Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/4haYMAgpd2DOOVVfIN7JZa7HoZs.roa
File:                     4haYMAgpd2DOOVVfIN7JZa7HoZs.roa (raw, json)
Hash identifier:          4cWhxvzPLxxnn9bbWtE8AcLAiZDWpm44DuPBi2G1Wf0=
Subject key identifier:   E2:16:98:30:08:29:77:60:CE:39:55:5F:20:DE:C9:65:AE:C7:A1:9B
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       01856B9C7DC7ADCA835C3578B7D9B0FA2E7F
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/4haYMAgpd2DOOVVfIN7JZa7HoZs.roa
Signing time:             Sun 01 Jan 2023 04:34:55 +0000
ROA not before:           Sun 01 Jan 2023 04:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201193
IP address blocks:        185.76.232.0/22 maxlen: 22
                          2a05:5dc0::/29 maxlen: 30
                          2a05:5dc4::/30 maxlen: 30
                          2a05:5dc0::/30 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:9c:7d:c7:ad:ca:83:5c:35:78:b7:d9:b0:fa:2e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Jan  1 04:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e216983008297760ce39555f20dec965aec7a19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:be:82:36:fd:00:55:2c:7c:4a:50:02:1d:
                    12:12:c9:e3:56:b3:82:07:5a:ce:62:35:5e:97:c0:
                    b6:c6:aa:5e:a4:59:0a:38:5b:31:ce:84:28:c0:02:
                    d4:7f:0e:e8:a0:62:94:af:a6:37:07:d0:cf:d3:59:
                    4a:9b:0e:0e:e6:81:d2:4b:86:51:1c:46:06:a8:94:
                    7f:ab:af:b8:93:de:16:3d:29:c4:20:7e:ec:92:88:
                    b7:f9:0f:f9:50:de:3d:02:ac:f6:2f:bf:c3:bd:be:
                    01:22:30:26:b1:29:27:89:df:a0:3f:88:eb:76:c4:
                    b3:b7:77:e7:fe:74:5b:ec:50:9c:74:95:83:fc:80:
                    ea:f9:33:39:27:f4:c3:d3:2e:70:91:5a:05:6e:66:
                    85:61:79:69:58:bf:1e:9f:1f:b1:9d:fb:40:3e:6c:
                    76:d3:25:dd:bf:35:f7:7c:04:6a:4f:8a:17:68:d0:
                    c3:cb:47:a0:13:12:ef:dc:1c:87:f7:50:84:67:76:
                    79:63:29:97:a6:db:df:d3:62:be:e0:78:41:2b:cb:
                    46:62:3b:9d:4d:b7:b2:97:dd:b0:15:06:0b:b9:7b:
                    87:6c:3b:c3:12:f6:c7:a3:d5:56:6b:66:d5:1d:a2:
                    55:9e:c4:ca:c0:77:c9:06:ed:98:18:39:82:13:be:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:98:30:08:29:77:60:CE:39:55:5F:20:DE:C9:65:AE:C7:A1:9B
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/4haYMAgpd2DOOVVfIN7JZa7HoZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.232.0/22
                IPv6:
                  2a05:5dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:01:bc:d7:c4:3e:a7:67:18:9c:ec:51:5f:7e:11:de:78:
         7e:17:22:8f:15:d8:0e:5d:7d:f5:d5:aa:8e:53:77:32:36:09:
         5f:10:61:58:15:72:c1:e0:b6:98:3a:74:1e:68:5c:cf:f4:04:
         9e:57:e1:25:54:9a:d6:b4:02:db:3b:e8:4c:7a:17:2a:e7:14:
         89:1c:8a:54:20:83:93:61:74:c7:c0:a7:b1:ae:cf:df:d6:6e:
         8e:63:5e:f5:58:21:16:ca:bc:15:f9:38:87:8e:5b:33:17:f2:
         62:f3:1c:9e:1f:9f:95:25:6a:9c:fe:2d:80:00:22:e1:ef:14:
         60:18:99:27:03:7b:e4:20:27:9e:b2:15:29:3d:e1:2d:13:6a:
         bf:68:f6:16:87:32:22:fc:6a:5f:ce:f7:20:a6:af:40:b6:d3:
         18:59:f7:e8:2a:0a:02:06:de:ce:77:b0:dc:c1:c5:40:4a:1e:
         a1:b7:92:b8:b4:5f:85:10:80:c3:48:96:77:a6:1f:09:92:0e:
         46:15:b7:83:ab:7a:8b:5b:2b:d6:48:57:b8:6f:f0:a7:df:c5:
         85:88:b5:6e:08:60:84:c7:a9:27:80:42:2f:1f:9e:9e:11:02:
         72:13:b5:f2:0e:28:cd:11:fe:e3:9b:09:11:b2:2c:61:79:e4:
         a7:04:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----