Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa
File:                     6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa (raw, json)
Hash identifier:          Fp34PElny3m35dyM+MNLqno1IW+fDqE/iHO22in9eeQ=
Subject key identifier:   E8:7F:71:E2:4C:DD:A6:A6:7F:87:0F:31:41:50:30:CE:82:D2:FA:07
Certificate issuer:       /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial:       01856BCA35E77884C056927311B7689719DE
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa
Signing time:             Sun 01 Jan 2023 05:24:52 +0000
ROA not before:           Sun 01 Jan 2023 05:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202306
IP address blocks:        109.237.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ca:35:e7:78:84:c0:56:92:73:11:b7:68:97:19:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
        Validity
            Not Before: Jan  1 05:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e87f71e24cdda6a67f870f31415030ce82d2fa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:a5:b6:04:39:f6:21:64:8f:da:db:b4:7f:
                    95:27:86:07:73:0a:e6:a4:13:41:9f:dc:37:5e:8c:
                    f2:50:6b:1b:ac:86:81:a7:c4:d4:68:ba:c9:fc:c5:
                    a3:1a:b5:67:2f:36:d6:40:02:a8:25:39:4c:00:a4:
                    77:06:a7:bd:0d:fe:b4:87:5f:e7:86:43:cc:23:fc:
                    68:02:0e:fe:f3:45:5f:aa:37:b5:aa:a3:2b:52:d4:
                    1c:95:a5:94:9e:fa:54:fa:3d:4a:a5:7e:88:e2:3a:
                    38:51:ca:4f:12:a0:14:1b:58:de:34:6a:2f:84:2c:
                    50:30:52:69:ee:d6:b0:ba:6b:e1:07:3d:c7:52:15:
                    bb:8d:9f:0a:08:b5:99:12:9f:38:01:0f:7d:56:4b:
                    b8:34:9d:dd:38:45:75:b6:b4:48:5b:94:86:ab:fe:
                    d4:0e:e5:6a:49:cd:8d:79:1a:55:9d:84:30:58:eb:
                    c4:34:05:27:60:40:64:3c:0e:34:63:ee:1d:e9:01:
                    8c:44:20:ce:f8:25:91:83:a0:ca:4b:f0:e3:45:c2:
                    97:9d:4d:e1:7d:27:bc:72:bc:85:03:7a:0a:b7:34:
                    7a:d3:ab:ba:08:3a:f7:6e:99:3b:ba:35:40:16:8b:
                    74:d5:ca:24:79:0c:33:04:10:1c:43:21:9a:e8:69:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7F:71:E2:4C:DD:A6:A6:7F:87:0F:31:41:50:30:CE:82:D2:FA:07
            X509v3 Authority Key Identifier:
                keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/6H9x4kzdpqZ_hw8xQVAwzoLS-gc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.237.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:47:09:fd:dc:a7:b8:85:31:21:13:0e:90:14:11:73:7d:22:
         0f:e6:cb:e8:43:c8:d4:88:df:86:c5:fb:83:10:f8:3a:29:78:
         66:8a:50:a5:9e:e1:dc:d1:ff:c0:a9:27:a0:b2:6f:4c:b2:00:
         97:2d:f1:93:d4:85:1e:69:69:b3:0f:fa:30:ff:e6:c6:33:3e:
         f7:70:a0:41:38:9f:5f:c6:a6:19:7f:c4:12:54:88:1f:b6:99:
         1a:bd:42:9f:33:d5:6e:e8:6d:e3:c3:aa:6f:49:3e:a2:ee:2d:
         41:83:20:96:9e:04:90:ca:94:bd:82:1b:4a:c9:43:73:ec:ab:
         d7:a3:f8:24:ba:fa:90:c1:9f:cb:a2:97:7d:3f:99:3e:ec:90:
         9c:32:bd:50:ed:2b:70:5f:2b:86:d5:be:5c:98:86:34:e6:74:
         c1:4c:53:b1:ef:de:94:00:2b:71:d9:26:a8:73:f5:64:0f:55:
         b9:45:97:0d:14:3f:5b:77:e5:49:29:c3:e3:31:db:0f:ba:07:
         81:8f:09:63:66:aa:b4:7a:08:b3:9b:f7:5c:1b:d5:f8:da:b1:
         c9:7b:82:16:e2:07:66:4d:c6:fb:18:8f:5a:45:cf:37:70:29:
         95:e3:4a:e7:5a:1a:17:76:5b:73:6d:bf:2f:22:66:fd:49:1c:
         45:fb:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----