a:e0:57:6c:7b:0e:1e:f2:4f:25:7c:d7:74:1d:b7:
         d6:7d:32:98:9f:9e:41:de:fc:37:ec:8f:93:21:3c:57:c7:94:
         4c:5c:5b:7f:89:5b:5a:57:a9:fe:6b:a0:c8:ff:af:76:ab:85:
         f2:7a:6c:15:30:ff:7f:82:9e:90:ce:ca:67:b2:fc:78:04:62:
         17:95:20:da:1d:7a:1b:7e:f5:cd:c0:94:18:14:5a:06:5b:95:
         be:08:13:8c:5f:bc:21:24:f9:8b:a0:9a:7e:06:94:5e:d0:b1:
         8b:bf:fc:92:39:df:e9:4b:f2:15:68:2f:be:05:17:31:8b:56:
         11:f9:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----