Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gcLrl515QyIh1njHxKmjnIDNANI.roa
File:                     gcLrl515QyIh1njHxKmjnIDNANI.roa (raw, json)
Hash identifier:          +Grl3+/qOPrkA4G7Cdy4+6Da/fXfPyztk7cOd2XgHF0=
Subject key identifier:   81:C2:EB:97:9D:79:43:22:21:D6:78:C7:C4:A9:A3:9C:80:CD:00:D2
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       01856ED4B8ACD303A438C76B928CD314B15B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gcLrl515QyIh1njHxKmjnIDNANI.roa
Signing time:             Sun 01 Jan 2023 19:35:12 +0000
ROA not before:           Sun 01 Jan 2023 19:35:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        188.209.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:b8:ac:d3:03:a4:38:c7:6b:92:8c:d3:14:b1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jan  1 19:35:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81c2eb979d79432221d678c7c4a9a39c80cd00d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:a0:9b:d5:af:db:9a:e1:d2:7e:16:d9:2c:
                    dc:1a:c3:28:05:f0:23:65:1e:62:a5:3c:1e:7b:08:
                    ed:36:db:44:7e:67:1d:a7:cd:3c:8d:ab:6c:0a:2d:
                    6c:c4:ec:84:01:35:40:6c:d3:43:1c:36:f5:36:63:
                    59:bf:e3:c6:2b:36:2c:a2:10:77:65:43:c6:13:04:
                    bd:5e:94:ae:28:46:5c:82:0b:57:5e:17:c1:69:80:
                    7a:bd:ab:21:e6:d4:b6:0d:42:69:f3:d8:37:c8:27:
                    bb:c2:34:fe:95:27:fc:b2:e8:0d:b1:9c:5a:ca:51:
                    b8:81:c9:0d:56:12:0f:f4:78:53:83:1e:58:a8:b3:
                    41:12:c9:30:dc:62:8a:73:33:b6:17:72:f3:95:ed:
                    b8:d2:68:95:32:dc:d5:f5:3f:cb:76:10:f3:3d:dc:
                    d3:4c:76:ce:d8:9b:75:f1:44:0a:f8:43:03:1c:94:
                    a9:8a:86:d6:c5:e5:a4:89:63:4f:7b:29:2c:e6:9c:
                    9c:d3:16:1f:0d:07:d1:81:7d:64:9b:bb:9a:2a:05:
                    7f:d6:bc:d6:a3:27:7f:ae:43:53:8f:4e:82:4a:be:
                    3f:2a:c0:72:7d:4d:c7:14:f6:ef:4d:83:af:6b:7b:
                    1e:fe:05:e6:0d:99:3d:58:12:aa:04:04:19:2d:11:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C2:EB:97:9D:79:43:22:21:D6:78:C7:C4:A9:A3:9C:80:CD:00:D2
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/gcLrl515QyIh1njHxKmjnIDNANI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:07:4c:36:51:0b:0b:9a:19:c5:6d:9b:42:05:12:1a:c3:53:
         40:39:aa:40:56:93:e1:9f:c4:1b:60:a7:c1:a2:13:ae:fe:ee:
         bc:9e:c9:b3:7f:c2:b9:61:0c:4a:54:ec:96:49:b6:05:72:96:
         a9:8e:b6:32:f5:a3:f2:c0:d9:12:6e:b6:9a:25:c3:10:18:19:
         7e:aa:f0:65:4e:a1:f1:e3:66:65:bc:f0:cd:e7:ee:75:93:65:
         90:4f:1a:e4:37:e0:2c:fb:d3:41:24:e0:96:0a:9f:a1:22:ca:
         df:14:37:0c:f3:5f:62:59:6d:37:80:2b:3c:98:e7:98:df:aa:
         20:99:4f:df:8e:ed:eb:ea:db:b6:3d:84:ad:b7:f6:79:1e:2c:
         9a:fe:00:d3:d6:d6:97:25:74:4d:da:87:28:fa:51:39:10:6e:
         63:95:fa:e6:a1:5a:8f:fe:96:be:fc:42:bf:b5:46:78:0e:f2:
         0f:31:88:28:de:20:41:64:03:7e:a6:44:5b:1f:de:8c:9d:0f:
         8b:4c:77:15:4e:ed:76:a7:ca:bf:f9:92:31:b5:89:b1:5b:2b:
         64:1e:9b:f7:f0:bb:af:4f:dc:96:42:a3:6b:24:79:d7:ce:4d:
         4d:f5:dc:5c:6e:cb:5e:d0:e5:35:45:08:34:90:5e:db:9a:75:
         d0:2c:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----