Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/oER9L_3JaUKu4FQl_We6o3oVB4Q.roa
File:                     oER9L_3JaUKu4FQl_We6o3oVB4Q.roa (raw, json)
Hash identifier:          lzb6Q//pffV4Z+FkBVE2hrvvKHdomyTKyuIjfQZuKzM=
Subject key identifier:   A0:44:7D:2F:FD:C9:69:42:AE:E0:54:25:FD:67:BA:A3:7A:15:07:84
Certificate issuer:       /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial:       018733FBD3C50CADA6EA58BBBA691879CC9A
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/oER9L_3JaUKu4FQl_We6o3oVB4Q.roa
Signing time:             Thu 30 Mar 2023 19:25:54 +0000
ROA not before:           Thu 30 Mar 2023 19:25:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58075
IP address blocks:        185.187.100.0/22 maxlen: 24
                          2a0a:47c0:20::/48 maxlen: 48
                          2a0a:47c0::/48 maxlen: 48
                          2a0a:47c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:33:fb:d3:c5:0c:ad:a6:ea:58:bb:ba:69:18:79:cc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
        Validity
            Not Before: Mar 30 19:25:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0447d2ffdc96942aee05425fd67baa37a150784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:29:62:da:88:1e:c1:d2:3d:84:dc:f3:55:
                    9d:5f:28:ae:de:c4:9a:ef:e5:4b:44:d7:7d:30:65:
                    af:db:c9:21:be:94:48:e2:73:2a:82:9a:65:7f:ef:
                    36:ac:c7:ae:4e:32:5f:a3:fb:f8:7c:f9:42:9e:99:
                    42:7f:b1:b5:3f:a2:1e:b7:11:94:e6:48:44:44:be:
                    87:f8:3c:19:ed:ac:f3:ba:59:64:02:6c:f8:88:ce:
                    70:03:61:0b:4d:1a:39:f6:a2:b7:d4:ff:9d:0c:9b:
                    cb:c3:38:93:f1:74:76:c3:7d:dd:cb:09:a4:42:11:
                    d4:05:fd:97:c3:8c:b3:53:8f:f5:30:2d:cd:a2:9e:
                    b3:57:fa:04:2a:46:52:e4:34:5d:8a:a9:50:1e:1a:
                    5c:1a:ea:e8:6a:42:03:90:33:46:5f:b2:e5:e1:f6:
                    3b:3f:2b:2e:5b:89:3a:04:60:19:16:45:09:bb:94:
                    6b:5a:11:e0:e0:7d:96:50:ee:e1:a5:f2:09:f8:80:
                    28:cd:23:a9:08:3a:9b:ee:75:45:9f:c0:f5:31:37:
                    13:44:b1:cc:8e:06:df:54:a3:94:0a:15:89:3f:f4:
                    e7:7b:84:dc:0c:0c:a0:6b:ab:95:ff:b0:78:4e:5b:
                    37:64:65:3d:e2:b3:36:69:0e:76:30:3c:72:4d:5a:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:7D:2F:FD:C9:69:42:AE:E0:54:25:FD:67:BA:A3:7A:15:07:84
            X509v3 Authority Key Identifier:
                keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/oER9L_3JaUKu4FQl_We6o3oVB4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.100.0/22
                IPv6:
                  2a0a:47c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:35:52:47:fe:84:07:c0:61:72:34:a5:9b:20:83:15:72:
         b4:af:63:3d:64:61:0b:51:3c:33:fd:70:e0:4c:3b:0f:91:bb:
         72:d1:5f:a7:eb:6a:e7:35:14:36:04:98:c5:92:9b:14:7f:ff:
         d7:2e:ee:fe:fc:9e:e1:df:e6:d3:99:e9:fd:e5:fa:a7:d3:83:
         4e:c5:94:61:02:f9:3a:5c:15:51:6b:b4:0f:d6:a5:08:65:69:
         bc:ca:7f:72:69:6f:70:75:cc:70:f6:97:81:5c:f3:3d:8e:ae:
         f7:86:00:b8:9b:f2:86:fd:4e:de:af:5b:6b:13:f9:a8:3f:29:
         99:32:07:c6:77:af:5f:6a:98:d3:11:b5:26:b0:51:03:e9:36:
         72:51:57:d0:7e:31:9f:6d:5e:c9:ee:a8:1a:94:3f:6e:b5:7b:
         eb:aa:81:a4:f1:bd:6e:ef:49:09:f5:29:7f:b1:b0:eb:f4:7e:
         0c:54:cb:2e:79:95:99:f8:29:f5:1e:70:b7:f2:de:91:4c:fb:
         a3:9e:05:5b:aa:39:02:61:37:92:69:b3:63:9d:4f:95:dd:d2:
         9f:7f:37:54:b8:c1:33:52:0b:b6:60:c7:1c:17:7e:86:e5:62:
         bf:12:28:98:23:21:ec:73:ea:ab:2e:9d:8b:ff:13:f1:0a:d7:
         34:4e:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----