Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/xO1UrZj-3_01VIN0RXOmiUlXR6A.roa
File:                     xO1UrZj-3_01VIN0RXOmiUlXR6A.roa (raw, json)
Hash identifier:          FFRhrvXM49YeCPl8KxcWHo0yHZea1Ys9RvVFQKxzsx8=
Subject key identifier:   C4:ED:54:AD:98:FE:DF:FD:35:54:83:74:45:73:A6:89:49:57:47:A0
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       01856F548B256F48CDB61099F483C030B47D
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/xO1UrZj-3_01VIN0RXOmiUlXR6A.roa
Signing time:             Sun 01 Jan 2023 21:54:49 +0000
ROA not before:           Sun 01 Jan 2023 21:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61418
IP address blocks:        195.206.236.0/24 maxlen: 24
                          2a10:2cc0::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:54:8b:25:6f:48:cd:b6:10:99:f4:83:c0:30:b4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Jan  1 21:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c4ed54ad98fedffd355483744573a689495747a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:68:95:83:cf:d9:a3:39:89:b4:9b:3c:c3:
                    d7:fc:40:92:13:ed:42:e2:72:a3:2f:fc:21:09:0e:
                    43:cd:f4:fe:25:3b:11:73:00:3e:0c:7a:65:f5:b8:
                    45:63:93:fe:40:c7:53:f8:e5:b9:02:b5:8e:a9:ce:
                    4f:37:40:72:47:73:ff:fc:dc:e1:59:9f:5e:60:bf:
                    a2:d9:1c:07:07:10:b5:61:ee:6a:00:c7:2b:f7:68:
                    a8:5d:35:f6:53:21:b6:0d:ce:9d:f3:1a:80:7c:d5:
                    38:b1:f7:67:cb:8a:4b:25:ac:b8:ef:19:2e:da:d2:
                    aa:ea:d1:07:6f:80:9c:99:a8:34:78:48:40:42:cd:
                    f5:0e:e4:17:15:0c:7d:17:4b:99:e7:ea:0f:bc:e5:
                    90:3e:f7:44:64:d8:6f:79:f0:86:e2:f7:9e:80:03:
                    fd:13:21:30:92:15:78:32:4d:3b:0a:bd:da:62:9d:
                    3f:54:6d:90:90:e2:2a:f1:d5:7d:52:ef:6a:46:3b:
                    f8:54:a9:1c:60:e5:22:0d:d8:39:b2:f6:75:2e:8b:
                    30:3c:2f:7a:2e:ba:46:92:89:2e:c1:d8:bc:77:f1:
                    04:bd:f5:0e:50:41:fa:e1:48:f4:5d:fb:58:5a:7e:
                    25:d9:f8:4f:e1:1e:6d:af:8e:71:9d:41:1a:35:b5:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:54:AD:98:FE:DF:FD:35:54:83:74:45:73:A6:89:49:57:47:A0
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/xO1UrZj-3_01VIN0RXOmiUlXR6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.206.236.0/24
                IPv6:
                  2a10:2cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:2d:09:9f:34:9a:e9:0b:82:1b:5a:ae:ec:76:89:5c:27:
         be:01:da:e9:94:fc:1e:88:04:44:04:bb:25:ee:74:e4:68:e1:
         f5:e3:7a:ba:b6:ae:54:66:df:0a:64:dc:99:42:b3:84:dc:4b:
         a4:b5:21:aa:59:cd:74:3f:fb:84:81:d1:2b:ad:fd:a1:e9:43:
         6d:6b:d8:0d:ed:11:cd:95:b8:40:bc:4f:a5:95:bc:ce:18:ca:
         18:f2:8f:3e:f8:d3:42:4d:3b:05:2e:cf:72:7a:97:6b:9a:d6:
         95:3c:43:f9:f6:41:14:09:47:3a:9b:4d:99:76:67:5d:fa:89:
         0a:b9:1d:ef:4b:84:3d:f5:38:58:83:f0:c9:aa:a3:cc:7f:f2:
         86:1c:6e:61:ca:da:01:ac:48:30:ff:1d:32:c6:c9:ef:5a:98:
         2a:77:c7:12:71:49:17:6f:67:38:a3:9f:bb:e5:8d:a0:31:36:
         e4:3c:98:70:83:97:9c:cd:ee:80:67:9b:22:59:b6:e7:7c:f3:
         0f:3b:5a:c9:7f:a7:48:7c:b4:3e:4b:ad:46:e4:c3:00:b6:a9:
         bf:c6:4b:88:c7:39:eb:3c:4e:6b:8d:f4:24:73:1a:38:6e:ea:
         a2:5b:95:12:0a:63:96:a2:b9:a3:60:19:52:d1:87:f0:73:25:
         16:aa:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----