Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa
File:                     iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa (raw, json)
Hash identifier:          MzV6Pg/IEbWSLLpHe6jS/LNZtnPl8uTv99bELY6QEUw=
Subject key identifier:   89:8D:5D:8F:78:E3:69:F1:D6:98:9F:9D:08:3F:56:EA:DA:63:2E:61
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       01857042AA9A4EF05ED1F746817B186D379F
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa
Signing time:             Mon 02 Jan 2023 02:14:55 +0000
ROA not before:           Mon 02 Jan 2023 02:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.103.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:aa:9a:4e:f0:5e:d1:f7:46:81:7b:18:6d:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Jan  2 02:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=898d5d8f78e369f1d6989f9d083f56eada632e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:14:75:45:94:20:73:f4:16:0a:0e:c1:6f:
                    62:3b:96:d5:47:de:22:80:00:d7:37:9f:ed:a8:89:
                    1a:aa:47:a1:96:83:74:11:ac:2f:e9:a3:89:e1:79:
                    8c:19:29:fd:05:5d:87:b3:8b:4b:62:36:e4:90:8e:
                    c0:7f:9c:5b:9e:6b:5c:20:1e:50:88:5e:01:c1:aa:
                    45:ce:fe:8d:18:34:ba:59:9e:6e:4e:9d:df:ca:57:
                    40:5e:19:5e:75:c3:d6:cb:75:0b:c3:b8:aa:7d:fe:
                    7b:fe:d7:ac:a6:e1:b0:92:c7:a4:d9:bd:7e:f8:3d:
                    9f:e7:3e:35:ac:0d:1b:1b:83:58:8c:af:6d:12:85:
                    57:e9:db:fa:de:19:3b:38:35:4d:c1:1b:11:cf:a4:
                    09:17:eb:b1:6b:49:b5:8c:9d:8f:7d:7b:a7:00:fd:
                    4a:70:19:6b:dc:db:1e:8d:79:73:d1:44:da:a4:b1:
                    7b:40:f8:19:a0:37:60:3b:00:58:b4:7b:13:66:cc:
                    a5:1e:39:9f:62:80:eb:c7:f4:29:7f:46:11:d6:74:
                    62:42:bd:47:ac:cc:2c:cf:26:f8:2d:cf:2e:44:9b:
                    65:16:ee:43:c2:f9:c6:e9:e7:09:cf:c6:0e:f1:33:
                    07:c2:84:06:77:a3:b7:89:eb:9f:56:f6:6f:66:f0:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8D:5D:8F:78:E3:69:F1:D6:98:9F:9D:08:3F:56:EA:DA:63:2E:61
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/iY1dj3jjafHWmJ-dCD9W6tpjLmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:28:82:33:1b:de:2c:ea:f3:56:c6:f6:4c:72:ad:27:80:0e:
         1e:28:61:e1:70:52:6d:3b:08:bc:ee:84:bf:41:73:a5:06:b6:
         ca:c2:15:01:24:03:3d:da:f5:82:d8:cc:6b:79:9a:7d:28:b3:
         d1:5a:b6:7b:19:f1:1a:8e:8a:b4:17:12:bf:bf:73:b9:30:80:
         bd:bd:7c:67:2c:de:d5:8d:5b:f6:af:77:84:08:08:22:61:29:
         48:bd:17:a8:6e:b1:68:a5:35:21:33:b1:34:68:f1:be:6f:39:
         b8:ee:d4:17:58:35:52:09:95:79:12:73:36:74:be:42:b6:41:
         2b:f4:60:b2:4d:5a:49:c4:41:cf:c2:4c:55:da:46:99:89:1d:
         f1:88:63:e3:c5:6b:0a:2d:51:d2:c8:76:65:8a:37:9e:98:50:
         77:22:fa:2a:5b:18:4a:54:90:31:3a:9c:68:e9:3a:93:f1:5e:
         51:ff:61:72:29:08:8c:e0:1b:20:71:7f:be:34:6a:96:ad:48:
         3e:77:48:9d:ec:54:41:dd:8c:5c:3d:6e:19:f0:33:ae:5c:f6:
         8d:bb:ba:1f:2a:7e:ce:54:da:11:5a:0e:d8:18:08:1b:1a:cb:
         c7:6b:00:53:77:0c:10:d5:ea:88:cc:06:e8:c8:ba:ff:fa:9b:
         bd:9b:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----