Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Ym0Ic8EPlyWDx-yFp_LVAAfEhZo.roa
File:                     Ym0Ic8EPlyWDx-yFp_LVAAfEhZo.roa (raw, json)
Hash identifier:          tYgQ2T3rpcgmMEH6y3ou/iG1RcxupBARTuj1Qn3lNS0=
Subject key identifier:   62:6D:08:73:C1:0F:97:25:83:C7:EC:85:A7:F2:D5:00:07:C4:85:9A
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       01856ED4B9E09A6357C2BEB21A680E9F1EEA
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Ym0Ic8EPlyWDx-yFp_LVAAfEhZo.roa
Signing time:             Sun 01 Jan 2023 19:35:12 +0000
ROA not before:           Sun 01 Jan 2023 19:35:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        188.209.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:b9:e0:9a:63:57:c2:be:b2:1a:68:0e:9f:1e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jan  1 19:35:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=626d0873c10f972583c7ec85a7f2d50007c4859a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:c6:8d:7d:5d:1d:37:86:fb:a4:b4:54:3b:
                    61:2b:2d:4d:f7:eb:97:ab:5b:70:e3:33:5d:9a:14:
                    d3:56:25:98:4a:67:da:8a:5b:e2:43:3f:dd:1d:a5:
                    ee:1d:83:cd:5b:01:ac:5e:ae:be:b8:41:b0:9c:82:
                    d7:d8:5a:d1:ee:6b:97:be:ab:b2:17:59:eb:dc:06:
                    39:1b:dd:89:fd:28:57:ac:d1:6c:32:3a:89:2e:c0:
                    98:78:7e:ef:d6:77:08:bc:6f:d4:1e:24:a6:ab:00:
                    7c:86:06:5c:d7:3d:64:fe:91:4f:66:c0:e1:4d:b6:
                    13:9b:cc:aa:f3:70:dd:5c:d2:f1:d3:d8:03:3c:ad:
                    18:85:1f:0d:ef:9a:65:1c:0b:5e:1c:d8:db:af:93:
                    1b:52:06:d1:6d:3c:5c:80:d4:57:e3:89:fa:4b:ff:
                    6b:6f:96:b7:9c:9e:1c:3a:3a:16:d3:d2:c0:cd:c8:
                    9c:4a:40:ce:09:f8:14:41:74:68:41:bc:c7:1d:ae:
                    2f:52:d9:e1:45:25:c7:eb:2d:32:86:d9:97:aa:8c:
                    01:d0:78:e3:2a:73:4e:05:e3:44:2b:4f:e8:e6:78:
                    a1:5a:19:0e:31:4f:ce:26:3b:3c:62:68:f9:38:a6:
                    9d:31:52:58:23:d5:cb:37:0a:91:b3:fb:a3:c4:b9:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6D:08:73:C1:0F:97:25:83:C7:EC:85:A7:F2:D5:00:07:C4:85:9A
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Ym0Ic8EPlyWDx-yFp_LVAAfEhZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:b4:b2:df:f5:fd:f3:32:57:fd:ab:97:f6:ca:73:5b:0c:
         ea:6e:67:34:ab:20:f4:33:65:a8:f0:ed:95:f8:b8:72:8a:27:
         fa:e0:f7:fb:5c:5e:05:e5:cb:4c:87:c7:75:b5:39:92:a2:1d:
         02:f1:57:80:b4:2f:d1:7d:76:c1:82:49:ed:fc:8b:3b:1d:91:
         7e:d7:8f:5c:83:09:b4:22:66:e0:76:62:5d:a7:3b:91:fc:57:
         7b:c3:07:a7:62:ba:48:c7:92:58:3c:48:73:69:e3:9e:52:96:
         a1:fd:65:e2:27:40:37:01:19:72:d1:04:09:bd:04:7b:40:72:
         f7:bd:6d:26:9d:73:5f:8d:f5:ee:36:0c:fb:ff:e2:5f:e6:42:
         9f:02:34:60:b3:9e:17:d3:eb:8d:7d:eb:61:3b:bd:fd:6a:8a:
         a2:ee:99:bf:3a:12:62:9b:d6:e7:e6:59:aa:cd:d2:c4:b0:12:
         1a:c9:8b:23:e1:49:8b:20:bf:53:51:e1:7a:b5:8a:3b:fd:5e:
         b2:25:6c:6b:ea:19:78:39:c0:98:85:95:4b:34:9c:44:4c:a1:
         0b:56:56:39:e0:38:cd:c0:67:73:27:1c:c0:02:cc:f4:d8:f3:
         09:66:7f:da:a8:4f:11:ac:78:c6:c5:3e:c5:ef:f1:d8:0c:55:
         28:73:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----