Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/NMgw_BSPSKhApfHUvyIXo7DQDdk.roa
File:                     NMgw_BSPSKhApfHUvyIXo7DQDdk.roa (raw, json)
Hash identifier:          klPxr2IszIslha+zYDtXzl0sQiFOgjg70V//WS6Esn0=
Subject key identifier:   34:C8:30:FC:14:8F:48:A8:40:A5:F1:D4:BF:22:17:A3:B0:D0:0D:D9
Certificate issuer:       /CN=a5920dec6ff00949e82161721eb94cc645e34776
Certificate serial:       018572836755372DC0FB594524D37E2CD100
Authority key identifier: A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/NMgw_BSPSKhApfHUvyIXo7DQDdk.roa
Signing time:             Mon 02 Jan 2023 12:44:52 +0000
ROA not before:           Mon 02 Jan 2023 12:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59889
IP address blocks:        185.186.148.0/22 maxlen: 22
                          2a0b:7d80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:67:55:37:2d:c0:fb:59:45:24:d3:7e:2c:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5920dec6ff00949e82161721eb94cc645e34776
        Validity
            Not Before: Jan  2 12:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34c830fc148f48a840a5f1d4bf2217a3b0d00dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:71:45:1c:1f:b7:0f:3c:69:09:95:f5:ff:
                    d2:7e:41:04:c4:5d:b8:98:ef:02:a1:e8:8d:96:0e:
                    e9:5f:02:c5:ee:09:7d:97:32:d5:f8:38:c1:5a:dc:
                    c9:af:4f:9c:86:36:54:48:5b:05:d9:f5:1e:cf:8e:
                    6f:a6:86:24:01:6b:ea:fe:7a:40:ea:85:6e:46:0c:
                    d1:bb:75:fb:13:fa:7d:40:3a:65:96:f6:ba:9b:21:
                    20:5d:30:9e:c8:d3:99:1d:d0:27:8c:58:f3:2c:a9:
                    6e:8e:10:8c:ed:e1:a3:ff:8d:48:c9:e5:0f:01:61:
                    06:1d:76:fc:66:69:39:64:42:55:02:de:29:f1:da:
                    8f:32:1c:db:ce:c7:95:e9:da:08:c3:6b:33:89:f0:
                    c2:29:a2:e6:1f:ee:ee:25:f4:d9:9e:84:93:b2:6a:
                    de:7b:f2:95:da:12:6f:a8:dc:f6:6b:47:e6:29:20:
                    d9:8a:67:cc:e9:e7:4e:85:dc:34:d7:ea:c7:88:bc:
                    25:39:85:99:4a:6b:0c:5b:76:d1:f3:63:7e:98:80:
                    a4:ae:02:ca:b4:1a:c8:44:5d:09:e2:78:20:24:22:
                    e9:8c:be:2b:bd:34:9b:33:84:20:03:5f:97:56:d2:
                    c1:7a:2a:fd:75:e1:df:92:59:c2:8f:b6:71:a7:85:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C8:30:FC:14:8F:48:A8:40:A5:F1:D4:BF:22:17:A3:B0:D0:0D:D9
            X509v3 Authority Key Identifier:
                keyid:A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/NMgw_BSPSKhApfHUvyIXo7DQDdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.148.0/22
                IPv6:
                  2a0b:7d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         74:90:98:66:de:8a:28:30:6b:b5:8a:be:ce:c6:17:57:b2:f8:
         8c:a9:d4:9a:6e:89:37:eb:c9:25:51:ae:01:f7:a2:2c:bc:5b:
         85:11:28:b6:33:8e:bf:c5:be:d0:a0:de:29:b4:24:99:19:43:
         22:13:91:b7:c5:ab:cc:b3:2e:3c:b8:ad:46:40:76:86:69:f3:
         f6:66:a5:d2:32:e8:50:35:57:8c:99:6b:3e:3c:00:e9:8e:bd:
         77:b0:23:a1:3f:24:d7:c1:4e:22:8b:56:c9:68:bd:79:58:ff:
         13:e2:5e:c0:76:46:78:b3:c4:96:67:aa:63:02:9e:9c:ca:58:
         b7:f6:d1:73:15:01:25:1a:37:6d:08:09:1a:b6:01:43:c3:d8:
         ae:a8:6a:6e:c3:35:64:ac:0b:76:91:2a:b6:e0:4f:69:66:80:
         a8:07:16:63:88:e9:29:39:06:5e:aa:e2:8b:3a:b1:3d:5a:62:
         6c:d5:b6:25:0c:84:66:80:2e:a3:15:b5:4e:4f:03:dd:38:3b:
         cd:b8:6d:64:8c:4f:3a:df:98:3d:c7:32:b1:d8:bd:0e:00:97:
         ed:dc:5f:d9:c9:2c:32:cb:bf:a8:c5:61:f2:c1:3b:ec:0a:1e:
         b4:29:54:b0:55:a4:6c:5b:1b:bd:6a:d5:42:b1:eb:6b:77:a1:
         21:15:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----