Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/HrnwCeFTmyWrK44GC_18CYwQ5V0.roa
File:                     HrnwCeFTmyWrK44GC_18CYwQ5V0.roa (raw, json)
Hash identifier:          IeXEgexCAViNh2DrFp59wT1H6EpCxXk0jHOGiIQPOS8=
Subject key identifier:   1E:B9:F0:09:E1:53:9B:25:AB:2B:8E:06:0B:FD:7C:09:8C:10:E5:5D
Certificate issuer:       /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial:       0185736827CCB8D398F5BD12B96EEC81E579
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/HrnwCeFTmyWrK44GC_18CYwQ5V0.roa
Signing time:             Mon 02 Jan 2023 16:54:43 +0000
ROA not before:           Mon 02 Jan 2023 16:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        185.33.92.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:68:27:cc:b8:d3:98:f5:bd:12:b9:6e:ec:81:e5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
        Validity
            Not Before: Jan  2 16:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1eb9f009e1539b25ab2b8e060bfd7c098c10e55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:1a:07:d7:f6:34:8f:99:10:27:01:c7:e1:
                    33:71:47:77:37:d1:99:f9:0d:f3:91:4d:7d:a4:4f:
                    aa:d8:f8:f5:82:ca:f0:6a:ac:cc:9e:4f:d0:86:ff:
                    14:15:2c:fa:31:dc:92:d1:2f:f2:d3:0c:58:91:fc:
                    14:cb:5e:c2:d5:f8:ad:59:5a:bd:59:79:10:9c:2e:
                    27:33:85:1e:c7:62:56:24:1c:80:4c:ac:04:1f:6a:
                    11:b9:ff:11:2a:42:5d:21:c5:ae:33:cf:20:21:1c:
                    79:ee:e2:7f:e1:96:94:07:b6:99:c9:ca:80:10:d5:
                    9d:4c:1d:f9:7f:d6:b4:25:d4:8d:a0:4f:11:77:32:
                    63:b4:7b:c8:08:f3:19:07:c5:33:20:90:03:2c:43:
                    96:26:ea:e5:af:f2:51:71:70:7c:2a:a5:9e:78:35:
                    f4:0f:2f:a3:f9:51:45:81:38:dd:db:22:d2:7d:e6:
                    ab:08:95:8c:8e:c2:58:86:77:62:69:46:06:86:f9:
                    e4:99:3b:fb:99:65:ec:0b:a0:b4:00:66:a1:75:af:
                    56:8f:cc:b6:2b:61:5e:31:66:39:42:fb:31:0d:3d:
                    3c:94:14:b6:f8:b0:3c:8f:e9:09:0b:c1:b8:20:e6:
                    d0:9d:b5:d5:f7:c3:b1:10:bf:5c:f8:1c:8b:15:15:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:F0:09:E1:53:9B:25:AB:2B:8E:06:0B:FD:7C:09:8C:10:E5:5D
            X509v3 Authority Key Identifier:
                keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/HrnwCeFTmyWrK44GC_18CYwQ5V0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:67:d4:47:18:a4:3a:28:7e:5d:9f:f8:cc:77:1f:88:5e:09:
         94:bd:77:f2:b0:78:98:e7:1c:90:04:7b:2a:ee:09:8b:00:a9:
         15:f6:51:6c:92:97:bd:a2:62:16:32:e2:fe:82:46:9d:be:b8:
         7a:f3:0c:b2:91:8c:c9:80:fd:97:ee:e4:43:e2:3e:af:2c:f4:
         9e:0b:ff:55:9b:91:81:e0:cb:80:16:c6:47:22:7c:31:9f:c7:
         76:80:e5:a8:e6:88:14:f4:43:ef:be:78:cb:db:c7:8d:6d:79:
         be:20:83:e2:00:e4:58:86:31:8f:58:80:ef:41:a7:cf:83:86:
         0e:78:06:af:87:a1:79:b4:7b:dc:f3:c9:71:02:4f:be:a7:2e:
         b7:82:92:91:8e:00:3f:8e:ce:01:a0:dc:24:46:b9:9f:96:f9:
         bf:79:16:07:32:a6:52:75:e7:3b:62:04:0f:98:1c:90:7a:5e:
         75:19:43:8c:99:c2:16:52:7f:64:ef:a0:b4:3b:ae:98:7f:f4:
         10:1f:c6:c3:d7:c2:52:5c:5b:a8:f4:d3:61:f4:96:57:5a:87:
         81:9c:bd:8b:5a:12:05:5c:ed:40:00:9a:b9:21:da:18:7f:0b:
         e2:28:75:8d:ec:5a:46:a7:70:dc:38:1e:bf:d1:b6:00:8c:a9:
         0e:1d:5e:cf
-----BEGIN CERTIFICATE-----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