Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/a_d6Q1hQlYacHf0z0bVRh9-5LAM.roa
File:                     a_d6Q1hQlYacHf0z0bVRh9-5LAM.roa (raw, json)
Hash identifier:          misoY13eGYQBOz5O2cD/QP9XV3W1jfxX3UBj2qkpcas=
Subject key identifier:   6B:F7:7A:43:58:50:95:86:9C:1D:FD:33:D1:B5:51:87:DF:B9:2C:03
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       01885C382C5033CA0D9CBA8477D7B5AAFFCA
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/a_d6Q1hQlYacHf0z0bVRh9-5LAM.roa
Signing time:             Sat 27 May 2023 07:59:25 +0000
ROA not before:           Sat 27 May 2023 07:59:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59956
IP address blocks:        176.117.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5c:38:2c:50:33:ca:0d:9c:ba:84:77:d7:b5:aa:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: May 27 07:59:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bf77a43585095869c1dfd33d1b55187dfb92c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:7b:55:f8:ce:15:1e:ef:58:49:4f:57:57:
                    25:31:c0:47:f0:4d:2f:e7:1b:0a:19:e4:83:20:eb:
                    1e:ea:b1:35:5b:fc:ed:ae:e4:0e:08:8a:50:0e:2b:
                    88:24:f5:f4:d0:d1:44:41:69:ef:ac:23:5a:d2:2e:
                    90:04:8c:d0:ab:4f:b0:71:2a:07:c7:a7:96:97:77:
                    3c:8b:a5:ee:79:c9:d9:6c:50:39:cc:a8:71:ee:88:
                    cb:63:e0:c9:c7:d0:96:29:6e:d2:7e:43:dd:69:8d:
                    a9:f2:c6:5c:0b:93:52:9a:13:a6:70:94:d6:89:d1:
                    41:58:d8:ad:bf:26:28:a0:bc:b2:00:6f:19:1c:10:
                    e2:63:98:e9:9a:25:6e:b0:ea:17:f9:13:57:7e:92:
                    a1:22:cf:4c:80:b8:98:51:a7:45:5f:aa:d0:2c:4d:
                    b3:dd:92:37:65:33:5d:e5:52:7d:2e:a1:bf:6e:ed:
                    ca:ea:48:6b:c7:7c:4c:8c:0d:f1:cd:77:cc:df:d2:
                    3b:61:73:23:32:26:83:2a:00:10:7e:57:1e:14:a5:
                    4f:67:c7:df:50:d9:ee:c1:2f:0e:70:c8:d5:7f:ae:
                    3e:b4:81:9d:1f:3d:5e:b7:ff:45:95:51:82:45:90:
                    82:9b:0b:59:95:88:ac:7d:bd:1e:af:79:10:0d:d2:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:7A:43:58:50:95:86:9C:1D:FD:33:D1:B5:51:87:DF:B9:2C:03
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/a_d6Q1hQlYacHf0z0bVRh9-5LAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.117.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:1c:97:44:35:27:63:9e:53:fa:30:e7:ab:6b:58:e3:db:
         4d:15:7a:b0:61:1c:1b:19:df:1e:bf:93:fb:ac:07:19:f5:73:
         14:1c:68:db:27:85:68:de:75:d9:08:65:5c:fb:63:16:ef:dc:
         b4:4f:5b:dd:c0:57:9a:22:39:4d:6d:d5:45:1f:ae:7a:1e:1f:
         91:8d:bc:ae:8d:9c:98:29:6c:88:60:8b:62:78:8c:40:c3:c3:
         4a:01:00:b6:0f:03:ec:fa:b7:0c:02:b6:49:5f:25:93:ad:90:
         ef:03:87:c1:96:dc:67:07:56:91:b7:99:f2:88:bb:df:75:08:
         43:d4:0c:3d:53:ed:8a:04:70:0a:58:db:e4:13:e4:df:77:52:
         fa:44:3b:74:0f:ea:c4:dd:23:15:b9:3d:df:4c:4f:38:48:16:
         1d:d6:d5:d8:d3:b2:5b:a9:ca:08:c3:18:23:0b:72:42:9b:fd:
         e5:40:54:33:dd:d4:d9:b8:61:68:89:0e:80:0f:82:cf:45:b8:
         53:bd:b9:f1:d5:dc:54:38:85:0c:5e:e2:a4:5d:05:4c:9b:60:
         02:d5:d1:a8:66:1b:2b:67:ec:3b:11:a0:04:70:7d:5c:3e:d1:
         01:96:21:e9:a7:0b:41:e9:8f:ad:52:43:d8:5e:88:dc:09:ce:
         78:38:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----