Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T4guE1QC81iuNKutyCQxlQtAn4s.roa
File:                     T4guE1QC81iuNKutyCQxlQtAn4s.roa (raw, json)
Hash identifier:          rJqjwe9BkoNBe2ffocsFqk3RbofjHE4ezYhwQe1zkok=
Subject key identifier:   4F:88:2E:13:54:02:F3:58:AE:34:AB:AD:C8:24:31:95:0B:40:9F:8B
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       018571A7A2383C8DE39A6F6A4D0A37DCA95B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T4guE1QC81iuNKutyCQxlQtAn4s.roa
Signing time:             Mon 02 Jan 2023 08:44:49 +0000
ROA not before:           Mon 02 Jan 2023 08:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42881
IP address blocks:        185.115.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:a2:38:3c:8d:e3:9a:6f:6a:4d:0a:37:dc:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  2 08:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f882e135402f358ae34abadc82431950b409f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:d4:20:a1:7f:b7:8d:48:82:c2:95:0e:6f:
                    90:8a:ed:1e:79:17:f5:b4:37:1d:39:9f:be:0b:52:
                    40:77:97:44:ca:3c:2c:68:7f:ad:fb:b4:ec:87:2b:
                    d5:13:d4:bd:0b:57:84:09:9c:74:6e:13:39:33:34:
                    09:67:af:b2:fc:e9:33:d5:d3:09:f9:68:aa:9e:37:
                    f1:be:59:4c:d9:15:0f:de:22:6f:fc:23:b1:ad:30:
                    2d:a6:e8:c7:fa:47:40:f8:a7:90:ce:22:4d:56:ab:
                    3a:96:7c:18:b3:ba:56:42:38:75:15:02:fa:21:61:
                    49:32:c5:9a:21:2f:84:81:88:ff:ac:42:21:c5:96:
                    6a:c7:c8:1a:6a:77:dd:7e:5d:3a:19:e9:60:55:29:
                    14:da:ad:cd:1d:df:73:79:b7:ef:08:ce:48:75:18:
                    9a:97:0a:b3:4e:be:f9:42:0a:84:6e:a4:a1:fd:7b:
                    4d:1d:94:2d:b0:9b:83:2f:bc:17:c0:cc:72:df:f9:
                    57:ed:ad:b8:bf:d3:de:66:29:58:75:c9:42:f6:04:
                    6c:3c:40:74:08:9e:c3:0d:de:cd:b9:60:60:d1:b3:
                    a6:7d:af:a6:7a:01:14:99:a7:03:5c:74:21:a7:8d:
                    c1:21:71:5c:a2:bf:f2:52:a4:a1:e6:fb:3c:8e:10:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:88:2E:13:54:02:F3:58:AE:34:AB:AD:C8:24:31:95:0B:40:9F:8B
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T4guE1QC81iuNKutyCQxlQtAn4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:56:57:35:71:6e:93:a1:b5:54:52:f5:f7:04:b6:d2:1e:
         28:a0:c1:36:f1:32:9e:6c:44:18:21:5d:f0:ed:22:39:e1:63:
         9a:15:e0:3e:50:85:60:86:33:27:18:31:31:b1:e8:b1:27:31:
         67:97:26:f2:62:b9:ea:f1:fe:f9:75:7f:8a:45:f8:3d:4f:a4:
         c8:e9:0e:f4:27:e4:da:21:67:f9:a6:01:a2:49:84:67:a4:a6:
         92:fd:d6:7e:c1:d6:5f:50:96:30:5b:38:a3:ca:20:85:14:2f:
         5d:38:58:d0:ac:f5:37:5a:ee:f9:b6:64:2a:aa:03:dc:ed:f5:
         ad:d5:46:cf:25:f9:bd:a4:f2:df:7a:0a:21:65:bd:11:0e:6a:
         02:12:ee:d9:de:fe:b0:6d:b1:6e:7c:94:3c:a7:c4:2e:06:ac:
         9c:15:bd:bf:00:cc:da:9f:c8:91:56:06:bb:a3:45:7e:4a:b2:
         00:10:4b:fb:4d:c9:9e:bb:94:2c:1b:cb:23:17:b0:fd:f5:48:
         84:e2:48:69:c9:58:0b:98:5d:5f:5d:37:6d:c0:10:a0:b3:f2:
         5f:a3:ba:34:cf:0f:6a:4b:f4:93:55:95:20:ce:92:3c:bb:1b:
         77:1d:47:24:a0:a2:6e:eb:3d:4f:24:f4:cf:ea:f3:4d:f9:7c:
         ae:b4:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----