Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa
File:                     fChsu7FdMQaH2N5pVKRbDroBzfs.roa (raw, json)
Hash identifier:          JEDKeesx/jMJDrVIM9okR3pDEjSdfQDJG0Wz37S1AEM=
Subject key identifier:   7C:28:6C:BB:B1:5D:31:06:87:D8:DE:69:54:A4:5B:0E:BA:01:CD:FB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       018570D50BBEE418D93F77F06CB2DA02098F
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa
Signing time:             Mon 02 Jan 2023 04:54:48 +0000
ROA not before:           Mon 02 Jan 2023 04:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211756
IP address blocks:        185.242.178.0/24 maxlen: 24
                          2a10:98c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:0b:be:e4:18:d9:3f:77:f0:6c:b2:da:02:09:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Jan  2 04:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c286cbbb15d310687d8de6954a45b0eba01cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:bf:70:fd:0f:5f:74:1c:41:3b:9b:13:49:
                    4a:39:61:6c:f2:95:57:a1:7e:41:60:e4:6c:12:91:
                    5d:92:88:4d:90:fb:c2:8d:be:67:77:99:2e:5e:da:
                    3b:64:57:6b:aa:6b:a1:c8:44:d1:98:25:09:4a:9f:
                    31:8c:a6:5d:d4:08:d8:9e:ea:45:69:5a:50:c2:f1:
                    93:b1:bb:7b:b8:59:9e:a3:45:2c:48:52:ac:47:e5:
                    08:eb:43:53:30:8b:9b:b5:44:56:d3:d5:f7:06:c5:
                    8e:d5:43:b3:51:99:41:43:a0:93:c6:ba:0d:b5:e5:
                    c1:e8:da:c4:d3:c1:c6:87:0d:a1:9a:8e:a0:55:56:
                    2a:9f:25:07:1e:9c:7d:db:16:80:cc:b8:43:64:48:
                    a0:95:4b:e1:db:64:11:80:64:43:bf:df:5b:32:f4:
                    dd:8e:c2:3c:16:dc:ca:15:08:2f:31:48:14:7c:03:
                    94:09:f4:44:cd:fc:f9:d0:ca:39:36:9c:4a:13:b0:
                    19:5f:bc:43:b4:27:6a:04:49:79:48:3c:66:f3:93:
                    ce:fc:30:e4:ea:7b:65:7d:d0:45:39:3d:2a:ea:b3:
                    85:96:e8:be:82:a8:71:5a:47:fa:03:c2:a0:d1:6d:
                    f2:10:ca:cd:c5:96:f4:4e:5e:96:65:8b:9b:a2:f4:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:6C:BB:B1:5D:31:06:87:D8:DE:69:54:A4:5B:0E:BA:01:CD:FB
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/fChsu7FdMQaH2N5pVKRbDroBzfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.178.0/24
                IPv6:
                  2a10:98c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:ce:c6:ca:78:ae:86:2e:8e:d2:a2:6c:60:9f:f3:b9:29:
         71:25:cb:c7:2d:2e:28:6e:4b:4d:11:52:4b:8e:35:60:af:0a:
         47:53:a1:7d:11:97:ee:26:3f:a5:cd:45:50:56:db:83:f7:2a:
         65:b8:3b:a1:93:0d:00:fd:e2:cb:1e:0f:d0:4e:ba:f9:94:48:
         63:d6:57:68:13:f6:62:3d:e1:66:2d:b7:b3:4b:ee:c8:92:9f:
         c8:b9:29:35:b0:1a:50:a4:d5:e4:0d:ca:96:aa:7d:39:0d:78:
         01:65:ec:d6:57:51:78:52:f3:c8:c1:cf:25:63:42:74:a5:25:
         6b:c0:85:c6:88:62:a6:48:e7:dc:c1:d5:db:80:07:a4:79:fa:
         83:2c:9c:96:6e:3c:34:f3:db:7a:48:0f:f2:54:48:6b:60:81:
         57:ff:25:34:af:0b:5b:9e:88:bc:62:ba:c4:41:3d:54:eb:eb:
         d1:f7:b3:60:f0:0e:f0:16:1b:7d:9c:18:d4:e4:26:0d:d3:31:
         c5:9e:85:8a:b7:8e:38:39:21:aa:e8:f2:ff:b4:30:71:23:eb:
         ac:53:bf:a0:57:e7:73:26:10:b6:7f:42:bf:fd:d8:6e:89:90:
         98:1c:97:2a:a6:9c:b0:97:22:46:c9:88:60:7d:5f:84:33:c7:
         6c:cf:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----