Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/y6xOJ8nuv7w0o4c4Zj3td1GPzwk.roa
File:                     y6xOJ8nuv7w0o4c4Zj3td1GPzwk.roa (raw, json)
Hash identifier:          GhF02ZeMCV8/DEZmHe5oX61/b66cbk3Y9ArRBdb2Jw4=
Subject key identifier:   CB:AC:4E:27:C9:EE:BF:BC:34:A3:87:38:66:3D:ED:77:51:8F:CF:09
Certificate issuer:       /CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
Certificate serial:       01856C25D3CDBCA043C17436768BEB25CB37
Authority key identifier: DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/y6xOJ8nuv7w0o4c4Zj3td1GPzwk.roa
Signing time:             Sun 01 Jan 2023 07:04:56 +0000
ROA not before:           Sun 01 Jan 2023 07:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60449
IP address blocks:        185.1.251.0/24 maxlen: 24
                          2001:7f8:132::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:d3:cd:bc:a0:43:c1:74:36:76:8b:eb:25:cb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7153bbb3ea9ed9ceb803e6e7f192aabd9ada34
        Validity
            Not Before: Jan  1 07:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbac4e27c9eebfbc34a38738663ded77518fcf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:11:48:69:6a:2a:d6:97:83:55:86:8d:f1:
                    8e:27:9f:72:00:f7:77:ed:93:d6:65:ed:ad:02:9a:
                    07:1b:4e:e6:5a:33:ba:ed:33:c3:47:37:9f:38:76:
                    8d:37:00:d1:76:b5:2e:47:62:d7:36:8c:95:06:ea:
                    a8:28:4f:46:17:2d:38:58:c4:6f:f0:84:e0:04:de:
                    c2:ab:28:7d:1a:f4:82:c1:55:dc:bb:ad:13:ce:f1:
                    d3:17:4b:d5:97:1f:93:18:fa:97:39:7c:c8:e4:88:
                    49:f5:48:53:7a:d8:a3:f4:aa:8c:a6:44:3a:30:2f:
                    f5:98:f1:43:db:7c:46:d3:6b:c4:5e:c2:13:3f:e9:
                    62:2a:20:63:cc:0e:4c:46:2e:dd:eb:f0:2b:a6:91:
                    73:88:29:d6:3a:0d:b0:fe:59:87:6b:4b:3c:3f:1d:
                    af:12:db:0e:18:11:19:a9:25:41:ff:02:47:86:cc:
                    a5:7a:37:d1:80:69:27:b1:c8:bc:88:47:15:6a:8a:
                    fe:0d:b6:8e:50:ac:54:cf:88:10:86:c4:03:b5:08:
                    ba:1d:c2:e1:79:d9:10:3f:d5:87:1b:28:7a:90:13:
                    16:1f:93:a4:10:65:04:e5:02:e2:e7:f6:60:bd:2f:
                    6b:64:e9:d5:0d:36:c7:f2:5e:20:a4:46:5c:14:88:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:4E:27:C9:EE:BF:BC:34:A3:87:38:66:3D:ED:77:51:8F:CF:09
            X509v3 Authority Key Identifier:
                keyid:DB:71:53:BB:B3:EA:9E:D9:CE:B8:03:E6:E7:F1:92:AA:BD:9A:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23FTu7PqntnOuAPm5_GSqr2a2jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/y6xOJ8nuv7w0o4c4Zj3td1GPzwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/14fa9b-a8d1-4781-8deb-9e464499f4fc/1/23FTu7PqntnOuAPm5_GSqr2a2jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.251.0/24
                IPv6:
                  2001:7f8:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:96:d6:31:24:af:a6:4e:c3:53:54:34:6b:2c:ae:46:f2:eb:
         ba:eb:29:76:92:3c:aa:92:8a:a9:03:b5:cb:56:22:69:3e:86:
         64:21:f2:19:cd:c9:8b:98:8c:02:eb:fc:02:28:31:59:11:1b:
         07:10:b0:9f:ce:61:ec:57:45:71:7a:5a:d6:4c:61:f3:e4:5a:
         7e:50:4b:96:09:95:24:73:4a:5d:74:f2:30:0e:83:32:eb:c8:
         f2:26:2a:2a:d5:38:91:f4:99:29:65:de:56:24:0e:3d:3e:1e:
         38:4a:2f:d8:5a:df:63:af:a2:27:5f:39:09:5a:00:10:3e:e5:
         48:bf:bd:55:5c:3d:26:12:8c:1f:0a:3c:85:7b:fb:52:5e:df:
         89:15:3f:74:30:5d:3a:75:79:10:e2:7d:80:fa:c4:b9:c4:4e:
         6c:cb:bb:1a:a1:1b:06:c8:9a:86:89:5b:35:c7:42:e9:d2:99:
         0a:a6:de:1e:5b:7a:29:b9:2d:32:c1:45:12:79:05:33:ba:5d:
         bd:f8:42:94:50:c8:65:a0:0e:3b:4d:f8:67:22:ce:30:3f:21:
         94:5c:ca:09:82:96:f9:59:08:fa:92:8e:92:fd:ce:67:71:aa:
         22:df:d7:67:1a:2b:74:02:17:fd:7e:a4:ba:ac:d7:7a:e8:95:
         21:11:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----