Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/nnIwprHWGvulTOE0PKcGNUIgcNc.roa
File:                     nnIwprHWGvulTOE0PKcGNUIgcNc.roa (raw, json)
Hash identifier:          lvpbNzpiVCtY/XzDlwI04SmkGMGVaJA+M60SGbqRqAE=
Subject key identifier:   9E:72:30:A6:B1:D6:1A:FB:A5:4C:E1:34:3C:A7:06:35:42:20:70:D7
Certificate issuer:       /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial:       0189B1945961BE93B5D03DD7DA80C8DD5302
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/nnIwprHWGvulTOE0PKcGNUIgcNc.roa
Signing time:             Tue 01 Aug 2023 14:50:36 +0000
ROA not before:           Tue 01 Aug 2023 14:50:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206423
IP address blocks:        185.156.252.0/22 maxlen: 23
                          2a07:a1c0::/29 maxlen: 32
                          2a13:6dc0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b1:94:59:61:be:93:b5:d0:3d:d7:da:80:c8:dd:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
        Validity
            Not Before: Aug  1 14:50:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e7230a6b1d61afba54ce1343ca70635422070d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:43:47:bd:1c:83:47:3e:e1:a0:d6:58:74:
                    14:6e:49:1a:fe:d7:36:61:ad:07:48:3a:bb:0f:d3:
                    9d:e3:2b:b4:78:d9:1a:ea:43:d7:30:2f:c5:b3:dd:
                    34:f1:9e:c4:15:c2:8e:33:6c:f2:13:d9:92:5e:21:
                    4f:1e:1b:90:40:c1:fe:02:30:66:78:f0:be:b4:d4:
                    55:c7:cd:7c:ef:71:32:c9:25:d7:32:a3:01:9a:ee:
                    df:a9:48:98:23:3a:16:23:93:4f:58:57:b4:21:7f:
                    6d:ae:00:0b:98:75:6f:76:ca:66:a7:15:5f:82:69:
                    a3:28:6f:26:0c:ff:86:26:d6:5b:2c:02:41:eb:6d:
                    da:f3:cc:0f:ac:6e:49:dd:aa:03:e3:9d:0d:1c:ab:
                    33:77:19:8d:6d:50:40:02:2f:3d:e2:66:a1:34:83:
                    9a:9c:1b:f0:0f:44:77:52:df:0b:85:18:ab:cc:d4:
                    c7:a9:48:dc:8f:b1:48:77:7c:66:05:1b:86:42:c5:
                    a3:d6:bb:84:8f:f3:a4:28:49:43:d7:94:0e:1e:e6:
                    fe:59:c7:ef:c7:24:63:a5:a5:4e:fc:cd:1a:f7:5f:
                    a4:54:80:56:5a:90:b6:07:1f:f3:a9:27:c2:ac:ca:
                    f6:7c:4b:39:35:c6:b6:04:14:39:e7:93:04:4c:69:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:72:30:A6:B1:D6:1A:FB:A5:4C:E1:34:3C:A7:06:35:42:20:70:D7
            X509v3 Authority Key Identifier:
                keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/nnIwprHWGvulTOE0PKcGNUIgcNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.252.0/22
                IPv6:
                  2a07:a1c0::/29
                  2a13:6dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         66:73:02:c4:2e:2d:9c:26:55:5d:30:39:c7:90:ac:93:d0:45:
         83:e1:68:e2:38:9f:c0:0b:b7:2c:04:19:63:f0:cf:18:56:d8:
         bc:3f:4e:66:3e:22:8a:4a:fd:ae:c3:2e:49:d7:37:e0:1a:31:
         9e:79:e2:d1:19:bc:37:47:06:d6:c6:b7:d4:a3:8f:28:d3:4d:
         f0:94:6d:d9:7a:b2:bf:c0:95:53:35:eb:7b:aa:da:2e:2c:0c:
         60:23:83:b1:83:87:af:6a:53:23:2c:64:a5:28:8a:7f:9b:ce:
         bf:f5:81:43:c4:ee:41:16:78:ef:d8:a4:e4:f1:5b:3e:09:db:
         bf:33:c5:42:e6:f7:bc:6b:eb:47:7a:39:5c:78:17:bd:a9:27:
         49:62:0e:66:79:28:8e:54:0f:39:a0:b8:48:38:ec:fd:64:e6:
         27:2b:32:8c:9a:7b:b8:b2:f2:03:93:a9:a5:03:49:b0:1d:a6:
         79:52:8a:48:6a:f7:b5:45:65:89:be:3a:c5:1e:f9:36:72:81:
         30:49:dc:9d:57:0b:f1:25:91:42:fa:33:5d:f1:ad:21:b3:6e:
         6c:28:71:22:81:f3:21:80:ee:9e:79:0c:81:fc:48:46:7b:b1:
         2a:6c:9e:48:36:55:b8:0c:68:bf:b9:44:91:c1:35:de:23:3b:
         b8:2a:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----