Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/i5yoKIVikOAysXY0alqif6NWTfY.roa
File:                     i5yoKIVikOAysXY0alqif6NWTfY.roa (raw, json)
Hash identifier:          yMEvqibu5AOyzVpl5aR3ZiVHJFpyNGcWiODnBlK1V0I=
Subject key identifier:   8B:9C:A8:28:85:62:90:E0:32:B1:76:34:6A:5A:A2:7F:A3:56:4D:F6
Certificate issuer:       /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial:       01857203470E8A346F9DDB72FF339742C0E3
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/i5yoKIVikOAysXY0alqif6NWTfY.roa
Signing time:             Mon 02 Jan 2023 10:24:55 +0000
ROA not before:           Mon 02 Jan 2023 10:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212805
IP address blocks:        185.19.203.0/24 maxlen: 24
                          2a12:4740::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:03:47:0e:8a:34:6f:9d:db:72:ff:33:97:42:c0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
        Validity
            Not Before: Jan  2 10:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b9ca828856290e032b176346a5aa27fa3564df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:d8:9d:cb:ec:c8:72:ea:6e:f1:f4:b7:6c:
                    e1:bf:2d:65:f3:cd:c6:1b:d6:dc:8a:c0:c7:aa:f7:
                    b8:93:39:bb:91:02:71:43:38:6e:bf:33:a1:15:ae:
                    02:b2:cc:b3:1d:20:36:e3:52:db:8f:3f:dc:dd:26:
                    7e:97:5c:45:5e:4c:fc:3d:9a:4e:0b:1c:e6:bc:b2:
                    18:b6:7d:ce:e7:66:a9:b1:42:a3:bb:06:f5:28:db:
                    de:62:35:eb:59:8f:1c:44:57:8c:35:32:94:3f:a4:
                    63:10:56:81:24:ce:8a:11:29:8c:07:d4:69:15:f9:
                    fd:92:5d:7a:66:7c:b0:2e:96:5e:b5:fe:7f:cf:41:
                    f8:53:7f:90:f2:a9:0c:59:dd:2b:cf:4b:a5:77:5a:
                    9d:42:fb:50:42:06:cd:01:17:01:87:f1:52:1f:dd:
                    8e:cd:0b:6b:57:80:07:00:e0:08:d2:99:b9:ad:e5:
                    e4:61:51:12:61:92:3a:6d:6d:5c:05:13:06:94:9f:
                    ab:da:7c:74:0b:04:62:ee:d8:8a:5a:f5:2a:5e:6b:
                    1f:08:21:2f:20:86:70:75:d8:40:35:ed:7b:36:6c:
                    e6:57:1e:d0:49:47:70:e5:75:be:91:09:be:d9:5d:
                    05:ef:8b:36:ad:dc:6d:b1:28:3a:8f:ed:b0:12:f9:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:A8:28:85:62:90:E0:32:B1:76:34:6A:5A:A2:7F:A3:56:4D:F6
            X509v3 Authority Key Identifier:
                keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/i5yoKIVikOAysXY0alqif6NWTfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.203.0/24
                IPv6:
                  2a12:4740::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:02:56:23:6d:ab:86:2e:e9:09:0b:9b:5c:dc:92:8f:f3:
         57:19:6f:4f:05:79:c4:c5:de:19:91:49:6d:eb:56:ff:67:85:
         25:71:12:a6:95:2b:74:c9:db:6b:21:e9:47:56:28:f3:85:e8:
         d6:8c:21:1e:ae:fe:fb:2d:2f:3e:fb:df:9f:c2:2e:2c:64:dd:
         9f:4b:3f:30:63:6f:75:ab:39:42:66:1a:d9:c6:39:c2:2c:53:
         46:4a:dc:d9:fc:8e:0f:c3:88:aa:18:56:ab:e9:e6:bc:d5:aa:
         4a:88:74:e5:a6:71:3e:4f:44:0d:72:4a:c9:f5:04:66:a5:e2:
         2a:73:58:d8:0c:26:15:a1:b9:6e:bf:67:e7:e6:ba:25:59:12:
         ec:50:b1:c6:9d:90:ca:d2:a3:97:af:22:16:8e:f8:1d:a2:01:
         e6:d2:07:93:e1:20:67:79:47:16:19:8d:15:60:8a:01:a6:19:
         ea:b5:c1:72:ad:1d:39:0c:4e:bd:b4:1e:f3:34:14:51:ab:b2:
         ca:6b:b6:22:c0:08:a2:d8:13:6d:92:36:77:d3:7f:fd:6f:b4:
         2c:ee:ae:73:f6:55:5f:97:c5:f3:92:3a:3e:53:d7:34:f7:5e:
         c8:66:eb:e3:cb:4a:af:36:9b:ea:83:ce:bd:ee:b8:ed:5c:47:
         2a:34:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----