Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa
File:                     ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa (raw, json)
Hash identifier:          Qen9PrL8w6iJWryOnqh+xk+rKYhDT+aevjivWNin9cY=
Subject key identifier:   95:DA:93:80:21:0D:D8:3B:BD:27:C6:85:43:A5:18:56:13:42:D8:DD
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01856BD339CEA1FD5A1C9CC9CFF9C4E24875
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa
Signing time:             Sun 01 Jan 2023 05:34:42 +0000
ROA not before:           Sun 01 Jan 2023 05:34:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42978
IP address blocks:        185.117.13.0/24 maxlen: 24
                          2a06:8280:10::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:39:ce:a1:fd:5a:1c:9c:c9:cf:f9:c4:e2:48:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Jan  1 05:34:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=95da9380210dd83bbd27c68543a518561342d8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:a8:07:95:38:cb:66:6e:74:75:a0:e6:9e:
                    ab:44:90:1f:be:e3:35:5c:c2:3a:fa:3e:1d:9b:3a:
                    be:88:40:ab:80:ad:64:5e:08:8c:a6:a9:25:4d:53:
                    74:08:e5:1c:16:ef:4b:db:1c:1b:b0:6e:1d:75:aa:
                    4d:ed:24:8e:44:12:dc:51:50:6d:99:ee:0c:51:43:
                    ad:0f:e7:fb:84:1b:d7:1e:15:ad:4f:37:a8:a5:81:
                    c9:5c:ec:be:f1:c9:19:bd:a0:36:19:fa:af:8f:7f:
                    9b:97:68:22:3c:de:15:b2:8b:89:24:05:8b:fb:2a:
                    f7:52:22:8d:73:f5:84:ab:0a:5a:34:d3:ad:38:bb:
                    b9:38:99:9f:69:1b:c7:9a:c1:1f:b7:b0:e2:87:a3:
                    c4:53:f2:74:14:b9:26:25:b8:be:c5:ab:4b:d9:52:
                    19:90:51:3c:2c:05:bd:15:d6:51:98:cf:61:19:22:
                    ec:31:00:63:28:f7:38:93:4c:63:01:5f:d4:d8:b2:
                    75:c3:2b:3d:16:5a:52:2b:b9:38:73:9b:6d:2c:1f:
                    44:e4:92:52:e2:50:ec:4e:b1:25:99:7f:f9:1a:33:
                    f6:22:71:06:fe:7a:6b:bb:ab:89:68:44:62:3d:39:
                    2f:21:41:ba:2c:c8:b1:24:c8:3e:bb:20:31:29:18:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:93:80:21:0D:D8:3B:BD:27:C6:85:43:A5:18:56:13:42:D8:DD
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.13.0/24
                IPv6:
                  2a06:8280:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:77:21:50:e2:9d:cb:9a:1d:2d:fc:52:21:d6:a2:22:54:65:
         bf:8c:d1:23:29:d4:88:73:1b:f0:b7:bb:2a:86:79:42:30:1e:
         bb:43:7c:94:09:f6:b2:94:b2:ad:c0:54:12:e3:a5:55:dd:29:
         41:f2:84:d3:9a:bd:af:df:be:64:2f:ba:56:31:f3:5f:ed:63:
         cf:f7:c2:fd:f2:b2:da:0c:1e:45:dd:b2:e4:6d:f2:8f:44:33:
         fb:8f:fc:af:8d:a0:94:37:b8:ff:90:a3:6a:91:3a:67:35:34:
         3c:34:78:83:c0:79:4a:3b:7e:ae:a5:9b:d2:1f:8c:33:ef:f7:
         26:ed:f8:ca:63:9f:00:db:c6:13:75:38:f1:7c:4e:a5:37:2e:
         1b:9a:f7:1d:0a:39:ae:b4:db:9e:bc:89:ef:d4:c9:ed:02:c8:
         72:8c:66:b4:96:63:75:7b:98:e7:d6:69:d9:da:60:eb:8b:dd:
         bb:4a:88:02:54:46:69:88:4e:d6:9f:7b:2c:e8:85:11:01:d9:
         64:e0:4e:fb:38:c5:05:e3:92:45:1d:3e:9c:f7:de:92:a6:03:
         1a:ce:16:75:ed:e0:fb:62:63:21:8a:b0:54:f6:eb:33:49:c6:
         e1:37:0a:2f:7d:ea:32:5b:2a:e0:25:44:5d:a7:07:75:ca:d2:
         c5:7f:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----