Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/A0sa599QUvm_WnQ4-2NJrhntDsw.roa
File:                     A0sa599QUvm_WnQ4-2NJrhntDsw.roa (raw, json)
Hash identifier:          9lcxsKSbaozH93XpFGTJX4xSgHNtWye4rGzuwc+N2DU=
Subject key identifier:   03:4B:1A:E7:DF:50:52:F9:BF:5A:74:38:FB:63:49:AE:19:ED:0E:CC
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       0185729ED7A735A31D8336F49A3FD5FCC4C7
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/A0sa599QUvm_WnQ4-2NJrhntDsw.roa
Signing time:             Mon 02 Jan 2023 13:14:50 +0000
ROA not before:           Mon 02 Jan 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204958
IP address blocks:        185.96.168.0/23 maxlen: 24
                          185.96.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:d7:a7:35:a3:1d:83:36:f4:9a:3f:d5:fc:c4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan  2 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=034b1ae7df5052f9bf5a7438fb6349ae19ed0ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:c8:35:6d:08:29:58:2e:8c:35:ca:c6:53:
                    bc:d7:71:15:98:7a:07:64:65:51:3f:55:5c:61:e4:
                    48:6c:7b:70:3b:b2:f7:e1:b0:7f:c6:25:86:83:3c:
                    66:d7:16:f3:8b:23:11:8f:1c:0d:c6:a2:57:06:52:
                    72:ec:97:de:bc:dc:13:e9:f8:72:24:fb:f0:43:ba:
                    6f:af:08:f8:b0:32:0b:2c:a3:82:75:d0:cc:87:40:
                    33:a8:02:e3:15:b7:44:23:1e:d7:d9:ce:3c:5b:88:
                    3a:6c:69:55:9c:94:e6:5b:bf:0a:40:8e:63:02:a1:
                    98:32:e8:53:55:b3:68:c4:bb:2f:9e:76:3f:f3:82:
                    d1:69:20:60:e5:a0:46:fa:c0:dd:55:62:f5:e4:ea:
                    39:95:b1:d2:5c:4d:04:3f:16:75:54:f9:74:bf:a9:
                    13:0e:3f:27:ca:f6:dc:82:25:9d:cc:b1:cb:45:7a:
                    38:fd:7e:9c:79:f6:12:9a:96:a4:b9:34:8f:45:9c:
                    b4:ce:59:d6:c6:90:fb:8e:9f:43:a2:e7:43:bb:e1:
                    e2:87:87:33:8d:88:fa:66:a3:54:27:93:4e:3d:92:
                    80:19:9c:20:3a:83:9c:5e:87:9e:55:4b:e2:10:c1:
                    7f:82:e1:3b:92:7d:98:ca:14:d6:89:32:6d:35:be:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:1A:E7:DF:50:52:F9:BF:5A:74:38:FB:63:49:AE:19:ED:0E:CC
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/A0sa599QUvm_WnQ4-2NJrhntDsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:71:e7:f9:62:ac:50:2b:e2:61:ad:13:c9:f1:e4:bb:7b:
         61:56:bd:88:cb:7c:76:aa:71:2a:1a:35:f7:90:a2:b9:2e:c0:
         e8:e9:e5:46:a7:97:60:a6:f4:e6:0b:d4:74:f8:90:a1:01:83:
         42:0f:90:59:8f:94:7b:d1:b3:8e:da:f4:64:00:f4:8d:9c:67:
         0f:f6:a3:db:c7:2f:f6:47:f5:41:8e:84:7a:dd:fb:a1:b6:48:
         36:1c:12:5c:32:55:6a:c7:39:a9:50:85:f4:6a:3b:4a:8f:66:
         7c:c9:6c:90:35:24:61:b0:86:34:74:02:06:5c:aa:6c:bf:de:
         0a:47:8e:de:ac:2e:e1:19:a7:91:2f:3b:f0:60:ac:e6:80:b5:
         2f:c0:24:9a:ca:f6:7f:9c:f0:e7:0b:83:f0:76:ee:72:d6:de:
         4e:03:f9:cf:e6:15:05:44:c3:45:c7:70:d6:83:39:95:48:ab:
         fa:f4:c3:e3:68:c7:7a:dc:ee:1d:50:0a:d5:0a:c5:de:28:1f:
         67:ea:ac:87:92:55:e2:81:de:f1:f5:28:29:fe:69:2f:9a:3c:
         19:3f:f5:9a:a4:41:9b:7d:9c:c8:2e:ff:14:27:ea:71:cd:df:
         3f:58:e8:71:07:9b:6b:05:2c:68:5d:d9:73:8b:59:49:c0:af:
         63:eb:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----