Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa
File:                     Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa (raw, json)
Hash identifier:          lv9//y69+IJRTA/EeuDvAfrJZSSzs1VgLb5gKXWAAHQ=
Subject key identifier:   43:18:1E:A9:BD:5B:60:B4:72:65:40:F4:B7:36:54:2C:B1:8D:4E:A5
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       0185E8A7E295C11E68AF17EA48F89BC8524D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa
Signing time:             Wed 25 Jan 2023 11:19:54 +0000
ROA not before:           Wed 25 Jan 2023 11:19:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3257
IP address blocks:        212.221.0.0/17 maxlen: 24
                          46.33.64.0/19 maxlen: 24
                          77.77.128.0/18 maxlen: 24
                          213.251.0.0/18 maxlen: 24
                          212.115.128.0/18 maxlen: 24
                          185.160.40.0/22 maxlen: 22
                          213.200.64.0/18 maxlen: 18
                          195.143.0.0/16 maxlen: 16
                          141.136.96.0/20 maxlen: 20
                          213.254.192.0/18 maxlen: 24
                          89.149.128.0/18 maxlen: 24
                          77.67.0.0/17 maxlen: 24
                          87.119.64.0/18 maxlen: 24
                          134.222.0.0/16 maxlen: 16
                          212.222.0.0/16 maxlen: 24
                          2001:668::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e8:a7:e2:95:c1:1e:68:af:17:ea:48:f8:9b:c8:52:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan 25 11:19:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=43181ea9bd5b60b4726540f4b736542cb18d4ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:2c:3e:c1:56:00:83:fc:32:5c:cf:f2:08:
                    6f:25:9c:e5:fc:25:9e:a7:03:47:8b:77:20:ab:2e:
                    6b:5d:16:7e:64:8d:f3:be:02:4a:10:93:d2:bb:28:
                    cf:1d:fe:c6:8e:10:bb:81:09:1c:3a:52:64:5e:fc:
                    f2:c4:f5:6e:8b:00:01:c2:6e:91:3f:48:a9:86:4b:
                    54:e3:c0:d2:c1:61:54:5e:c6:eb:63:91:b9:ff:1d:
                    2e:8b:ae:70:25:53:da:19:65:20:3f:31:22:cd:b9:
                    34:ba:d7:7a:23:9c:16:22:64:7c:a9:2b:7e:2b:bd:
                    a6:e8:e4:dc:9e:fc:48:40:a9:1e:3d:fa:6b:44:d0:
                    04:fb:69:ae:6b:cc:ce:18:00:03:94:0c:4b:3a:9c:
                    e5:2a:71:98:e9:88:dd:c3:56:6a:12:68:56:5e:29:
                    04:f5:df:a5:e5:15:ec:a5:b3:e2:09:7d:d2:83:88:
                    0c:e4:8b:a9:59:61:6a:bc:ad:a4:c2:c9:72:ec:bb:
                    b8:6b:b6:65:bb:a1:9b:89:2f:3a:eb:5c:93:09:d4:
                    f8:7a:6e:03:e9:68:de:b2:ac:d0:10:86:b3:e4:ba:
                    ff:da:a6:f8:93:c4:9d:bb:39:da:c2:c3:2b:60:0c:
                    cc:2e:27:5c:90:3e:77:ea:b4:97:ac:21:ec:a5:94:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:1E:A9:BD:5B:60:B4:72:65:40:F4:B7:36:54:2C:B1:8D:4E:A5
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qxgeqb1bYLRyZUD0tzZULLGNTqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.33.64.0/19
                  77.67.0.0/17
                  77.77.128.0/18
                  87.119.64.0/18
                  89.149.128.0/18
                  134.222.0.0/16
                  141.136.96.0/20
                  185.160.40.0/22
                  195.143.0.0/16
                  212.115.128.0/18
                  212.221.0.0/17
                  212.222.0.0/16
                  213.200.64.0/18
                  213.251.0.0/18
                  213.254.192.0/18
                IPv6:
                  2001:668::/29

    Signature Algorithm: sha256WithRSAEncryption
         c4:06:42:e3:a5:53:26:ff:3d:6f:ec:4d:c3:3f:26:db:a4:3a:
         5e:6a:3c:2c:18:e4:80:c4:5b:58:a0:a2:fa:c9:68:88:ea:ef:
         4e:01:39:dc:75:a9:70:5f:39:39:64:93:19:83:76:5f:e9:b9:
         0b:45:50:a8:ba:05:15:6c:29:54:fb:db:12:9f:50:92:8e:f2:
         ae:09:41:f9:54:24:51:f1:6e:28:c5:f1:a2:c8:f2:e7:04:c7:
         93:73:74:7b:68:de:f5:b9:36:03:13:a0:1c:8a:48:19:d8:8a:
         ce:81:29:96:79:3c:63:9e:12:92:ed:24:30:25:de:f0:3b:15:
         ed:58:0b:2f:cf:e6:66:ab:df:e0:4b:2c:ad:cc:76:7d:57:48:
         7a:d4:ae:0e:a9:da:0f:fe:7d:da:94:16:21:78:eb:86:df:93:
         73:d6:c8:7b:29:93:a2:4a:62:01:f2:33:6d:01:23:c2:b8:2a:
         a9:96:d5:19:da:9b:c2:c5:42:18:16:ac:37:8e:13:79:fc:55:
         46:92:c1:e2:c3:da:4b:69:ae:40:fe:9a:b3:fe:f0:d7:d4:35:
         36:af:3d:8c:f3:24:4b:8b:30:09:d5:04:84:3f:67:6f:2d:bb:
         f9:79:36:b8:54:c0:cd:9a:13:13:c2:9f:2c:e0:c3:0d:4c:95:
         f9:0d:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----