Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa
File:                     otfqlvEN0EJh_Cc1YLGOpItNby8.roa (raw, json)
Hash identifier:          24Ph2j8nhKH4jzPLUaXfl4ydsYqFr02dey/3Kv78fcA=
Subject key identifier:   A2:D7:EA:96:F1:0D:D0:42:61:FC:27:35:60:B1:8E:A4:8B:4D:6F:2F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018AD64873E3A916BB69959B97F85035FC43
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa
Signing time:             Wed 27 Sep 2023 10:56:27 +0000
ROA not before:           Wed 27 Sep 2023 10:56:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43519
IP address blocks:        213.248.216.0/24 maxlen: 24
                          213.248.219.0/24 maxlen: 24
                          213.248.218.0/24 maxlen: 24
                          213.248.254.0/24 maxlen: 24
                          2a01:618:407::/48 maxlen: 48
                          2a01:618:402::/48 maxlen: 48
                          2a01:618:405::/48 maxlen: 48
                          2a01:618:400::/48 maxlen: 48
                          2a01:618:403::/48 maxlen: 48
                          2a01:618:406::/48 maxlen: 48
                          2a01:618:401::/48 maxlen: 48
                          2a01:618:404::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d6:48:73:e3:a9:16:bb:69:95:9b:97:f8:50:35:fc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep 27 10:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2d7ea96f10dd04261fc273560b18ea48b4d6f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:ad:fd:e4:4b:88:45:f0:a1:81:bc:9b:2e:
                    41:8b:59:20:8b:f2:5d:f2:59:a1:36:03:7d:72:ed:
                    2e:70:08:df:b1:b3:6f:11:6e:26:dc:8a:f2:20:05:
                    c6:06:7e:1e:98:63:01:71:d4:1a:03:61:86:bf:50:
                    04:5d:1c:ec:84:78:f4:0b:c2:d1:de:88:5d:b7:ad:
                    66:66:eb:cd:ff:8c:0c:56:7b:20:d8:76:a7:fe:b8:
                    cc:d2:6e:ac:d4:a3:7b:df:ed:99:b9:05:eb:e2:f4:
                    67:d7:e8:02:6d:39:7b:f4:69:20:e5:b7:2e:7a:04:
                    ff:86:ad:e4:7a:b9:cf:a4:0f:c6:b0:a1:43:de:ff:
                    b3:20:0c:87:95:65:07:64:18:78:08:9f:af:f1:a9:
                    aa:98:9c:13:d6:e3:b7:a8:4e:fe:64:47:42:1b:2a:
                    74:15:ab:06:2f:ac:37:f2:b9:5b:51:49:7a:69:52:
                    66:1f:84:09:b7:f7:ba:c3:b7:9a:c5:28:1b:0d:62:
                    92:3b:ca:55:4b:d3:9d:bd:f8:8d:fd:f0:46:15:fc:
                    87:a1:a5:08:42:34:b4:d4:80:42:68:ab:e0:70:f2:
                    ea:1a:89:d9:a7:f4:63:54:c6:b4:1a:14:b1:48:8c:
                    19:bd:ea:3d:8d:5b:79:6a:41:8c:cb:e3:c1:1a:56:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:EA:96:F1:0D:D0:42:61:FC:27:35:60:B1:8E:A4:8B:4D:6F:2F
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/otfqlvEN0EJh_Cc1YLGOpItNby8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.216.0/24
                  213.248.218.0/23
                  213.248.254.0/24
                IPv6:
                  2a01:618:400::/45

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:43:43:4e:16:25:41:8b:23:a1:53:fa:5e:d0:a2:94:80:
         67:f2:cf:23:c0:25:3f:97:67:30:fc:90:b5:d7:53:d1:cb:6d:
         11:f7:7f:78:67:aa:90:db:93:20:fa:2c:f8:3e:33:92:36:4d:
         f3:80:bd:2e:6d:75:73:0b:d7:8e:ad:eb:4f:30:ad:8e:a5:9d:
         92:62:9e:d6:11:ba:f2:a0:bc:95:05:77:04:32:4f:a8:0f:26:
         4e:68:11:52:85:a9:80:d5:70:48:b0:98:0e:5d:a4:cf:c1:4e:
         a9:7f:31:3e:dd:12:a7:0a:3b:a0:fd:cd:f9:d2:8d:3b:2a:f1:
         04:fc:53:4a:6e:3c:60:88:1c:e1:d9:6f:42:2a:61:b3:1e:11:
         50:4c:54:82:0a:fd:f7:aa:f6:3b:8d:da:ee:17:7e:ee:d5:e5:
         1c:e1:ae:71:fd:d4:9d:00:44:28:34:34:19:80:4a:f2:47:71:
         85:fd:ad:50:b7:81:6f:15:61:74:50:ff:1c:95:bf:bc:71:62:
         ce:14:f7:ad:77:e8:32:e7:90:a9:8a:7f:d6:a9:01:37:de:d0:
         9b:69:49:97:d7:37:0d:3d:ca:9e:ae:5a:95:47:b8:cf:ef:7e:
         7c:8d:f2:67:ae:03:6d:b6:75:ad:08:05:c7:f0:c4:aa:ab:30:
         b7:98:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----