Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/k8c2c-4ofjJIXNe84jpRgMcA85w.roa
File:                     k8c2c-4ofjJIXNe84jpRgMcA85w.roa (raw, json)
Hash identifier:          zTwUSO5XabxStyyo/tFW28zGm3hkoE6BSIXmwdydS/Q=
Subject key identifier:   93:C7:36:73:EE:28:7E:32:48:5C:D7:BC:E2:3A:51:80:C7:00:F3:9C
Certificate issuer:       /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial:       01856FB113F8C16CA8DAA927125102333157
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/k8c2c-4ofjJIXNe84jpRgMcA85w.roa
Signing time:             Sun 01 Jan 2023 23:35:54 +0000
ROA not before:           Sun 01 Jan 2023 23:35:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202462
IP address blocks:        194.113.240.0/23 maxlen: 23
                          2001:67c:97c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:13:f8:c1:6c:a8:da:a9:27:12:51:02:33:31:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
        Validity
            Not Before: Jan  1 23:35:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93c73673ee287e32485cd7bce23a5180c700f39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5f:c9:a6:40:f2:85:b7:1c:ce:57:ef:a6:3e:
                    be:d1:b2:52:40:ed:c0:ad:dd:30:13:ea:21:b1:8f:
                    88:bb:c8:ba:ff:c7:6b:39:df:33:15:40:21:fb:d3:
                    74:d7:9e:bc:3f:66:79:72:4f:80:03:9f:ef:8b:b2:
                    8a:1b:ab:16:94:f6:07:ae:96:89:59:d3:f9:cb:b8:
                    dd:94:0b:0e:ef:54:4e:7a:c4:aa:da:5a:84:26:d4:
                    3c:3d:98:03:d1:a7:82:4f:9a:b6:64:af:42:a3:0c:
                    88:d5:16:32:07:07:36:e8:49:4e:4f:6a:45:e8:06:
                    1f:6c:e4:84:be:d4:6d:77:0a:0e:60:40:ba:0b:e3:
                    e4:3b:2f:dd:d5:93:8c:19:a6:6c:e0:33:69:b2:71:
                    82:20:9f:25:08:2c:61:bf:1c:23:fb:82:af:80:7d:
                    b8:0e:e5:ca:df:56:97:c4:4b:10:61:ac:e7:6b:80:
                    2a:3f:cd:e0:ed:95:c6:b9:24:ff:2c:79:7e:b8:ca:
                    3f:2c:eb:58:aa:4a:79:55:b4:7d:4c:ad:55:54:ea:
                    14:88:e1:ff:82:77:b4:f9:97:8e:5a:67:06:09:ec:
                    16:11:95:94:41:e1:f9:39:9a:f4:99:7d:f0:4a:34:
                    e6:b2:3d:7e:0f:17:24:b5:58:15:c6:62:04:f4:c6:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C7:36:73:EE:28:7E:32:48:5C:D7:BC:E2:3A:51:80:C7:00:F3:9C
            X509v3 Authority Key Identifier:
                keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/k8c2c-4ofjJIXNe84jpRgMcA85w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.240.0/23
                IPv6:
                  2001:67c:97c::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:15:be:35:58:86:9e:54:c2:fe:ea:61:f6:a7:9e:ba:64:b7:
         2a:17:91:ad:4e:64:fa:bd:b2:7b:0e:de:ee:88:c3:55:5f:6d:
         c7:36:15:c0:4d:33:31:54:bf:26:7d:83:c1:a4:68:96:af:c7:
         8c:7d:73:0d:e0:36:41:fe:ad:d9:15:7a:d3:49:2f:76:ec:ed:
         ea:73:87:a8:d7:69:60:81:98:a4:3a:b9:e2:3f:e6:81:b7:2b:
         c4:ce:07:22:d7:ed:99:8b:90:8a:07:b9:30:de:35:c5:13:f9:
         28:61:57:26:8f:7a:cd:0a:f0:9c:10:e2:d6:8c:c9:67:61:4f:
         28:e3:d5:bb:68:cf:08:2f:c7:cf:17:f4:0e:99:ad:ad:2a:8e:
         ec:e0:f1:09:f3:12:27:e0:7c:75:33:ca:56:c4:6b:33:55:bd:
         b8:c8:56:e6:21:fd:41:d1:0b:d3:21:49:7c:3c:89:57:10:d7:
         31:d0:c8:6d:3f:0c:ac:9e:08:20:16:51:9c:bc:03:d5:96:94:
         19:7b:bf:9d:6e:3f:77:8e:d4:04:e6:24:6e:83:69:90:b0:cb:
         54:3f:1e:38:c4:73:2b:21:d6:01:02:0e:b9:49:bc:73:25:39:
         31:c7:39:19:46:95:92:43:80:11:ed:c7:a4:4d:c8:32:5f:f5:
         6b:ef:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----