Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa
File:                     8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa (raw, json)
Hash identifier:          hZtaHekxzWa9LZT0G5hdrnA03OlL0PtdX/77cYx3ah0=
Subject key identifier:   F1:99:5B:4A:6B:0D:FD:42:08:FF:65:07:55:DF:67:01:7F:85:A1:6D
Certificate issuer:       /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial:       018893CEED43771AB39E2F0F0B81D66CFBD7
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa
Signing time:             Wed 07 Jun 2023 03:03:11 +0000
ROA not before:           Wed 07 Jun 2023 03:03:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.33.94.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:93:ce:ed:43:77:1a:b3:9e:2f:0f:0b:81:d6:6c:fb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
        Validity
            Not Before: Jun  7 03:03:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1995b4a6b0dfd4208ff650755df67017f85a16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:97:29:bc:bb:55:8f:af:5f:fc:dd:69:e1:
                    01:da:8a:0a:02:90:e5:a0:ea:7b:3f:5e:fd:3d:83:
                    7d:ba:d8:a9:f7:70:89:c3:41:ee:d5:84:66:e6:f8:
                    d9:82:d0:df:90:62:c5:3d:ad:fd:7e:9e:19:cb:bd:
                    4e:09:07:93:ce:2f:68:60:57:af:a2:51:ed:a2:9d:
                    96:0d:1d:de:75:4c:c2:94:f4:64:25:79:8a:87:9b:
                    6b:48:71:9b:71:38:b2:77:23:a2:14:18:f7:62:33:
                    c0:85:aa:50:93:78:b6:af:6c:3c:3e:bf:21:f9:5d:
                    0d:c2:69:01:99:5a:38:34:f7:47:a8:a0:04:2b:5c:
                    eb:0d:81:2f:39:f2:90:6a:f4:2f:90:3c:f5:98:88:
                    72:69:17:f4:ed:f7:4d:a5:5c:f2:52:4f:5f:f6:89:
                    f4:f7:57:cd:32:ff:12:50:02:d8:0d:90:04:92:3d:
                    97:ab:ba:6b:6c:1c:72:94:f1:2d:2b:98:5e:90:94:
                    9f:e9:ac:c3:05:7c:dd:07:0b:3f:b2:2c:0b:f3:28:
                    02:a7:ff:ab:c5:e4:56:3b:f9:97:f0:d2:24:ca:1a:
                    17:55:ff:13:3f:56:20:1d:46:d4:79:33:ef:21:4e:
                    32:a4:e7:5f:36:5b:e9:e7:ab:f1:85:0d:f8:f0:9f:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:99:5B:4A:6B:0D:FD:42:08:FF:65:07:55:DF:67:01:7F:85:A1:6D
            X509v3 Authority Key Identifier:
                keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/8ZlbSmsN_UII_2UHVd9nAX-FoW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:fb:fc:ba:3f:88:c5:5b:32:4d:fb:c4:ab:15:15:e6:1a:
         87:f3:b7:db:56:26:1a:68:3c:53:40:77:b6:7d:15:8b:9b:57:
         15:da:45:d5:51:43:66:e3:96:45:a2:a7:c1:e1:0f:11:1d:f4:
         b2:fb:dc:19:b7:b8:a9:f8:93:38:5d:18:c0:3a:81:c3:0c:95:
         64:2d:a5:96:0c:08:09:9f:6c:e7:72:68:2c:ca:d8:d7:39:87:
         71:86:84:49:75:1a:d5:53:b6:9b:93:b7:b2:c2:59:6a:ec:d2:
         c6:15:40:05:18:ac:44:da:51:9e:e2:3c:71:ae:79:e9:32:9c:
         6c:1a:9d:37:3d:0c:ec:76:d0:ab:b5:44:38:4a:ec:a6:91:f3:
         ee:ad:c7:32:15:96:8d:25:d6:68:15:81:b6:23:50:74:bf:a0:
         50:1e:56:7f:0e:11:f1:94:0d:3c:8f:0c:ef:95:8e:cb:97:41:
         d1:06:4e:8d:1d:11:a0:29:70:e0:68:ca:1a:0f:e2:42:19:5f:
         e5:1c:d0:76:9c:e6:6f:c7:11:49:91:a3:4b:7f:ac:c2:52:37:
         a8:2b:ca:b8:23:31:d2:d1:33:58:84:2e:3c:4c:7d:37:c8:ef:
         e2:f6:2a:07:a7:3a:e9:61:d3:d6:ee:d5:0e:80:5f:13:50:30:
         1c:61:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----