Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/wT16o6BK0nljr3lAQ9h4IW3WQ0c.roa
File:                     wT16o6BK0nljr3lAQ9h4IW3WQ0c.roa (raw, json)
Hash identifier:          W+mkPsrB9hLaOucqWuE9YKJ4z0xcFMbStPK3VqVxNm8=
Subject key identifier:   C1:3D:7A:A3:A0:4A:D2:79:63:AF:79:40:43:D8:78:21:6D:D6:43:47
Certificate issuer:       /CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
Certificate serial:       018C7B4544ED3F7CD3B6EBB53A4523BAA7F7
Authority key identifier: D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/wT16o6BK0nljr3lAQ9h4IW3WQ0c.roa
Signing time:             Mon 18 Dec 2023 04:53:06 +0000
ROA not before:           Mon 18 Dec 2023 04:53:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203939
IP address blocks:        185.204.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:45:44:ed:3f:7c:d3:b6:eb:b5:3a:45:23:ba:a7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
        Validity
            Not Before: Dec 18 04:53:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c13d7aa3a04ad27963af794043d878216dd64347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:1d:fc:8c:5d:90:6e:e2:7d:88:01:06:cb:
                    0d:f5:fc:3e:45:78:2d:67:9a:b7:58:b7:22:ff:fe:
                    86:e8:68:ee:41:c8:d7:e1:32:b9:1a:60:be:7d:d7:
                    bd:54:38:03:c2:de:73:4f:1a:75:7b:99:e9:53:26:
                    3a:df:ba:ff:11:b0:68:bb:35:31:ed:e6:3e:f0:f6:
                    88:65:3b:7d:44:6d:70:8b:ed:6f:65:6f:e8:97:c2:
                    67:37:42:0d:36:05:4e:71:da:84:ac:59:81:89:5b:
                    d1:af:97:05:f5:0d:fd:aa:e3:d1:c7:76:af:91:f7:
                    6c:4b:f8:0c:29:99:11:5e:50:fb:69:a4:52:e6:5b:
                    fb:44:d7:2d:fc:77:68:8d:ce:d7:7a:c7:28:63:ef:
                    88:bb:91:9d:76:c7:e7:6d:7d:2b:f0:90:63:d7:ea:
                    40:42:d5:da:7d:63:6c:86:89:a6:45:a9:b7:31:31:
                    6a:ef:4f:c9:85:2a:00:ef:a3:7b:cd:57:5f:f0:24:
                    34:7c:73:71:e0:f9:c9:16:0d:f6:f3:c1:c4:e0:cd:
                    f7:a7:e4:63:8b:aa:ce:2f:92:43:51:ae:cb:f3:1e:
                    ce:31:8e:9f:90:27:73:a3:8a:7b:59:f1:7c:3c:41:
                    c5:df:28:44:46:36:56:b3:6f:73:f6:01:26:f7:de:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:7A:A3:A0:4A:D2:79:63:AF:79:40:43:D8:78:21:6D:D6:43:47
            X509v3 Authority Key Identifier:
                keyid:D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/wT16o6BK0nljr3lAQ9h4IW3WQ0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:78:52:64:37:68:7f:82:42:8b:ad:4e:3d:da:f1:e2:78:f1:
         d3:e7:5d:fd:bd:d4:5a:2a:51:42:0c:19:88:09:ad:ba:5e:ba:
         0b:66:9c:f5:58:e2:9f:46:2f:86:5f:2a:49:0c:c8:85:52:07:
         5c:1f:f4:0a:d7:5d:b2:c6:6a:12:21:ed:95:51:ad:60:fb:36:
         a6:d4:76:dd:57:81:21:40:23:fa:d2:59:cc:c7:6e:9e:31:c7:
         dd:0f:0d:39:e3:3c:c4:ca:da:56:97:86:09:0b:11:66:6a:59:
         3d:0c:3f:9e:a3:3d:46:8a:21:59:a9:af:90:6d:33:7f:47:61:
         97:d4:08:69:28:bb:12:0f:c8:e1:de:37:3c:a6:cd:f0:65:68:
         f0:c3:ea:3b:d4:c6:fe:c3:cf:dc:2f:db:68:2f:dc:a3:a3:ba:
         e7:57:3c:ab:51:5d:4b:e6:c2:27:b2:19:5a:78:dd:fc:82:c1:
         a6:a5:0f:87:ac:a1:51:a5:37:3d:d2:95:ed:ca:ec:e6:0e:d4:
         ed:95:45:1d:29:e4:8f:df:89:e5:01:a8:0b:ad:74:02:56:b2:
         55:b7:39:cd:1f:2a:2b:56:06:53:48:3b:b7:ba:02:95:05:37:
         98:58:79:ba:59:5c:bf:48:92:ff:fa:a3:8c:a1:9b:31:ba:6f:
         ef:4c:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----