Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/Kr23AQfpbl1V4BFfLe1mOoRPstk.roa
File:                     Kr23AQfpbl1V4BFfLe1mOoRPstk.roa (raw, json)
Hash identifier:          ffqyPaUhOFjuwUBGj4gv+ylGPR+7DdW2aajeT5qsG6Q=
Subject key identifier:   2A:BD:B7:01:07:E9:6E:5D:55:E0:11:5F:2D:ED:66:3A:84:4F:B2:D9
Certificate issuer:       /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial:       0185708C907C5C892168EC2F4D766E403DBA
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/Kr23AQfpbl1V4BFfLe1mOoRPstk.roa
Signing time:             Mon 02 Jan 2023 03:35:38 +0000
ROA not before:           Mon 02 Jan 2023 03:35:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205044
IP address blocks:        185.231.236.0/22 maxlen: 22
                          2a0c:8f00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:90:7c:5c:89:21:68:ec:2f:4d:76:6e:40:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
        Validity
            Not Before: Jan  2 03:35:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2abdb70107e96e5d55e0115f2ded663a844fb2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:63:1b:72:e8:77:f8:f2:7e:36:22:cd:dd:
                    3b:3f:ae:8f:db:51:bf:8e:1c:3f:1d:de:a0:d6:b6:
                    30:a2:8d:9e:b7:50:3b:3f:7c:e6:94:56:ba:99:fc:
                    15:cf:ac:b6:f4:34:7a:a4:a4:5b:60:4d:45:ae:1f:
                    c5:79:d2:3b:b5:45:3e:18:3c:f6:00:7e:21:40:5e:
                    32:10:98:11:35:f9:e7:5e:77:6f:6b:32:68:73:be:
                    d6:b0:08:db:d7:01:17:4a:11:e4:24:b6:ee:69:c4:
                    16:86:89:bc:e8:79:5f:b1:9c:07:7e:7d:01:2b:68:
                    5c:7c:0c:21:42:a0:3b:a9:fd:2b:dd:49:ed:3b:4f:
                    ba:c5:79:ba:83:12:cb:f1:9a:c7:2a:9a:67:79:63:
                    12:b8:a9:85:6b:f5:27:e6:83:d1:f2:26:a2:b5:39:
                    81:0e:8b:12:14:f6:d0:4a:d1:ca:e9:9c:75:a6:c6:
                    81:4c:59:7c:1f:e3:f3:17:f1:37:22:14:e2:2f:8c:
                    13:bd:65:c3:ad:e5:21:16:fa:73:86:82:da:9e:98:
                    ff:5c:b8:89:10:31:98:3b:9d:84:3f:e9:85:14:58:
                    3e:90:e5:2b:b5:61:06:13:8b:89:28:67:5f:1a:3f:
                    5a:58:ab:f4:0d:cf:b8:08:b7:b0:36:01:4c:e1:a9:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:B7:01:07:E9:6E:5D:55:E0:11:5F:2D:ED:66:3A:84:4F:B2:D9
            X509v3 Authority Key Identifier:
                keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/Kr23AQfpbl1V4BFfLe1mOoRPstk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.236.0/22
                IPv6:
                  2a0c:8f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b2:02:c5:4b:ff:d9:96:fb:4f:82:55:f9:95:51:5e:64:72:4f:
         9f:4b:5c:3d:9e:93:a9:a6:05:8f:fe:16:bd:18:9a:2a:4f:9e:
         aa:42:23:33:de:f2:ba:6e:0f:d6:ea:aa:b5:72:d8:96:6a:01:
         1e:8f:0d:b6:f9:2b:d9:2c:c0:56:02:fe:ee:01:bc:14:c7:32:
         5c:c1:16:d2:f4:ec:86:9a:98:61:78:dc:d1:b6:d2:ba:04:03:
         5d:a1:36:f7:39:f8:88:50:6b:ee:15:42:06:8c:dc:4e:b8:33:
         ac:a9:bb:6b:0e:c9:a4:d4:92:54:df:ce:0a:6b:10:17:48:e5:
         85:0e:11:35:53:cd:30:0e:3d:5a:b0:75:c4:41:bb:e2:00:a5:
         3c:84:0b:ea:f4:5d:cd:80:5c:60:13:03:55:21:18:cb:88:f9:
         88:29:b2:5d:3f:f6:4e:08:7f:da:fc:dd:8f:c7:b6:74:14:c4:
         0f:a1:3d:4e:3e:7b:0f:7a:9c:84:7b:0d:88:05:e5:79:f1:76:
         76:13:39:60:6c:67:cd:56:45:51:f8:02:bb:ad:e6:db:ea:ae:
         0d:44:8f:26:be:7f:72:70:9a:0d:cf:43:ba:2d:26:00:fc:41:
         a0:65:c3:05:25:a4:e2:99:89:3f:03:4a:77:34:92:ef:7f:05:
         e2:f1:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----