Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/9uGbBfN6ruayMM70pWkLnHRHcmc.roa
File:                     9uGbBfN6ruayMM70pWkLnHRHcmc.roa (raw, json)
Hash identifier:          ua+HQf56hW8q4tVHfMYNnwnjwdIiY4Y1sIjDncpzTo4=
Subject key identifier:   F6:E1:9B:05:F3:7A:AE:E6:B2:30:CE:F4:A5:69:0B:9C:74:47:72:67
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       01856DCAF5A740D9A1BA505DF43B24D699FB
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/9uGbBfN6ruayMM70pWkLnHRHcmc.roa
Signing time:             Sun 01 Jan 2023 14:44:55 +0000
ROA not before:           Sun 01 Jan 2023 14:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50643
IP address blocks:        176.117.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:f5:a7:40:d9:a1:ba:50:5d:f4:3b:24:d6:99:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: Jan  1 14:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6e19b05f37aaee6b230cef4a5690b9c74477267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:6c:01:a5:e4:9c:5e:b9:da:29:51:32:96:
                    66:09:01:30:b3:cb:a0:6e:b0:7b:02:55:95:11:ce:
                    f9:ad:91:60:b0:32:b7:35:23:46:d9:e8:8f:40:82:
                    5c:7d:04:64:73:7a:ac:c2:de:ab:f6:b0:7a:f8:9f:
                    ae:09:d9:73:52:10:21:d9:50:10:2d:fb:2d:40:1b:
                    3b:7b:1e:52:42:21:3a:ad:06:a5:2b:96:e0:df:c7:
                    c7:84:47:c9:03:ee:3e:1f:96:ce:49:0b:17:fe:68:
                    d6:1a:9d:6f:16:e2:a2:48:ec:3e:24:32:59:f4:02:
                    c6:96:0d:b4:68:e8:9c:83:fa:93:12:4f:b1:90:24:
                    bc:b2:5c:dd:36:5b:b8:ce:fb:02:71:90:3c:af:9e:
                    02:d0:64:2b:bc:36:47:61:d9:16:cd:4f:a4:a4:c4:
                    e4:93:ec:21:68:43:7c:94:b2:a9:fb:0c:6a:91:5c:
                    12:13:e3:1c:0c:45:58:a1:3e:00:f9:36:2d:1a:d4:
                    85:f2:7a:b7:7d:e4:87:83:d7:7e:a2:aa:9f:9d:f4:
                    0c:39:22:c4:25:43:7d:f0:3f:8c:5b:d8:15:4c:f6:
                    62:53:52:5f:f5:0f:b5:a7:4d:8a:e3:d1:c9:1a:d8:
                    3e:ec:0d:ff:4f:75:70:bb:7e:72:ef:07:4c:cf:8b:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:9B:05:F3:7A:AE:E6:B2:30:CE:F4:A5:69:0B:9C:74:47:72:67
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/9uGbBfN6ruayMM70pWkLnHRHcmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.117.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:83:f3:08:2b:c6:be:ff:0b:67:6b:49:58:86:03:ba:83:
         ed:59:1b:35:25:2e:9e:e2:0d:c4:d7:40:65:82:e6:a7:48:0f:
         7d:17:9d:7c:24:a4:e8:6b:c4:fd:d8:d1:1d:94:18:1b:7d:88:
         24:1b:cf:98:93:8d:25:4d:ce:35:a5:b1:b0:32:d0:6b:a9:e6:
         00:47:8c:99:11:79:62:0c:ff:bb:7c:77:e5:69:cf:4c:5d:fa:
         fc:df:d1:61:12:d9:94:f6:40:1f:7a:e0:31:b6:a1:e7:6b:17:
         7d:18:40:97:69:2d:f5:79:72:4e:9d:7e:3c:6e:46:65:97:05:
         65:d1:10:ad:b0:3a:2b:49:3b:22:2f:00:5e:c8:f2:e5:a5:33:
         20:a0:ec:ef:06:e6:86:df:3d:73:a3:92:a6:1e:3c:de:b8:aa:
         f5:80:bc:73:d6:ec:29:fb:aa:14:d1:be:f4:30:80:05:56:3d:
         d8:1b:b2:d4:18:8d:9c:92:28:49:58:c3:e9:ef:01:dc:ab:07:
         9d:90:dc:49:fc:c0:ea:73:98:2e:69:d9:9a:19:16:82:e0:37:
         eb:30:f0:41:47:8d:de:5a:e5:25:92:7a:74:f2:c9:d8:a9:2f:
         9a:89:bd:45:8d:e5:82:2d:54:9d:80:63:a5:90:8e:4d:b3:42:
         d5:25:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----