Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa
File:                     f2e270Oe3pTAVYjspCljIxRxfIE.roa (raw, json)
Hash identifier:          zkWkUFyTG4W5vtM/KmaXgiwHpp61yDyaC/76WXQldx0=
Subject key identifier:   7F:67:B6:EF:43:9E:DE:94:C0:55:88:EC:A4:29:63:23:14:71:7C:81
Certificate issuer:       /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial:       01858987937BDF076F519E49C9594AC74717
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa
Signing time:             Sat 07 Jan 2023 00:00:41 +0000
ROA not before:           Sat 07 Jan 2023 00:00:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     692
IP address blocks:        64.224.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:89:87:93:7b:df:07:6f:51:9e:49:c9:59:4a:c7:47:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
        Validity
            Not Before: Jan  7 00:00:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f67b6ef439ede94c05588eca429632314717c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:b1:43:b4:99:cc:89:d3:6e:75:f5:7b:80:
                    78:f4:f0:78:a2:63:32:c6:d3:df:b6:a7:b3:ed:8f:
                    ff:f9:38:1b:7e:7a:1f:70:25:3f:f0:c1:68:18:a2:
                    2e:9a:2b:12:f5:88:7d:d9:f0:c9:61:5c:bc:27:a2:
                    27:3d:9c:4d:50:02:e3:e6:b5:2f:a9:00:5f:a2:4b:
                    b2:b5:08:cd:67:d1:f6:73:1a:d4:10:3d:2c:32:e4:
                    b6:7d:74:d0:bb:36:75:fc:fb:26:e6:8b:6c:a3:b2:
                    75:cc:24:fe:cf:2f:c9:44:5a:5f:c1:1d:59:e5:d3:
                    eb:43:8a:60:84:dc:8a:17:af:d9:e7:b8:f0:dc:33:
                    87:fb:7c:8f:82:0f:21:67:c5:66:f7:22:5c:57:24:
                    e5:2b:1c:da:98:84:a8:71:43:e6:3f:c6:3f:9b:2a:
                    34:31:df:fa:73:ef:0c:a8:2d:8e:da:b9:12:7c:10:
                    81:2d:50:30:3c:d7:da:f5:fa:f0:1a:8e:78:03:4e:
                    91:96:f2:3f:e8:ea:c9:80:20:9f:5a:12:5f:f2:99:
                    d7:2e:1b:d0:5d:ad:76:d8:49:e1:82:be:fe:0f:f0:
                    12:e8:73:53:6c:40:19:bf:87:13:17:fc:e5:7d:29:
                    1f:34:a4:cf:c8:25:e3:29:71:cb:ca:ba:cd:1f:79:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:B6:EF:43:9E:DE:94:C0:55:88:EC:A4:29:63:23:14:71:7C:81
            X509v3 Authority Key Identifier:
                keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/f2e270Oe3pTAVYjspCljIxRxfIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:e5:5e:cd:88:55:01:c0:4b:28:f2:62:8b:a9:e9:7c:cf:
         14:4e:7e:b0:38:f8:64:ea:ee:1a:77:05:dd:8c:11:9f:2b:67:
         70:59:4a:97:9c:96:98:78:dd:8b:e3:b0:49:cf:cf:6d:c1:e1:
         60:27:a3:e8:08:c8:76:24:5c:a6:34:15:57:aa:05:ea:5f:a8:
         a2:64:bc:7b:c2:01:bb:a3:b5:7f:4f:37:96:de:c3:7c:08:82:
         7e:a0:78:c1:3d:7a:96:83:58:8b:bc:cb:53:a8:8d:f7:3f:48:
         c8:24:72:60:5b:7c:05:86:99:07:b3:ba:52:ef:cd:11:83:fe:
         aa:a3:56:89:38:3f:0c:40:40:3c:19:90:58:81:c6:2b:55:a7:
         c4:17:3c:46:29:27:3f:5b:49:74:29:d2:5f:16:5c:b2:5a:84:
         6a:04:e5:ad:5c:92:de:08:0e:d8:5a:f0:2a:42:ef:1b:65:cf:
         6d:fa:8f:60:59:fb:b2:26:07:5b:81:5a:49:73:ad:d8:ec:3a:
         07:7c:68:79:4e:24:fd:63:93:20:a0:71:d3:22:32:a4:11:a8:
         f5:66:d6:99:eb:13:74:18:41:df:18:50:e8:1f:4c:bb:00:0f:
         87:79:47:0f:d3:16:46:d7:7f:53:09:97:e2:61:eb:dc:05:4b:
         2f:32:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----