Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa
File:                     7m-K1WWx7ZyutnGzacInX4FgeJo.roa (raw, json)
Hash identifier:          +mokTBbz4YThpc/b4hEH8v3qKIIJ9MPZre2m5V49Jx0=
Subject key identifier:   EE:6F:8A:D5:65:B1:ED:9C:AE:B6:71:B3:69:C2:27:5F:81:60:78:9A
Certificate issuer:       /CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
Certificate serial:       01856FD5175B103388992E857F47E70F927D
Authority key identifier: 1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa
Signing time:             Mon 02 Jan 2023 00:15:14 +0000
ROA not before:           Mon 02 Jan 2023 00:15:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        62.204.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:17:5b:10:33:88:99:2e:85:7f:47:e7:0f:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
        Validity
            Not Before: Jan  2 00:15:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee6f8ad565b1ed9caeb671b369c2275f8160789a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:e9:19:e4:b4:62:78:7b:db:d9:bb:31:75:
                    80:59:04:cc:8e:d4:ba:87:5d:69:07:85:0f:00:c9:
                    28:51:e7:ed:55:79:19:eb:97:77:8a:25:15:7e:ca:
                    36:04:13:7b:69:52:f0:b9:b4:b7:31:36:b0:f6:7a:
                    10:fe:78:2f:7b:ad:26:57:47:4c:9f:e3:7a:27:01:
                    55:e9:7b:f4:b2:97:2d:19:da:a0:a6:8f:50:b6:88:
                    f2:9c:75:ca:6e:f8:0c:2e:ef:74:6f:81:bd:cc:a4:
                    6b:e2:9c:d5:40:00:5c:58:e1:68:5f:88:dc:8c:50:
                    d2:1b:d7:05:f1:09:b7:49:66:e6:3d:a6:58:e4:8a:
                    7c:b6:e6:b0:61:fa:e5:b8:00:b8:1a:b4:cd:19:a5:
                    ea:a5:c9:db:41:8e:78:fc:38:8e:c7:5e:9c:0c:f0:
                    4d:54:ff:aa:7d:8c:c9:04:c9:17:d3:88:ec:cf:fa:
                    94:73:06:e7:08:7d:a5:cd:13:1a:58:d0:02:a4:d3:
                    4b:aa:22:3f:fa:2b:01:a2:aa:64:68:ee:87:ab:b2:
                    33:fb:47:1c:c4:aa:51:6c:5f:59:ce:8c:6c:37:63:
                    a6:b6:06:17:d3:7e:3e:6d:d6:92:d5:a9:4d:28:e4:
                    ed:15:16:81:22:af:6b:0a:9e:96:b9:4e:d7:2b:4c:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:8A:D5:65:B1:ED:9C:AE:B6:71:B3:69:C2:27:5F:81:60:78:9A
            X509v3 Authority Key Identifier:
                keyid:1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/7m-K1WWx7ZyutnGzacInX4FgeJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:29:83:46:ea:70:13:e6:e3:0a:b8:a2:f3:09:73:ec:df:
         56:27:35:74:95:c6:2f:09:ac:28:99:30:56:cd:26:a3:0b:fe:
         d3:12:27:15:06:c1:c2:06:e9:31:e1:4f:37:7e:37:11:85:93:
         a2:84:5e:89:a0:ca:37:b5:71:2b:cd:1f:00:49:66:4b:bf:7f:
         cb:b8:a7:42:5c:ab:42:e1:b5:11:14:c8:8a:79:09:a8:2e:ee:
         7b:4b:4d:d5:19:d2:6c:d1:91:ae:17:70:42:8f:59:d2:e5:09:
         7e:30:97:f7:f8:11:42:fb:43:9a:db:b7:ff:03:29:03:d5:3e:
         4d:21:98:3e:30:fd:91:6c:a2:a3:3e:ba:33:0d:a3:e7:b7:81:
         8b:94:b0:63:46:dc:e3:b4:69:f4:78:29:7e:a7:db:b9:e1:de:
         0a:c2:2d:cb:70:c3:8d:ce:bd:bc:35:b1:90:43:12:32:28:d0:
         2a:b0:44:65:54:e4:8d:35:87:61:4d:0d:63:1e:63:d7:d9:43:
         f1:c2:c6:6f:c2:9c:88:0c:f4:93:61:77:89:40:1e:25:6e:50:
         16:6a:39:af:21:70:dc:4f:d0:d0:94:2f:a7:83:f3:e5:58:27:
         86:13:f4:5f:e4:db:7e:31:5b:e9:c2:3c:a3:ba:8b:75:66:2d:
         65:ba:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----