Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa
File:                     cLFJharwPrQMIKdRDdZ6OxB8HEY.roa (raw, json)
Hash identifier:          91AubIWBE6O36fM/eB9a87PE8NjFi5eRtQtiesTlp+g=
Subject key identifier:   70:B1:49:85:AA:F0:3E:B4:0C:20:A7:51:0D:D6:7A:3B:10:7C:1C:46
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       0188E3AD2D0E7E389BBD32AFD35C13C6EE28
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa
Signing time:             Thu 22 Jun 2023 15:15:57 +0000
ROA not before:           Thu 22 Jun 2023 15:15:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13830
IP address blocks:        212.116.226.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:ad:2d:0e:7e:38:9b:bd:32:af:d3:5c:13:c6:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jun 22 15:15:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70b14985aaf03eb40c20a7510dd67a3b107c1c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:24:ef:2d:1a:5d:94:82:35:0a:f9:c7:52:13:
                    49:81:de:39:7f:92:46:8c:45:eb:1c:80:84:94:a2:
                    58:37:99:dc:ac:eb:38:54:6f:16:78:73:9f:dc:54:
                    12:6d:cc:92:fb:19:8a:77:04:3a:84:3b:35:bd:1e:
                    ae:17:28:6d:d1:8a:d6:ad:ee:06:e2:5f:4f:48:29:
                    29:8e:84:99:2d:60:c3:bd:ed:a3:65:27:47:04:8f:
                    a3:14:7f:00:79:76:b4:e7:ad:c3:92:d2:d0:09:17:
                    21:da:ff:8b:88:29:66:2b:43:c2:f8:88:31:a9:69:
                    0d:1a:ff:0e:c0:01:4c:b5:9a:b5:5e:a3:74:b5:6f:
                    23:ca:4a:c2:5f:1b:c5:34:35:81:bf:20:af:b4:30:
                    d2:4c:20:c8:15:bb:9b:6c:8b:51:bb:6d:27:8e:e2:
                    d5:56:bc:fa:5e:d6:5e:0e:4f:28:23:18:b9:ad:5c:
                    1a:f5:a9:5b:28:f2:8d:8d:9f:18:8b:8c:a8:cb:0a:
                    de:2e:aa:0f:54:92:b6:45:a6:89:07:e8:74:1c:8b:
                    97:4b:a0:f2:14:88:65:68:89:e8:60:c2:1b:4b:e1:
                    0d:96:23:51:da:a4:b8:9b:3c:1b:72:54:04:e5:94:
                    82:4e:eb:72:8d:c3:7a:0f:35:c2:6f:40:ba:2f:0c:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B1:49:85:AA:F0:3E:B4:0C:20:A7:51:0D:D6:7A:3B:10:7C:1C:46
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/cLFJharwPrQMIKdRDdZ6OxB8HEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.116.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:57:6f:f6:c9:ef:e7:0b:52:19:ff:0e:ae:2b:db:38:ad:87:
         c3:ff:06:44:51:44:28:67:ae:fb:40:58:36:15:f7:a1:42:fc:
         0e:d0:2d:42:d6:dd:55:1a:1d:26:21:1b:7f:1a:df:72:7e:d8:
         17:76:35:b8:87:c4:80:16:c0:1d:c8:c6:21:c3:17:8b:8c:11:
         f5:b5:a2:53:91:ea:5c:28:40:7c:60:60:f9:1c:0b:c0:28:ad:
         12:1f:04:a9:ef:4e:c0:3b:10:93:05:2e:e7:a0:92:3e:66:3c:
         ef:a6:29:cf:01:25:4a:33:b4:a4:05:c0:cf:1e:42:1a:cc:bb:
         bd:70:7a:b7:47:0c:2c:6f:c2:9b:90:68:58:a1:4c:80:da:eb:
         74:6f:e1:cd:a0:25:4e:12:0d:84:5f:fc:fc:b2:18:53:58:8e:
         96:23:d5:c4:02:87:41:e2:f7:fa:3e:0c:8b:1d:0a:e4:4b:a2:
         c8:b6:1a:ed:59:42:26:d6:ec:0f:83:f5:b3:f7:71:4e:33:14:
         56:9a:95:b8:24:29:42:a2:5d:17:29:7a:03:5a:d3:93:9e:73:
         d3:ed:76:66:9a:a8:1b:b6:2e:86:2e:93:ee:3c:02:c0:11:f2:
         31:c2:cb:22:b9:65:86:56:25:81:79:1f:44:35:8e:2f:39:e6:
         56:fa:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----