Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa
File:                     LU4cIZATjP_FghvfqlaYaOAZw5w.roa (raw, json)
Hash identifier:          vFflwqXX0mvB/Ay19IjlP7lwnb+CZajCaj8SMXZ1x9w=
Subject key identifier:   2D:4E:1C:21:90:13:8C:FF:C5:82:1B:DF:AA:56:98:68:E0:19:C3:9C
Certificate issuer:       /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial:       018572280AAD382A3400D60C08C12E6F52E4
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa
Signing time:             Mon 02 Jan 2023 11:05:04 +0000
ROA not before:           Mon 02 Jan 2023 11:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8491
IP address blocks:        82.194.224.0/19 maxlen: 19
                          82.194.232.0/24 maxlen: 24
                          82.194.237.0/24 maxlen: 24
                          81.95.41.0/24 maxlen: 24
                          81.95.42.0/24 maxlen: 24
                          89.188.160.0/19 maxlen: 19
                          81.95.46.0/24 maxlen: 24
                          87.238.96.0/21 maxlen: 21
                          87.238.101.0/24 maxlen: 24
                          81.95.36.0/24 maxlen: 24
                          81.95.32.0/20 maxlen: 20
                          81.95.35.0/24 maxlen: 24
                          2a03:8640::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:28:0a:ad:38:2a:34:00:d6:0c:08:c1:2e:6f:52:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
        Validity
            Not Before: Jan  2 11:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d4e1c2190138cffc5821bdfaa569868e019c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:25:38:c7:22:04:b9:17:4a:44:71:8e:df:
                    6f:79:35:05:2a:dd:df:4a:55:ab:58:51:8a:3b:69:
                    e8:0c:7e:6b:55:9b:41:1a:7a:53:04:02:cc:a5:69:
                    0c:ff:bd:14:04:7d:e7:8f:2a:0f:b0:bd:04:92:7e:
                    89:24:97:c3:45:a5:b8:35:c1:2a:e0:e5:53:e9:fb:
                    db:22:03:67:fd:80:cc:a5:a5:f6:b1:2d:0f:94:fd:
                    5b:67:29:c0:91:28:b3:4f:0a:ca:2b:7c:24:d4:50:
                    6f:b3:e6:cc:78:7d:f3:9b:30:fb:37:b4:ef:57:bd:
                    d9:cf:f9:b0:00:cc:c8:47:cc:d9:f2:d3:a4:be:1b:
                    8d:b1:01:ca:df:92:52:a5:f8:3e:e9:93:c8:80:00:
                    37:0d:cf:09:04:15:da:28:e8:44:b2:86:28:57:e4:
                    87:b7:cb:c4:9f:4e:f6:f7:d0:be:89:2d:f4:0d:b0:
                    09:f7:99:5a:9b:12:5c:20:11:65:c6:c6:6b:75:4c:
                    c9:01:f8:0c:a0:73:0b:65:33:ae:39:6c:da:78:a3:
                    23:a9:e5:39:3b:07:e4:74:40:16:b4:c3:01:38:4c:
                    68:32:53:78:3b:ce:c6:86:2d:87:f9:06:b5:33:53:
                    9a:42:d7:29:40:aa:91:c8:ba:59:70:a6:8b:1e:e0:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:1C:21:90:13:8C:FF:C5:82:1B:DF:AA:56:98:68:E0:19:C3:9C
            X509v3 Authority Key Identifier:
                keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/LU4cIZATjP_FghvfqlaYaOAZw5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.95.32.0/20
                  82.194.224.0/19
                  87.238.96.0/21
                  89.188.160.0/19
                IPv6:
                  2a03:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:14:68:d6:1d:90:ae:c0:55:d8:8f:59:93:c6:3a:b1:5c:
         9b:cb:17:a2:c6:f9:29:aa:89:f1:62:ad:b2:6b:e8:f3:35:dc:
         7d:d6:05:39:95:b5:2a:ff:84:fd:bb:54:27:3b:db:93:a5:28:
         b3:6c:3d:d4:e3:18:f7:a1:7e:fd:ad:05:fc:46:a9:29:bc:bc:
         da:1c:43:a3:85:6a:d6:94:95:6d:42:ac:e6:43:62:a9:41:f7:
         7f:ba:28:6c:26:75:b2:cd:1b:9b:ed:9e:e3:65:60:5a:ce:a5:
         4c:c5:88:c8:5d:c3:d5:28:f7:59:ed:5d:5f:00:6a:27:1a:88:
         32:e3:49:b5:64:fc:7c:ac:90:d8:74:a8:f4:6b:33:29:51:02:
         b2:2e:87:5c:37:eb:f3:b8:6b:ee:16:fc:2c:da:03:56:68:17:
         f0:17:7c:5c:e6:1e:3d:96:67:9b:d4:b5:aa:28:99:f6:5c:a6:
         4d:e5:be:4c:97:12:b0:ac:10:a7:9d:e3:55:4c:0e:bf:12:44:
         54:5d:b5:ff:17:29:3a:5c:8c:59:b0:b8:12:d7:b9:ab:14:57:
         94:8e:1d:83:0f:83:6a:89:ed:ea:d0:04:72:58:8f:05:84:70:
         23:58:66:33:44:b5:d1:8f:f2:73:95:0e:69:2d:75:7a:05:0b:
         4a:f5:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----