Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa
File:                     JULEFS9ysSLjBpM-z6dj8zqk1-w.roa (raw, json)
Hash identifier:          7iCA+bswHeeFg0ZzFxQAx3YfeoCgdqXsZuSEn9BeZxI=
Subject key identifier:   25:42:C4:15:2F:72:B1:22:E3:06:93:3E:CF:A7:63:F3:3A:A4:D7:EC
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       01857227FF34346368CC43D58BBE1151D9C0
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa
Signing time:             Mon 02 Jan 2023 11:05:01 +0000
ROA not before:           Mon 02 Jan 2023 11:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9199
IP address blocks:        185.57.46.0/23 maxlen: 23
                          2a04:7580::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:ff:34:34:63:68:cc:43:d5:8b:be:11:51:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Jan  2 11:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2542c4152f72b122e306933ecfa763f33aa4d7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:f5:5b:69:b3:da:d6:ff:d3:25:06:72:ab:
                    75:04:3b:0c:57:c2:19:2e:38:1b:f0:6b:a7:c3:58:
                    be:de:84:6c:5f:b2:93:ba:73:af:fb:2a:16:fb:43:
                    f4:df:78:36:ef:17:7a:f4:d9:ee:1f:ec:a3:63:79:
                    d4:93:8e:2a:08:da:ee:5e:6d:f0:d0:fe:c0:08:31:
                    f2:bf:41:9c:27:32:14:b9:ca:82:6d:28:cf:15:40:
                    87:9f:00:99:47:35:93:4d:8b:98:91:14:b5:58:89:
                    f2:2d:f1:7e:c9:88:57:e3:45:a5:1b:0b:a1:98:b5:
                    1a:6b:6c:99:4d:63:52:48:43:3d:a7:a2:0e:d0:42:
                    43:37:71:bd:93:d7:30:4e:b6:4e:2f:93:90:7d:07:
                    14:55:df:b9:ff:79:72:c3:c7:58:ea:1e:3f:bb:c2:
                    c3:6d:4e:bf:fa:b8:fe:65:9b:3e:d9:68:df:0c:ab:
                    42:84:6d:17:3c:33:b2:06:39:1d:25:a7:33:f0:76:
                    2c:47:4f:42:bb:ed:7e:db:c0:a5:01:b3:f5:88:c6:
                    c0:98:8e:69:e8:5c:a5:7d:ca:d1:c9:20:10:4b:bf:
                    3c:f5:31:76:1d:75:74:0c:b5:e2:79:25:d9:82:03:
                    fe:e2:29:a0:73:85:21:18:9a:2c:3f:1a:ec:2f:b5:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:C4:15:2F:72:B1:22:E3:06:93:3E:CF:A7:63:F3:3A:A4:D7:EC
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/JULEFS9ysSLjBpM-z6dj8zqk1-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.46.0/23
                IPv6:
                  2a04:7580::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:3e:e5:01:c6:90:ef:bc:b8:5c:22:23:f8:0b:b7:d5:bf:
         4e:b8:30:b4:54:84:ef:5a:ee:61:71:c8:e8:10:02:fd:d3:a2:
         17:de:a3:a2:4e:8e:04:51:07:33:b1:39:07:e5:b8:32:7a:94:
         3f:0a:c1:15:9b:36:84:d8:b1:32:e8:c2:13:f3:22:f3:2f:3c:
         03:5f:5c:a3:0f:28:46:cd:e1:b4:ba:2a:90:ab:49:fe:d2:53:
         59:90:3f:7b:0d:9a:32:43:d2:fb:39:d0:73:84:4f:fc:a3:b4:
         8d:97:86:37:10:cc:ba:d3:51:75:fe:cd:96:80:1e:c4:99:57:
         3e:1d:65:e5:14:9a:c8:39:91:1f:ad:a3:56:59:54:9d:a8:da:
         5c:a3:aa:f8:3b:23:6f:47:af:e2:bd:b4:90:ff:86:7b:f0:90:
         4b:8e:51:81:e7:88:9e:09:8f:53:3f:10:09:f6:0c:ba:84:8c:
         79:e7:02:b2:79:3c:e2:05:3f:95:da:b2:76:18:6d:d0:c8:72:
         2b:97:fc:c0:39:91:b0:99:b9:18:02:fd:59:77:19:45:b9:92:
         de:47:f7:8b:f1:00:b6:48:1b:27:0e:67:a3:7e:84:98:75:a9:
         cc:42:cc:45:93:77:13:ca:e3:43:d8:27:47:52:70:7d:bb:02:
         40:7c:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----