Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qGkJubHRCW4ET7GuBDAfEDzHbt8.roa
File:                     qGkJubHRCW4ET7GuBDAfEDzHbt8.roa (raw, json)
Hash identifier:          y/Wda2gOgcRPx3eTKey+XcuJzZ6Vx8H2LsDctVdc8VQ=
Subject key identifier:   A8:69:09:B9:B1:D1:09:6E:04:4F:B1:AE:04:30:1F:10:3C:C7:6E:DF
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0187B28966BFA62A1DA4940E042D05390CCB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qGkJubHRCW4ET7GuBDAfEDzHbt8.roa
Signing time:             Mon 24 Apr 2023 09:12:41 +0000
ROA not before:           Mon 24 Apr 2023 09:12:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        185.185.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:89:66:bf:a6:2a:1d:a4:94:0e:04:2d:05:39:0c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Apr 24 09:12:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a86909b9b1d1096e044fb1ae04301f103cc76edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:6a:f0:f8:73:e4:2f:b1:7f:b1:40:34:e3:
                    c8:14:4c:45:72:ba:0e:54:db:30:4d:56:60:0f:f9:
                    87:d7:d4:35:c8:ec:87:42:4a:38:7f:eb:69:23:53:
                    56:08:a1:61:ab:ab:b5:03:63:8b:31:41:d2:46:1a:
                    18:97:39:65:31:74:08:c0:7a:49:c6:5f:33:c6:9d:
                    d5:d8:6a:a4:1f:8d:37:ae:fe:e0:23:00:e1:b8:9c:
                    c6:cd:49:e6:38:38:60:e4:1c:4a:d4:dd:4c:df:b9:
                    33:a1:23:97:2b:9e:68:78:4b:c3:92:18:1a:a7:fb:
                    9f:23:2b:ab:de:41:52:3d:da:4a:e1:f2:19:55:90:
                    9c:20:b2:ca:91:37:d6:c0:e7:26:bd:d3:45:e5:9a:
                    d9:7e:bd:06:a6:6d:ba:41:0f:67:1f:ff:b4:f7:26:
                    cf:9f:21:49:59:f1:f2:1e:42:8d:86:50:70:fc:66:
                    60:2b:2e:e5:c5:c8:1a:70:7b:e8:93:d5:70:df:7c:
                    b8:a2:18:83:be:e9:30:d6:e1:79:a6:17:3a:1d:ac:
                    87:8d:47:7b:20:52:84:b5:87:cf:43:eb:0d:e1:c4:
                    a5:0f:8a:d0:fb:2a:69:7a:2d:1b:5c:db:14:31:b8:
                    a1:b3:13:15:3f:c8:15:63:18:a0:1c:1b:ef:77:92:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:09:B9:B1:D1:09:6E:04:4F:B1:AE:04:30:1F:10:3C:C7:6E:DF
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qGkJubHRCW4ET7GuBDAfEDzHbt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:a7:64:80:9a:b0:dc:a7:2b:2b:ca:d5:8f:9c:77:51:4f:
         59:5a:04:b8:44:01:b1:8f:1c:7b:9a:05:81:f6:bb:f1:d9:0a:
         46:21:27:83:9c:af:da:46:1a:2c:11:2f:4f:2f:57:25:78:b8:
         33:8a:15:ff:88:b2:94:92:aa:a4:a1:80:bf:33:68:fc:96:a8:
         ef:e4:77:9d:9a:c8:c6:79:29:ae:3a:eb:84:d2:5e:83:f1:85:
         4a:ed:be:c4:a9:24:e2:24:a1:b4:53:df:4b:9d:16:c4:2a:fb:
         cb:0b:32:bd:df:46:0e:eb:e2:37:e9:81:0c:73:81:9e:d4:22:
         b3:f9:03:1a:38:5c:0d:6f:0b:d0:2a:55:08:b6:8e:e3:a0:13:
         5a:d2:f7:62:94:26:f5:79:49:e0:b0:23:34:5c:64:20:99:ef:
         26:13:11:10:94:03:50:2c:1e:49:b8:46:cc:fc:40:ef:82:ee:
         1f:bc:02:72:86:d3:a6:20:0b:91:dd:9c:c4:4f:30:0f:7c:84:
         3a:82:66:9d:f2:39:ae:fd:2b:c7:1e:76:44:51:45:40:34:01:
         21:9f:51:b4:02:24:bd:60:cb:3c:4b:7e:e9:48:df:6d:14:5a:
         d9:b6:61:ad:bc:8e:d9:b2:a7:66:ff:53:d2:a4:1d:76:2e:05:
         c2:a3:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----