Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa
File:                     TaWPvHwJJ9xkW924KzC4RBhg__A.roa (raw, json)
Hash identifier:          X2vHny8yAae5ZeAkJGR0JmBhGM1zxJ/j2Y3m2OgA8ac=
Subject key identifier:   4D:A5:8F:BC:7C:09:27:DC:64:5B:DD:B8:2B:30:B8:44:18:60:FF:F0
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       0187BD5A243DCD80E9282101FE91C58FE21E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa
Signing time:             Wed 26 Apr 2023 11:36:53 +0000
ROA not before:           Wed 26 Apr 2023 11:36:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35346
IP address blocks:        194.114.144.0/24 maxlen: 25
                          194.114.144.128/27 maxlen: 27
                          45.67.116.0/24 maxlen: 24
                          91.242.103.0/24 maxlen: 24
                          91.242.108.0/22 maxlen: 22
                          91.242.112.0/20 maxlen: 24
                          178.175.176.0/22 maxlen: 24
                          91.242.70.0/23 maxlen: 24
                          91.242.64.0/18 maxlen: 24
                          91.242.72.0/23 maxlen: 24
                          91.242.74.0/24 maxlen: 24
                          91.242.75.0/24 maxlen: 24
                          2a07:5540::/29 maxlen: 29
                          2a09:4440::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bd:5a:24:3d:cd:80:e9:28:21:01:fe:91:c5:8f:e2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Apr 26 11:36:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4da58fbc7c0927dc645bddb82b30b8441860fff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:28:fc:83:1c:6b:d0:1b:93:63:15:34:3e:
                    8e:4f:55:ef:d1:70:5b:25:38:b3:58:5c:24:b7:6e:
                    05:5f:ff:34:61:ec:f5:ef:bc:d3:f5:df:47:bb:02:
                    e5:7e:e1:b2:04:90:b8:df:a7:8d:b5:3a:d1:48:2d:
                    69:45:93:e3:d7:fc:06:f8:15:c8:b7:9e:48:8b:51:
                    e8:8d:88:0d:4f:3e:68:f3:d1:15:24:41:27:51:57:
                    d1:12:c8:c7:68:6c:e7:06:63:8a:21:a4:1b:57:76:
                    8c:8d:22:3d:09:42:bc:87:7e:f1:03:1d:2f:00:b6:
                    7e:b8:dd:43:ae:53:69:f3:62:5c:ef:05:65:bf:4b:
                    5e:a2:d3:93:31:e1:41:7a:a3:e3:66:08:1e:5e:dd:
                    37:8f:60:57:fa:36:e9:55:a4:c7:69:40:81:4e:cc:
                    e3:4b:a9:d2:db:35:15:70:87:74:5d:27:5f:62:53:
                    35:be:e0:d6:3d:34:1a:c2:2c:df:4f:59:fc:0a:f6:
                    00:03:26:00:01:df:4c:61:25:5d:10:63:17:5f:6a:
                    e9:02:ff:32:28:96:93:6e:73:9c:48:81:ac:b8:98:
                    dc:f6:d5:7d:c4:6d:24:08:27:c3:97:ec:cc:7c:a0:
                    2b:08:75:54:43:26:0b:85:d6:c8:64:b5:bc:f7:74:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:8F:BC:7C:09:27:DC:64:5B:DD:B8:2B:30:B8:44:18:60:FF:F0
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TaWPvHwJJ9xkW924KzC4RBhg__A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.116.0/24
                  91.242.64.0/18
                  178.175.176.0/22
                  194.114.144.0/24
                IPv6:
                  2a07:5540::/29
                  2a09:4440::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:03:19:e0:9d:c2:87:33:a9:1b:a2:0b:ce:c7:a3:5a:cb:f9:
         e5:fe:6c:94:cb:a4:f0:3a:3e:3d:7b:32:d2:60:28:19:fc:0d:
         ae:7c:56:51:4f:1e:12:1c:93:7f:cf:3f:46:1b:f9:a8:42:a1:
         a2:d8:3c:61:fc:62:0f:61:02:a6:aa:f4:96:aa:2a:e1:cd:91:
         b6:bb:d2:e2:84:df:05:51:d0:09:95:f6:e5:8e:9f:c1:42:cb:
         95:f8:1f:ca:87:3a:0c:11:fd:9a:f5:c1:88:b6:58:42:6c:fb:
         41:aa:4e:25:92:7f:b1:12:a4:71:36:6d:94:a6:23:3e:c3:a4:
         f9:1d:39:2e:03:01:14:72:ce:c2:be:2e:9e:57:dd:5d:ec:ef:
         4f:30:6c:6b:12:7e:e7:60:c6:07:6e:3c:97:73:18:ed:04:65:
         b3:8b:07:d7:00:46:26:4b:03:5c:19:78:45:c8:cc:da:c0:4f:
         68:8e:fc:4a:f7:06:2c:82:03:43:5f:e4:67:39:66:5f:41:94:
         2d:70:c5:69:cc:62:2c:d1:75:4b:a5:d3:17:25:a0:ae:e1:9a:
         b0:1b:10:5a:39:39:8d:73:cc:9f:f3:51:94:ee:df:03:9a:ff:
         d7:4b:bb:fe:b5:97:4c:b6:ac:6a:67:53:d4:ca:58:9b:d8:80:
         57:33:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----