Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/FrHvCzPT6tUwmPutLT0TG5nltxI.roa
File:                     FrHvCzPT6tUwmPutLT0TG5nltxI.roa (raw, json)
Hash identifier:          Lk7gJGo/hw+BI81tjm9hcgkOgx5cSWLelqvJAFBnv34=
Subject key identifier:   16:B1:EF:0B:33:D3:EA:D5:30:98:FB:AD:2D:3D:13:1B:99:E5:B7:12
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       01856DD41CC52D7ADB0A2435126A110455F9
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/FrHvCzPT6tUwmPutLT0TG5nltxI.roa
Signing time:             Sun 01 Jan 2023 14:54:55 +0000
ROA not before:           Sun 01 Jan 2023 14:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207655
IP address blocks:        194.36.0.0/24 maxlen: 24
                          2a12:3840::/32 maxlen: 32
                          2a12:3840::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d4:1c:c5:2d:7a:db:0a:24:35:12:6a:11:04:55:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Jan  1 14:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16b1ef0b33d3ead53098fbad2d3d131b99e5b712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:35:4b:97:eb:30:0d:c7:00:fe:52:9c:fc:
                    05:af:39:5b:b0:07:30:94:17:e9:e5:da:75:b4:83:
                    17:7d:a8:b5:39:c5:5a:8d:46:c3:03:d8:ff:35:fb:
                    f3:61:ec:bf:92:8f:98:4f:b8:49:6b:04:0a:14:8e:
                    87:60:69:9c:39:e9:87:4c:8a:59:c6:49:ab:f5:bf:
                    fc:f3:1d:8c:4b:c7:d6:ca:26:6b:0f:80:0e:5b:0e:
                    a1:a9:b7:57:8c:05:52:30:c5:8f:3c:3c:db:04:e7:
                    ac:a4:84:62:e8:67:f0:e2:06:66:22:2c:d3:30:06:
                    b7:32:a1:35:c9:06:be:60:fe:43:8f:18:18:82:e1:
                    49:e5:08:f7:11:85:1b:92:23:c3:09:c6:e7:c7:58:
                    d1:6b:73:f3:d4:a1:d7:ed:95:26:60:d7:22:1d:77:
                    7e:e2:31:a3:fc:88:b2:22:0a:55:6f:ac:3e:14:29:
                    c2:a8:d1:2d:84:e9:f4:a6:e1:c8:91:d1:1b:d0:ea:
                    d0:44:6f:fa:55:63:14:37:d6:fe:21:96:d9:52:25:
                    81:1f:e9:90:2a:64:d0:b8:c8:7a:26:45:bb:40:83:
                    52:74:40:37:dc:90:b7:5d:f8:d9:84:98:44:f2:55:
                    a6:be:58:ed:19:28:68:ae:34:0b:90:d8:30:27:7f:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:EF:0B:33:D3:EA:D5:30:98:FB:AD:2D:3D:13:1B:99:E5:B7:12
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/FrHvCzPT6tUwmPutLT0TG5nltxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.0.0/24
                IPv6:
                  2a12:3840::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:35:bb:49:8e:ff:80:43:42:88:96:5b:d4:76:f8:5a:82:
         05:8d:b6:ef:1d:0c:b7:af:b0:29:83:b3:c8:bd:ba:26:a1:02:
         d1:7e:bb:b2:6b:a6:db:a5:1c:c1:a5:e2:7c:ea:6f:61:58:0c:
         e4:19:2e:bc:0a:c0:87:5e:d1:5d:de:c2:fb:92:1b:db:91:ab:
         0b:43:c4:6d:7f:1d:a6:f8:9e:e2:86:80:4a:d9:10:6d:66:32:
         56:ac:eb:e8:e1:2a:8c:ec:76:56:bc:81:b8:28:57:92:03:20:
         4d:63:30:b0:14:36:09:c8:6d:9d:a4:9b:04:f6:99:66:7d:07:
         dc:b8:91:39:1c:59:7a:28:ad:59:a3:3b:59:49:19:97:ee:d9:
         21:49:1c:41:5a:83:f1:16:66:84:e2:9b:5e:b5:79:c8:08:7b:
         d6:9e:86:62:c3:70:05:70:65:c3:64:42:0a:c1:89:78:9a:d7:
         b4:3d:26:ba:56:45:05:0d:e0:a7:4c:4c:52:67:98:ef:45:81:
         22:24:bb:8a:6f:bf:89:28:8c:da:dc:6c:54:f8:14:fb:75:62:
         d6:73:7b:a8:93:a5:da:c4:4e:55:b9:33:56:39:25:1c:a7:8d:
         a5:6d:9d:31:f7:0f:78:79:2b:8a:20:9a:11:d9:f7:ca:27:f1:
         38:00:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----