Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa
File:                     JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa (raw, json)
Hash identifier:          SfF8u5BnNVUyzP2I30AJRQ1ekMOAnsp6BQMzeIKSxk8=
Subject key identifier:   27:14:42:61:1D:19:E2:02:7E:DF:36:7F:D8:14:F6:50:ED:C2:D2:0C
Certificate issuer:       /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial:       0185BA1428F7DBB7FC3F847F260D8EAAE319
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa
Signing time:             Mon 16 Jan 2023 10:16:01 +0000
ROA not before:           Mon 16 Jan 2023 10:16:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212805
IP address blocks:        185.19.203.0/24 maxlen: 24
                          2a12:4740::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ba:14:28:f7:db:b7:fc:3f:84:7f:26:0d:8e:aa:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
        Validity
            Not Before: Jan 16 10:16:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=271442611d19e2027edf367fd814f650edc2d20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:36:0f:43:4d:49:07:02:a0:6d:99:f6:1c:79:
                    5b:0e:24:a6:05:82:bd:41:6f:68:9b:1a:3f:ff:40:
                    4a:66:d4:ef:94:29:25:bd:a2:dc:95:3f:bc:30:77:
                    b4:cb:b7:94:f7:5b:9c:b4:62:81:60:98:9f:d8:3a:
                    e8:c7:96:8d:61:3d:19:36:13:ef:eb:f4:66:81:60:
                    1d:89:bf:46:79:5e:ee:6b:74:fc:1e:57:0c:f9:bf:
                    7e:2d:89:2f:1f:88:89:86:d1:2a:b3:d0:18:2f:d0:
                    2d:bf:a0:e7:de:65:4c:60:c8:e8:09:9b:92:34:92:
                    2d:48:45:c8:b0:08:83:b1:25:11:0c:f1:c1:1c:53:
                    49:91:ec:f6:fc:e7:00:bb:df:b6:ab:a1:b2:6e:0f:
                    bf:f8:e9:bf:19:aa:a2:e7:a7:a0:84:ce:52:69:00:
                    24:50:af:9e:59:44:4d:bb:00:a0:44:d2:43:c0:23:
                    f2:1c:ce:78:bf:a7:1a:13:59:a9:91:d1:2e:91:11:
                    c1:6d:5f:13:04:50:a4:d4:c7:04:98:6a:f2:83:8c:
                    30:3b:9d:aa:cf:78:71:23:30:2f:84:90:c2:f9:0d:
                    50:98:1b:00:11:b4:9b:f6:f8:e9:78:25:01:b0:7c:
                    75:b8:77:06:5b:24:86:62:2d:43:30:f2:88:ed:09:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:14:42:61:1D:19:E2:02:7E:DF:36:7F:D8:14:F6:50:ED:C2:D2:0C
            X509v3 Authority Key Identifier:
                keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/JxRCYR0Z4gJ-3zZ_2BT2UO3C0gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.203.0/24
                IPv6:
                  2a12:4740::/29

    Signature Algorithm: sha256WithRSAEncryption
         28:75:33:1b:0b:96:ee:25:5f:fb:14:2e:cd:22:25:3b:d4:0d:
         c2:4d:99:cb:dc:e0:07:4f:39:b8:90:ad:89:1d:9b:7b:ec:d5:
         64:7c:38:ce:94:c2:c0:a1:f0:6a:25:f7:8c:d4:db:d0:d4:ba:
         eb:95:b1:e3:3e:e6:8a:06:6f:b5:13:94:3c:86:ae:00:d6:6f:
         28:76:92:b7:72:37:70:34:8b:c0:cb:47:98:0c:6f:dc:d1:61:
         0a:ed:f9:ce:80:ba:97:23:7a:ef:fd:e3:69:d8:84:69:bd:3c:
         2a:38:de:4a:6c:46:9f:c3:a6:1e:d5:10:c4:da:64:08:47:81:
         3d:81:1d:47:a1:e8:30:db:19:14:e8:3b:f7:ad:a2:b4:83:d0:
         5b:e4:b8:47:f2:4e:76:8e:8d:43:cc:a2:06:19:bd:dc:ed:57:
         b8:8a:b3:b9:3e:7e:7e:4c:40:dc:12:26:dd:12:22:5e:f7:4f:
         f1:b3:4f:35:d7:e6:3a:95:84:04:f6:67:af:e3:52:40:83:b5:
         09:54:f4:45:a2:53:3b:44:c2:8a:fd:4e:d0:3e:2d:bd:52:3f:
         34:6f:50:c1:c2:50:b5:a5:0c:7b:ec:ae:a5:86:8c:3c:8d:fc:
         01:f2:88:9a:67:65:e5:28:40:a0:7b:a6:d6:c6:ee:23:30:8e:
         5c:97:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----