Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/26yt40c8nQeWLPlQ2YDZUqAuCQc.roa
File:                     26yt40c8nQeWLPlQ2YDZUqAuCQc.roa (raw, json)
Hash identifier:          0ee1pMHZTlr+dtpNPlZrprr+yPZnmk7b2YmjEC3YmJE=
Subject key identifier:   DB:AC:AD:E3:47:3C:9D:07:96:2C:F9:50:D9:80:D9:52:A0:2E:09:07
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       01856F4B61327A63F45D8F567A08D44742CB
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/26yt40c8nQeWLPlQ2YDZUqAuCQc.roa
Signing time:             Sun 01 Jan 2023 21:44:49 +0000
ROA not before:           Sun 01 Jan 2023 21:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3303
IP address blocks:        194.147.134.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:61:32:7a:63:f4:5d:8f:56:7a:08:d4:47:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Jan  1 21:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dbacade3473c9d07962cf950d980d952a02e0907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:43:b6:5f:d6:52:dc:84:24:33:3f:f5:b3:
                    4f:25:62:5d:0e:45:47:4c:ba:27:0c:0b:46:d9:24:
                    72:ca:63:0a:f9:49:a8:55:d4:c6:ff:a3:b4:7e:00:
                    7e:85:38:d7:0b:ed:e0:06:64:da:03:14:d8:6f:48:
                    c6:cd:92:cd:50:d2:fb:09:24:3e:13:a7:66:db:78:
                    04:0a:83:8b:10:b0:55:82:c1:89:43:9c:0f:dd:7b:
                    88:c7:2c:9f:d5:68:e1:2d:7f:d6:8f:3a:b2:54:dd:
                    9a:2f:99:7f:5c:c8:e1:c4:91:63:37:19:70:ba:6e:
                    b5:be:6c:39:0a:49:d4:7b:03:ff:aa:cf:8d:22:ec:
                    a5:25:3b:b3:0f:16:94:ab:22:8f:83:d0:c8:c5:7b:
                    0d:41:e7:c1:52:81:1a:aa:5b:72:4f:d3:c3:0a:92:
                    e8:a3:03:ac:7c:be:a6:bc:9b:d1:78:9c:fc:36:db:
                    5e:93:71:2a:ac:bf:88:35:d8:02:fe:04:a3:1f:5e:
                    39:34:42:2c:77:cb:67:43:d3:af:21:12:35:60:9d:
                    ea:9c:d8:e3:91:f5:65:02:11:3f:81:5b:a3:6e:15:
                    4d:59:38:ec:57:d2:d9:74:5a:89:8c:fe:54:b2:e3:
                    bf:5c:1d:e6:04:88:ed:e5:20:30:b2:67:87:5a:ca:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:AD:E3:47:3C:9D:07:96:2C:F9:50:D9:80:D9:52:A0:2E:09:07
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/26yt40c8nQeWLPlQ2YDZUqAuCQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:29:bc:5e:f6:f1:c4:19:84:29:32:d8:86:8a:6a:30:46:c9:
         7c:06:e5:dc:33:71:92:00:c5:08:26:1b:41:4f:af:7b:d9:73:
         e0:3f:bc:85:31:9d:3c:3b:e4:d7:55:5e:27:7a:ce:a6:9b:3d:
         13:4b:ce:3f:8c:db:46:d6:3a:69:1a:2e:6c:5c:c3:66:85:d5:
         f6:cd:0f:0d:57:a9:fb:b6:d3:d5:0f:15:6d:ed:86:a6:e7:85:
         53:3e:e9:51:05:7c:c5:ef:68:15:68:36:23:10:6f:95:66:92:
         e6:be:3e:80:98:6f:61:85:d1:d4:c5:c5:47:ec:2b:e5:16:b0:
         88:ab:b2:91:66:aa:c9:8a:2c:8e:45:71:f0:52:6d:2e:0b:66:
         68:95:55:bf:ee:52:5f:7f:b7:90:5b:cf:8d:6a:41:01:93:1e:
         e1:a4:77:50:fb:0c:55:21:78:60:8d:b3:2d:8d:c1:ae:e9:89:
         6a:52:f9:95:a3:e9:10:d0:37:cd:5b:85:85:3d:28:24:fb:19:
         df:2d:d2:5f:23:5f:e7:41:fb:06:dd:bf:80:a5:54:8a:28:fe:
         03:fc:1d:6c:1b:5d:1d:3d:fb:96:ab:5d:bb:20:66:c0:7f:69:
         83:17:d2:a5:d4:66:cb:f2:fb:87:01:e7:d9:d2:be:ba:dd:51:
         83:e1:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----