Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/vHJQ2cf3DvPf_dRhGfIwxXEOJP8.roa
File:                     vHJQ2cf3DvPf_dRhGfIwxXEOJP8.roa (raw, json)
Hash identifier:          T21uWUdl2wIbGAE7SE23qQ3EhaEW2rYVBKi4pYsdNJw=
Subject key identifier:   BC:72:50:D9:C7:F7:0E:F3:DF:FD:D4:61:19:F2:30:C5:71:0E:24:FF
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       0185A49BFDB2025BD80AE2251E22F3C117A7
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/vHJQ2cf3DvPf_dRhGfIwxXEOJP8.roa
Signing time:             Thu 12 Jan 2023 06:12:44 +0000
ROA not before:           Thu 12 Jan 2023 06:12:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        217.113.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a4:9b:fd:b2:02:5b:d8:0a:e2:25:1e:22:f3:c1:17:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan 12 06:12:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc7250d9c7f70ef3dffdd46119f230c5710e24ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:25:58:9a:4e:76:b6:86:f1:a6:b1:2f:ff:
                    78:06:9f:cf:43:4a:1e:d0:8c:22:0e:7d:14:4a:35:
                    ce:da:81:fa:08:69:bf:28:98:fd:d3:bf:7f:ed:b2:
                    8a:01:0a:51:3b:7a:df:ce:87:ce:21:72:a2:c7:e5:
                    99:84:9e:42:40:47:f0:cb:2e:d5:55:16:04:75:11:
                    fe:2a:ff:54:65:b4:a9:cd:51:d0:28:e9:c9:22:69:
                    bd:7f:d8:e5:d5:49:d5:e8:12:28:3e:8e:c7:94:da:
                    6a:f4:cb:08:5f:aa:86:27:6e:4e:bd:8e:08:ac:9a:
                    ad:1e:66:d1:38:4a:79:ae:59:de:48:3e:0a:3e:56:
                    81:9b:e9:01:50:95:3f:f8:85:68:0b:cc:ee:cd:ed:
                    43:0b:ae:46:f9:dd:6c:36:5b:b0:88:f4:16:8c:4d:
                    7f:3c:96:51:14:27:a6:4d:3e:82:f3:bd:f3:a7:96:
                    c7:14:3e:b1:11:a0:91:ab:49:5e:37:3c:37:65:a4:
                    9d:b5:65:92:9b:e7:97:a1:a7:fb:54:2f:fd:23:96:
                    95:0e:17:c1:35:82:09:84:6a:5c:8c:a1:a0:48:e0:
                    ca:31:7a:3f:8a:36:16:d2:46:ca:ea:ca:83:54:9e:
                    cd:a6:a8:38:98:14:b2:6b:31:cd:f8:4c:77:46:7c:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:50:D9:C7:F7:0E:F3:DF:FD:D4:61:19:F2:30:C5:71:0E:24:FF
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/vHJQ2cf3DvPf_dRhGfIwxXEOJP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:93:68:45:0b:6a:1b:9c:d7:23:43:ec:61:7e:7d:d0:7c:bb:
         96:8e:4f:1b:bc:d4:1c:42:f4:11:68:ef:67:dd:e5:6c:25:76:
         15:ab:5c:31:9f:b0:c7:11:fb:33:c0:1d:e1:89:d5:cf:3f:5e:
         79:f6:4a:56:0c:dc:2c:73:62:3b:cf:e7:4a:d3:43:ad:20:cc:
         d4:59:e0:fc:25:c4:82:48:7e:12:75:be:75:66:7f:1d:f2:10:
         da:44:36:f1:f5:fe:74:cb:ba:b0:b3:dd:5b:58:58:f0:ee:9a:
         d8:90:51:b1:db:71:8a:30:c8:06:11:54:de:ce:5b:8a:ca:67:
         9d:14:32:6e:16:75:e9:cd:fd:4f:53:2b:6f:cf:ed:f5:6c:5a:
         e6:b2:45:1f:c7:c0:0f:71:c4:f0:1f:5a:d1:e1:88:07:df:c9:
         4e:ca:9f:cf:ee:bd:82:fd:19:75:bf:6d:c4:aa:18:d7:23:03:
         ce:90:b1:c3:ec:3d:5d:63:39:5d:57:0f:4c:65:39:0d:34:49:
         7f:94:2a:1e:c5:f1:35:2f:a4:fd:e8:55:65:82:94:76:b6:a2:
         5e:3c:00:b1:49:53:50:59:a4:bf:f4:99:a5:d0:0e:d7:46:d7:
         c8:16:c0:1a:f5:78:3c:97:53:42:72:1c:c5:ed:19:eb:3a:1a:
         8f:13:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----