Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/S7Zc3oGY_2ZB5q3Dwy7MGaXdJUQ.roa
File:                     S7Zc3oGY_2ZB5q3Dwy7MGaXdJUQ.roa (raw, json)
Hash identifier:          kVE5bZMFy1wsGjd67B+WvGi3YPQCmsk7F5SJA6/3FVU=
Subject key identifier:   4B:B6:5C:DE:81:98:FF:66:41:E6:AD:C3:C3:2E:CC:19:A5:DD:25:44
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       0187BC7DEA3F40F05D87A69341FC6ACDC53D
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/S7Zc3oGY_2ZB5q3Dwy7MGaXdJUQ.roa
Signing time:             Wed 26 Apr 2023 07:36:21 +0000
ROA not before:           Wed 26 Apr 2023 07:36:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49488
IP address blocks:        194.0.10.0/24 maxlen: 24
                          2001:678:d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bc:7d:ea:3f:40:f0:5d:87:a6:93:41:fc:6a:cd:c5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Apr 26 07:36:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4bb65cde8198ff6641e6adc3c32ecc19a5dd2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:19:f8:29:c2:c1:df:53:e0:71:81:ff:cb:
                    65:ca:25:0b:03:68:a3:07:a1:eb:6d:d0:f3:c7:d0:
                    28:0d:92:c4:d3:8a:a3:75:7c:7f:a5:0e:fe:10:d3:
                    27:34:3b:0a:40:6d:0a:18:94:83:fb:45:ad:23:81:
                    69:70:e6:05:58:55:36:1b:28:79:69:b2:e6:a8:38:
                    f4:f9:0d:de:25:26:ff:df:fd:9f:59:88:2a:cd:07:
                    d1:ab:eb:aa:27:71:d0:ee:81:b7:f0:fc:4a:c9:d4:
                    6e:50:33:85:38:a1:61:62:8f:95:e2:5c:75:e3:ad:
                    77:b1:ae:8a:f1:62:80:58:66:be:80:46:8d:b3:47:
                    b5:0c:07:0b:58:e1:94:c5:6a:eb:f7:d4:5c:89:0a:
                    46:e2:79:6b:32:91:3b:f9:c0:ad:e3:ec:f1:e8:22:
                    1b:37:68:16:0b:7b:7f:9a:8d:64:b8:f4:37:5b:81:
                    c9:b8:54:9c:d8:bf:17:24:6d:a0:19:58:fb:02:9a:
                    eb:0c:aa:85:89:31:91:78:6f:03:08:3d:96:2f:b7:
                    c4:cb:67:c5:c4:d3:0b:5c:25:c6:a0:c9:00:92:cd:
                    e5:c7:2d:38:80:96:9a:d7:32:5f:6c:a2:18:13:91:
                    30:a8:6a:f3:94:14:00:de:ba:f6:fc:37:bf:73:f3:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B6:5C:DE:81:98:FF:66:41:E6:AD:C3:C3:2E:CC:19:A5:DD:25:44
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/S7Zc3oGY_2ZB5q3Dwy7MGaXdJUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.10.0/24
                IPv6:
                  2001:678:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:76:e1:2c:95:9f:51:e0:71:50:5c:1b:47:28:dd:a3:3b:a8:
         6e:81:8f:50:a0:b7:c8:f9:d4:9f:db:ec:2b:45:79:48:7f:d9:
         f5:dc:09:59:fb:f4:bc:0c:e7:10:38:38:f5:bb:a3:f8:f9:b6:
         fc:8b:38:c5:b5:81:76:55:ac:18:cd:c5:27:14:27:a7:cf:3e:
         8f:5e:d1:9f:e8:b3:67:66:3d:35:89:da:c9:13:37:19:ce:1e:
         f9:4f:d4:bf:0a:04:06:f2:c3:6c:4a:2f:ae:a3:33:20:02:24:
         c1:7a:52:07:16:86:34:5c:7b:dd:5f:86:fb:99:67:37:8b:16:
         ae:0f:81:bc:f3:61:55:87:30:c0:15:26:ad:38:81:49:f0:8c:
         50:9c:aa:e6:40:78:35:4e:9a:82:ae:f8:09:64:ac:9b:75:70:
         97:10:58:e5:13:d3:41:1c:8c:e9:44:8c:2e:0d:28:79:c0:d6:
         fd:61:3f:d4:f3:56:b5:51:83:33:97:fc:a9:4a:15:03:ef:1d:
         29:1a:b7:d0:6e:08:12:5d:a7:4f:9d:18:b3:e6:e6:ee:46:3c:
         0d:ed:9c:b2:02:4b:94:67:b0:65:ef:ba:8f:62:b1:15:34:11:
         74:8e:7b:77:72:89:6a:54:af:2d:27:a2:29:f3:86:7b:9b:f1:
         33:03:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----