Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1x3eHuGHEgoFIu8wjxFGwxjY_zM.roa
File:                     1x3eHuGHEgoFIu8wjxFGwxjY_zM.roa (raw, json)
Hash identifier:          6E+aFO4mTfOq+EeXonPMnN2wkHmJfYCLK1wTBBO1BtI=
Subject key identifier:   D7:1D:DE:1E:E1:87:12:0A:05:22:EF:30:8F:11:46:C3:18:D8:FF:33
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       01856E8B275614FCF025E3EB3031CAA93DC9
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1x3eHuGHEgoFIu8wjxFGwxjY_zM.roa
Signing time:             Sun 01 Jan 2023 18:14:51 +0000
ROA not before:           Sun 01 Jan 2023 18:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204544
IP address blocks:        185.53.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:8b:27:56:14:fc:f0:25:e3:eb:30:31:ca:a9:3d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jan  1 18:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d71dde1ee187120a0522ef308f1146c318d8ff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:1b:9b:85:ae:da:fd:0d:40:64:85:98:38:
                    73:aa:5c:85:fb:b1:cb:b4:0b:3f:f7:09:76:50:c2:
                    cd:83:f2:37:6c:53:dd:14:83:c3:c5:06:d4:b7:ce:
                    6b:23:6b:76:d6:66:ef:01:2f:c1:db:1e:94:a5:27:
                    ba:98:08:8a:6b:3c:2f:a9:c9:78:17:dd:65:18:0b:
                    5e:2e:05:01:fc:90:05:7a:73:b4:0e:d5:60:8f:75:
                    ee:8a:6e:ba:72:59:bd:06:6e:f9:3d:1b:38:c0:95:
                    e6:6c:30:92:03:45:aa:49:8b:83:2b:3f:70:0b:5a:
                    68:b3:51:c2:1b:59:10:83:39:f3:66:38:85:2c:02:
                    d1:c0:e4:5b:4d:29:49:76:4a:36:2a:3f:c3:5d:4c:
                    31:5e:a8:35:80:7a:28:5b:a7:c6:b1:cb:1e:a2:87:
                    30:e3:d4:06:56:43:c7:58:7a:5c:d6:09:5f:75:06:
                    a1:40:75:2a:de:71:51:46:db:92:6b:2f:72:25:72:
                    9e:f5:f6:cc:01:e8:a3:c7:1a:df:5b:9e:10:24:22:
                    79:c1:e2:89:f0:59:c3:12:1e:b4:d4:7e:aa:5e:0d:
                    fc:e1:10:81:8d:87:bd:2b:2a:98:3b:80:a4:e0:9a:
                    0c:e5:d9:72:da:3e:5f:4b:37:86:72:0e:20:04:41:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:DE:1E:E1:87:12:0A:05:22:EF:30:8F:11:46:C3:18:D8:FF:33
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1x3eHuGHEgoFIu8wjxFGwxjY_zM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.53.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:9f:da:39:bf:4b:ec:c1:99:27:1c:a2:15:d2:8a:fd:94:
         ac:0c:de:9a:1c:e4:06:d5:63:4f:b0:d8:16:85:41:92:24:b3:
         76:1c:df:2c:e2:ff:45:fc:0c:81:43:4e:93:25:ff:65:3b:ec:
         f7:5a:82:ed:76:20:ed:8e:82:b9:44:6c:e0:ce:02:ab:57:55:
         7c:1a:12:7d:b8:97:bf:66:0a:6d:a4:68:e8:5e:fc:7a:45:60:
         ab:aa:fc:65:a9:02:c4:a2:22:6d:d9:24:16:d2:3e:4e:63:e1:
         c0:b5:f6:84:ca:7d:f1:8c:37:aa:25:6d:1c:74:68:5e:29:3c:
         ef:9d:f3:46:41:f3:d1:26:d7:44:a4:51:74:28:0f:69:6f:c6:
         9f:44:0d:1f:79:bf:af:e9:78:6e:38:5b:ea:6c:c2:2a:d9:c1:
         9e:d2:19:83:f2:35:4b:9b:57:5e:90:9f:77:f7:dc:16:7e:ea:
         c6:74:84:11:96:34:2b:86:44:77:cd:a6:c4:7e:93:1c:87:ab:
         3a:23:98:a7:fd:56:af:f4:75:ce:fa:03:16:a3:d0:88:41:3c:
         23:80:42:84:dd:ad:5d:00:c3:5d:d0:36:95:f5:f8:9d:dc:ba:
         85:14:a0:89:75:51:38:aa:f1:5e:b4:0a:d8:a2:13:23:3c:74:
         7d:4f:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----