Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/52KULK_CnMPoTtnbRON8qYELaoY.roa
File:                     52KULK_CnMPoTtnbRON8qYELaoY.roa (raw, json)
Hash identifier:          A525k11JiUHRYn28fFrefycypPnaj2bvOQDK22COg9g=
Subject key identifier:   E7:62:94:2C:AF:C2:9C:C3:E8:4E:D9:DB:44:E3:7C:A9:81:0B:6A:86
Certificate issuer:       /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial:       0185712781237A41634BB1A99E2DB91F9B25
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/52KULK_CnMPoTtnbRON8qYELaoY.roa
Signing time:             Mon 02 Jan 2023 06:24:52 +0000
ROA not before:           Mon 02 Jan 2023 06:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210418
IP address blocks:        94.143.227.0/24 maxlen: 24
                          2a12:a780::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:81:23:7a:41:63:4b:b1:a9:9e:2d:b9:1f:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
        Validity
            Not Before: Jan  2 06:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e762942cafc29cc3e84ed9db44e37ca9810b6a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:72:a9:96:54:14:0c:c9:93:12:64:a3:0f:
                    6b:68:78:cb:5f:1d:7f:43:1f:d7:bc:d7:2a:0b:1b:
                    50:c8:da:b4:1c:88:36:c2:13:45:9b:dd:7c:7a:93:
                    48:c9:db:8d:7a:fe:ec:8e:65:7c:94:08:7c:ee:4b:
                    fb:80:2e:34:90:4f:36:be:89:c2:69:c2:8a:10:ec:
                    58:4c:63:d6:3d:27:7a:36:0f:6e:3f:6a:78:2e:0f:
                    70:0a:c1:66:ba:d1:a1:47:8b:66:b2:16:8b:16:71:
                    03:6b:74:d7:10:4c:58:41:0f:63:67:9d:bc:97:00:
                    77:aa:68:cb:46:ef:c1:50:17:3e:94:d5:27:f4:c5:
                    62:cb:ab:e0:a2:ff:fb:07:60:ff:91:48:d6:71:36:
                    c7:3a:23:42:87:53:56:7a:94:19:13:61:05:3c:b7:
                    b1:47:e0:a6:95:83:8c:b0:87:7c:3c:a0:85:fc:51:
                    16:53:e1:74:11:f5:a4:5a:82:86:d5:49:2f:52:50:
                    8c:20:8b:9c:ba:24:27:54:56:4a:77:dc:fd:d7:a0:
                    ad:7d:13:da:ae:94:27:ec:99:85:8a:55:f3:4a:2f:
                    f1:77:c2:6c:69:f4:22:37:57:df:c1:26:bc:61:62:
                    aa:de:2f:e8:2e:5b:4e:c5:3c:71:04:91:8f:95:47:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:94:2C:AF:C2:9C:C3:E8:4E:D9:DB:44:E3:7C:A9:81:0B:6A:86
            X509v3 Authority Key Identifier:
                keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/52KULK_CnMPoTtnbRON8qYELaoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.143.227.0/24
                IPv6:
                  2a12:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:49:7b:dc:f8:75:f9:31:9d:2e:1e:8f:e6:3c:1e:a9:ba:9f:
         92:5d:8b:ec:4c:02:8a:00:56:9d:d6:81:cb:23:f1:65:f3:16:
         6f:78:93:83:aa:8a:cb:2e:4a:c9:5d:7f:a0:8a:c7:9b:a1:85:
         14:4e:71:55:00:ad:8c:2b:d5:c7:a9:18:8c:57:50:2d:0c:81:
         9c:9e:81:b2:75:bc:fe:be:d1:20:a0:ac:f8:b8:63:cc:6a:e9:
         1b:9d:5a:e6:bd:9d:37:46:ca:ba:60:8e:97:26:97:e5:8a:44:
         02:e3:b8:f2:38:22:ea:cc:ca:c6:ac:d7:17:ac:b4:85:ef:94:
         ef:88:d8:3c:43:41:fa:99:8a:5b:0c:17:78:88:87:e7:d4:76:
         8e:eb:dc:32:28:43:c5:9c:5e:04:c4:32:07:38:af:24:27:fb:
         f4:e8:50:c3:5a:14:21:4d:eb:2b:ba:8d:00:ac:5c:f3:55:64:
         a9:f4:28:23:94:4f:73:06:4f:55:ce:1a:4a:39:d7:11:e9:6c:
         c5:62:42:a8:49:1a:be:4b:a2:29:8d:34:89:32:66:f0:b1:78:
         c9:9d:af:c4:7b:e4:ca:21:e7:5f:00:68:db:a3:0e:dd:ea:2c:
         9b:6c:82:e7:cd:6b:2c:b5:e3:24:11:47:90:17:d9:25:3a:87:
         7d:49:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----