Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa
File:                     q0opYRghkYN3K0l_kUZI9M3Usi0.roa (raw, json)
Hash identifier:          f6id58/Jw1q0OQW7ihY1nljkHhFTTgvWjjLeb3eB6XE=
Subject key identifier:   AB:4A:29:61:18:21:91:83:77:2B:49:7F:91:46:48:F4:CD:D4:B2:2D
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       01856B9354127348F56F57F9F8FCD26AB6FE
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa
Signing time:             Sun 01 Jan 2023 04:24:55 +0000
ROA not before:           Sun 01 Jan 2023 04:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.1.107.0/24 maxlen: 24
                          2001:7f8:c1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:93:54:12:73:48:f5:6f:57:f9:f8:fc:d2:6a:b6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Jan  1 04:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab4a296118219183772b497f914648f4cdd4b22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:3b:b4:e8:36:b6:5d:85:58:04:49:84:2b:
                    98:53:15:2a:0e:c9:d3:f0:76:d2:61:c1:5f:84:45:
                    d6:8c:5f:72:6f:5b:9b:3e:e5:8b:3d:b4:31:a6:2f:
                    ee:8e:c8:7a:f2:3d:53:0a:30:44:5f:03:7e:0d:9f:
                    32:14:cf:93:da:17:7b:35:ec:90:ad:20:6d:38:ba:
                    b6:d7:bb:3b:e1:0e:28:b1:45:f3:f1:4a:86:f8:2a:
                    43:7e:c9:39:27:d0:0e:89:0e:87:13:9c:39:d8:cc:
                    a8:f9:b9:95:24:aa:58:bd:be:f4:6d:55:2d:34:2e:
                    59:3b:a2:c7:d7:e0:80:3b:cd:81:25:de:43:94:9c:
                    86:ff:00:22:fe:8d:42:24:19:48:b0:94:d8:1b:5b:
                    a5:08:ff:10:d8:3d:05:97:61:4e:16:3d:83:03:db:
                    37:af:de:26:88:2c:01:fe:3c:06:41:97:14:73:d0:
                    39:2a:b2:90:cb:48:0a:d1:f5:d9:20:04:31:db:00:
                    6e:3a:c1:95:12:b1:2f:30:64:df:12:3e:18:13:bb:
                    25:4e:bd:da:cc:9f:5f:bc:3a:db:b5:da:6f:a9:21:
                    cc:53:c2:61:d9:f1:6d:2a:e2:26:13:f3:f3:91:b1:
                    49:ba:a3:b6:4b:5f:88:63:17:aa:eb:1f:11:f7:2e:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4A:29:61:18:21:91:83:77:2B:49:7F:91:46:48:F4:CD:D4:B2:2D
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/q0opYRghkYN3K0l_kUZI9M3Usi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.107.0/24
                IPv6:
                  2001:7f8:c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:c4:3e:fb:9b:83:5c:45:53:83:8b:e2:55:58:1e:ff:28:
         e1:55:0a:ad:12:91:1a:34:6b:27:0b:03:59:d7:5e:f5:07:bf:
         83:e9:6f:59:60:da:29:47:e2:5d:93:27:23:28:4a:ba:e5:fc:
         a8:38:0a:19:78:1b:45:b2:e5:9c:e6:5f:d8:41:47:37:7b:48:
         71:78:c3:b3:62:da:03:38:f4:aa:74:0c:7e:95:5a:bb:cd:46:
         05:96:f3:6e:90:b7:6a:c5:2d:e2:e2:87:ce:32:ad:a1:b1:78:
         ef:dc:0f:e9:b8:16:0e:d5:c7:a9:dd:76:4c:5f:32:5c:60:ba:
         41:de:19:9c:e5:0a:d2:5e:c0:af:4e:12:f1:7c:5d:d7:17:cc:
         11:ff:39:d8:19:39:b3:a6:bc:0f:12:c3:e6:99:37:07:f8:6e:
         ba:ce:9c:3f:75:cc:60:f7:2f:60:88:aa:d9:2c:d6:38:d9:ad:
         56:61:d3:ae:d3:cc:f7:2f:4e:cc:45:4f:50:63:4c:6f:8d:fe:
         cd:c4:6c:e3:fd:fd:b5:41:1b:7a:c7:b0:49:30:3b:7d:dd:14:
         a9:c4:84:94:56:4d:ce:e0:1f:44:d4:af:9a:aa:1f:56:f3:4a:
         aa:33:58:3b:61:d5:c8:20:a8:b9:ba:b6:39:0f:3e:bd:a9:53:
         02:c8:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----