Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/yyscKIODBwzClTmAMQg7Zt04pwg.roa
File:                     yyscKIODBwzClTmAMQg7Zt04pwg.roa (raw, json)
Hash identifier:          hdefECWGi1Z13g2J92p8TnHIBT2gb92lim1oT5sKMyQ=
Subject key identifier:   CB:2B:1C:28:83:83:07:0C:C2:95:39:80:31:08:3B:66:DD:38:A7:08
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       0185ABF4416C679F59A0959D0E4A252DE1F4
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/yyscKIODBwzClTmAMQg7Zt04pwg.roa
Signing time:             Fri 13 Jan 2023 16:26:29 +0000
ROA not before:           Fri 13 Jan 2023 16:26:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202613
IP address blocks:        185.8.196.0/22 maxlen: 24
                          2a02:29e1::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ab:f4:41:6c:67:9f:59:a0:95:9d:0e:4a:25:2d:e1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Jan 13 16:26:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cb2b1c288383070cc295398031083b66dd38a708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:13:a6:4f:bb:9f:0d:53:7c:36:d0:83:3f:
                    e7:45:6c:95:a3:a6:c9:af:0f:f2:f8:43:95:13:6b:
                    b6:09:c7:98:27:e8:0c:68:42:0f:97:11:52:38:a6:
                    08:2b:32:eb:a5:19:8f:af:5b:5f:51:3c:82:d0:e4:
                    bd:5e:97:33:eb:bc:bd:24:ec:99:43:4d:26:8d:54:
                    89:c4:60:27:ad:5b:a0:75:8d:17:f2:13:a5:82:4f:
                    31:e8:37:56:da:3a:88:78:4e:0c:21:95:be:ba:8d:
                    37:cd:49:c7:23:80:67:2f:3d:88:12:25:60:95:08:
                    f0:fe:2b:f7:b1:e4:72:c8:b4:c8:81:af:50:8c:53:
                    c5:14:d4:cd:fc:54:ea:70:5e:a4:cd:e8:85:a2:ed:
                    27:d9:4c:4f:5c:51:10:3b:ba:28:11:2b:dd:a1:5e:
                    2d:ce:ae:4d:24:c6:6b:ba:78:80:ef:86:fb:4d:f3:
                    da:79:cb:29:49:55:5c:ab:5a:87:61:64:e1:4d:fa:
                    46:92:e5:ca:4e:ac:ea:ac:7f:24:1c:00:3f:47:65:
                    60:77:a7:37:6e:10:64:e5:25:32:95:3c:01:aa:50:
                    40:ac:56:16:7e:ad:c4:aa:74:d3:83:e6:23:72:8b:
                    d1:23:97:73:a8:d8:f1:2c:4a:eb:8f:1e:26:a0:b2:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2B:1C:28:83:83:07:0C:C2:95:39:80:31:08:3B:66:DD:38:A7:08
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/yyscKIODBwzClTmAMQg7Zt04pwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.8.196.0/22
                IPv6:
                  2a02:29e1::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:96:62:81:84:4b:31:60:3c:af:d3:59:19:6e:26:10:62:
         69:14:f3:b3:e1:34:4c:e4:5c:f1:2d:02:f6:2f:c6:ec:b8:56:
         46:61:fe:b1:a6:5e:2b:25:55:35:59:9e:05:84:34:b0:fe:95:
         5c:31:e3:e6:25:b5:f8:e1:8b:c4:e6:44:09:10:3c:ee:16:1d:
         d0:ad:eb:c7:e3:c0:29:59:cf:91:fa:21:68:ce:9d:dc:5f:69:
         17:74:dc:07:98:a9:e1:dc:c1:ef:4d:c3:d9:f9:c4:55:95:26:
         ed:49:d3:3a:21:c4:ca:44:dc:14:38:74:14:f3:e2:57:a0:36:
         6d:98:05:c2:a8:9a:a6:08:f0:7b:78:19:22:d8:1d:47:6c:bb:
         5f:d6:e3:bc:07:44:23:f7:e7:88:ba:b3:70:97:c7:86:0f:01:
         5e:2c:ed:61:21:5e:a9:f6:20:13:52:d6:ee:81:45:41:e2:0c:
         a4:e9:43:a1:a4:dc:3b:f0:ee:bb:bb:46:d1:e7:18:ff:c5:e3:
         b5:9a:c8:aa:be:d7:1f:60:48:b1:27:92:aa:5a:86:6c:e7:e0:
         71:51:bd:1d:24:73:97:31:be:89:96:c2:19:56:fc:93:75:61:
         34:47:f2:37:19:f3:ea:7e:19:16:1b:d6:19:12:01:15:73:3b:
         68:ed:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----