Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jaeEZR-KL8EvnFBzFAI4BTpcKwI.roa
File:                     jaeEZR-KL8EvnFBzFAI4BTpcKwI.roa (raw, json)
Hash identifier:          rx6VoNGKDzZ/AFmNAvKiaipU22txf5bALsjTE1r+AJg=
Subject key identifier:   8D:A7:84:65:1F:8A:2F:C1:2F:9C:50:73:14:02:38:05:3A:5C:2B:02
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       0185722801319DC7EC80C03D039BA85C5DE1
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jaeEZR-KL8EvnFBzFAI4BTpcKwI.roa
Signing time:             Mon 02 Jan 2023 11:05:02 +0000
ROA not before:           Mon 02 Jan 2023 11:05:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212815
IP address blocks:        185.171.202.0/24 maxlen: 24
                          2a10:4640::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:28:01:31:9d:c7:ec:80:c0:3d:03:9b:a8:5c:5d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  2 11:05:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8da784651f8a2fc12f9c5073140238053a5c2b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:8f:22:d1:e7:f4:f6:dc:bb:ba:cf:69:61:
                    0c:0d:98:c7:48:7d:47:08:0c:52:93:02:59:bf:65:
                    29:0a:47:79:9f:7b:f4:dd:a1:eb:f3:c1:65:ce:ab:
                    ff:99:bd:5a:45:ad:2e:e2:03:7f:c7:ba:4b:61:f0:
                    ef:e5:f6:d2:55:25:58:09:ad:00:9d:6a:af:c9:b6:
                    1e:aa:41:27:55:29:ef:e1:e2:bb:4a:c6:3a:da:69:
                    8a:6f:ad:ac:16:88:cd:9c:32:e0:b5:30:57:27:12:
                    04:4a:c4:1d:87:df:8e:ed:cd:3f:6d:03:fb:73:04:
                    e4:87:cc:33:5c:5a:93:63:59:30:75:07:57:49:04:
                    7d:cb:01:b0:21:93:cf:d2:65:b2:3e:29:9e:f9:10:
                    e0:b2:07:b5:e0:6f:97:ea:32:45:3d:50:af:41:fa:
                    fe:fb:7a:58:17:24:6e:61:a5:4a:98:f3:fd:bc:63:
                    31:eb:c4:01:a3:c0:fa:5e:cc:4f:91:a1:e5:08:2b:
                    d7:17:5d:2a:53:6d:52:0f:7f:75:2b:81:fd:02:e0:
                    98:9e:c3:aa:94:ca:80:71:4d:89:29:43:01:8a:31:
                    9d:d5:6b:2d:e5:00:d5:47:41:be:5a:52:41:6d:19:
                    b8:79:95:4c:56:33:ea:bf:c1:b3:d7:fa:b4:3b:6e:
                    86:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:84:65:1F:8A:2F:C1:2F:9C:50:73:14:02:38:05:3A:5C:2B:02
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jaeEZR-KL8EvnFBzFAI4BTpcKwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.202.0/24
                IPv6:
                  2a10:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:76:f5:cc:da:f6:52:18:49:3d:3a:b0:e0:63:8b:a8:de:95:
         03:71:ef:07:58:a4:05:b0:d5:17:9c:e0:37:99:32:b9:d2:16:
         41:6f:f3:9e:70:a8:9e:f4:83:e2:9d:31:ed:ff:1b:6b:7c:3f:
         ee:da:b2:1e:94:eb:d4:95:57:43:09:f2:54:8f:74:99:90:30:
         ee:cd:9b:de:bd:7a:ce:ab:a7:58:b3:6f:aa:84:d1:2d:92:5e:
         6d:e6:8f:2e:36:00:b1:8f:c3:74:01:37:92:a7:86:61:d1:e4:
         a1:52:0a:61:90:bd:cf:73:bb:0e:5c:10:e3:31:ba:b5:24:30:
         a2:9f:a5:f9:f3:01:ed:33:01:b0:4b:5d:c0:ee:ba:08:e6:01:
         16:6f:58:26:82:63:8a:02:9c:d5:86:93:bf:f2:ae:fe:eb:a4:
         a7:66:36:13:16:67:62:80:72:af:1f:b9:c8:4f:7f:df:51:16:
         3b:ff:11:42:b5:58:a3:5d:35:6b:7b:75:ef:22:a9:a0:c7:24:
         1d:3d:57:a1:9b:b9:f9:6d:2e:03:2a:5a:06:83:3c:b4:d4:fa:
         bd:e5:72:9c:03:8c:bd:fa:3c:06:b2:3b:2b:e2:64:9d:84:8f:
         5d:46:bc:3e:e4:15:39:76:f4:ff:d9:40:11:b7:f4:3d:83:ca:
         5b:7c:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----