Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/rZ1TjJXyZ05v9YVdUaY0mDEBcMM.roa
File:                     rZ1TjJXyZ05v9YVdUaY0mDEBcMM.roa (raw, json)
Hash identifier:          rVrjc4w4+J5d7n2GOw1kAXLdwNM8/Yzo+TASaakNc3k=
Subject key identifier:   AD:9D:53:8C:95:F2:67:4E:6F:F5:85:5D:51:A6:34:98:31:01:70:C3
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       01856C5C977A8970535B5C9BFC15738B5BDB
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/rZ1TjJXyZ05v9YVdUaY0mDEBcMM.roa
Signing time:             Sun 01 Jan 2023 08:04:45 +0000
ROA not before:           Sun 01 Jan 2023 08:04:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2119
IP address blocks:        82.193.160.0/19 maxlen: 19
                          2a02:2580::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:5c:97:7a:89:70:53:5b:5c:9b:fc:15:73:8b:5b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Jan  1 08:04:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad9d538c95f2674e6ff5855d51a63498310170c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:ae:1b:62:64:7a:9e:f9:b0:eb:d0:54:bf:
                    c3:e0:3e:5c:74:56:63:74:7f:51:f7:67:3f:91:fd:
                    de:39:0f:93:d8:85:ba:5e:c3:36:b5:ec:e8:4f:a6:
                    a4:41:82:0a:44:5e:05:0f:29:d0:74:85:68:3b:93:
                    d3:f3:b1:40:ff:59:5f:54:9b:d3:fc:1f:36:af:16:
                    b4:73:ff:16:62:2e:9b:1a:3a:af:07:ba:08:13:98:
                    8f:63:86:84:f8:ce:c4:db:62:e6:9f:af:f5:3e:9a:
                    35:2d:91:ac:f1:14:9a:0a:8f:96:a9:da:21:c0:25:
                    25:29:f1:0b:ed:24:e3:a8:00:8f:9a:b7:2f:a6:89:
                    dc:64:1f:ab:8b:48:1b:2a:92:c3:c1:cb:3f:60:6c:
                    a2:ec:8f:12:04:73:fe:c1:2d:ec:81:d0:8f:18:61:
                    11:79:1e:b5:c6:cf:8b:8d:6b:87:56:25:d4:fd:58:
                    12:4e:0d:db:84:2a:54:19:2f:dd:05:5b:bf:23:a3:
                    e8:d5:9a:91:10:78:60:c1:1e:86:ea:0d:04:bc:e7:
                    50:c4:3e:64:fa:aa:ad:df:46:26:2c:5d:65:2a:bf:
                    97:d4:2a:02:49:2b:95:0d:0c:ee:0d:10:a1:31:25:
                    3c:fa:cc:d1:a1:a6:ca:81:29:48:fa:3e:bd:f2:8a:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9D:53:8C:95:F2:67:4E:6F:F5:85:5D:51:A6:34:98:31:01:70:C3
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/rZ1TjJXyZ05v9YVdUaY0mDEBcMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.193.160.0/19
                IPv6:
                  2a02:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:44:da:0d:3f:f0:f3:65:4a:1e:3f:aa:87:e4:f1:69:8b:ba:
         ff:db:6c:47:8c:85:84:86:47:e1:a1:25:72:24:37:22:91:35:
         c9:cd:56:5e:1c:c2:d0:82:7a:68:3c:b4:c3:0d:19:1b:a8:06:
         2a:19:cc:b8:fb:3f:5c:d6:96:35:b7:fc:e6:f8:a8:7d:f3:ab:
         29:eb:93:da:63:28:11:af:98:ca:a6:e9:84:63:58:65:53:7e:
         d1:a5:f2:e1:19:b3:7f:9b:4c:58:ef:79:3f:2c:37:b3:2a:6a:
         85:ba:e4:6a:e5:ed:00:f3:ec:ab:3e:e3:54:6c:bd:69:8c:73:
         b8:3b:bc:02:27:15:cb:95:27:13:8e:2e:21:e5:88:2e:19:5e:
         5a:10:73:54:b1:00:9b:86:d6:77:0c:f3:53:98:b5:6a:70:ba:
         2a:1e:bc:c5:58:80:08:e4:d9:32:58:98:df:14:43:be:a8:64:
         ba:39:12:e4:18:41:37:50:43:3b:13:cd:2c:c2:5a:1e:28:3a:
         ae:6c:d1:8f:7d:db:6c:cc:f9:f4:1c:ee:d0:43:41:f7:ce:8a:
         1a:d0:48:f3:2f:dd:36:03:b5:a5:6d:05:fa:11:e6:17:62:49:
         53:0e:c6:cd:25:9a:4f:43:95:a0:7e:af:59:c0:49:cd:cb:ef:
         e4:c0:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----