Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa
File:                     rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa (raw, json)
Hash identifier:          +oa6KJ9P/qYI4opzD1MRy51q8fABX2NPaw0TFT5v0XM=
Subject key identifier:   AD:7E:B0:EC:76:BB:40:4A:FA:C9:3D:8F:02:85:0A:F1:77:45:A4:E7
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       01856ED4BE2DA9A2111A000C832B83C616B0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa
Signing time:             Sun 01 Jan 2023 19:35:14 +0000
ROA not before:           Sun 01 Jan 2023 19:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     28546
IP address blocks:        85.92.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:be:2d:a9:a2:11:1a:00:0c:83:2b:83:c6:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 19:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad7eb0ec76bb404afac93d8f02850af17745a4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:87:73:22:9f:ce:75:24:47:83:04:05:c9:
                    28:65:43:12:30:4a:cf:13:b2:9e:0c:4b:c5:02:44:
                    3d:be:c8:cd:71:d5:68:50:79:4e:94:9c:7d:bc:30:
                    04:94:75:05:4c:76:c8:9b:25:38:88:21:dd:c4:b7:
                    26:8d:25:e6:71:47:35:78:f8:ae:59:7d:2d:78:70:
                    86:f1:8a:c7:40:05:39:89:06:a6:de:e1:d3:63:4e:
                    c4:97:48:b8:7d:e6:72:a5:1a:c5:73:b3:ab:81:5f:
                    dc:34:5d:cd:ac:18:1e:ef:ff:d9:c9:08:e6:81:9f:
                    11:56:bf:5e:0c:ba:7d:e5:db:8a:ad:c4:40:08:54:
                    22:2a:2b:01:d3:75:37:6f:b1:4e:01:de:7c:aa:b5:
                    51:9e:3a:79:68:00:91:17:61:73:c3:91:c9:67:12:
                    d5:67:64:3a:24:5e:c1:80:c9:cd:87:fa:bb:8c:14:
                    c8:e9:f5:67:dc:6a:43:40:b1:9b:5a:11:d9:80:c3:
                    a2:a2:17:9c:81:74:1c:89:49:1d:06:17:b3:e0:2b:
                    03:5e:8a:63:3c:a8:b3:aa:3d:52:28:a4:85:cb:7b:
                    c6:fc:f8:0b:ad:06:ca:23:7e:b0:96:24:47:82:18:
                    e4:0d:44:60:aa:e9:b3:65:00:bb:26:04:b9:7e:74:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7E:B0:EC:76:BB:40:4A:FA:C9:3D:8F:02:85:0A:F1:77:45:A4:E7
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rX6w7Ha7QEr6yT2PAoUK8XdFpOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.92.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:9f:7d:81:cc:a7:48:ad:ef:d7:a4:ca:aa:54:d8:d6:9b:16:
         cb:06:68:b1:d7:88:27:46:2f:2a:06:e1:12:a2:ea:8c:79:4e:
         ad:7f:33:e9:de:8d:3e:d4:88:0e:ba:ae:2b:84:5a:c0:b7:cf:
         3c:f6:47:1d:63:99:9b:56:05:e8:71:cb:17:c1:77:14:72:4b:
         bb:95:22:64:4d:f1:a0:eb:95:17:86:77:b8:04:94:ef:e2:90:
         cf:6d:30:64:c5:7a:6a:2b:9f:be:73:7b:a2:4b:d6:f0:3d:f6:
         ec:09:7f:88:8e:ff:be:79:4e:81:6a:c7:73:ea:51:78:8a:2e:
         4a:29:62:62:00:87:ab:49:25:01:91:95:2a:d2:e4:47:a9:16:
         5b:cc:33:89:46:e9:dc:23:83:92:fe:c6:a1:f1:f2:5d:8f:95:
         b0:99:0a:76:cb:5f:54:d9:16:3c:b4:9c:f4:bc:ce:33:50:8d:
         52:56:c2:24:03:c5:f1:02:73:f2:9d:d8:ad:ec:a4:27:77:c0:
         f4:a9:f4:6b:44:6b:a7:67:f6:0b:8d:1e:2d:95:da:78:68:3a:
         b6:43:cc:c2:95:22:2f:cc:c3:e0:88:b3:30:9a:3d:ac:11:ff:
         f2:f2:66:21:38:f9:1e:6c:16:80:eb:6a:44:a6:11:77:1a:6e:
         1e:21:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----