Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/BzbK_bpapMJogX8HnvBB2pFfwiU.roa
File:                     BzbK_bpapMJogX8HnvBB2pFfwiU.roa (raw, json)
Hash identifier:          NefrF6gQWcud0l46xmQ+wcPwvWfvo5tYVecl4nG5NDQ=
Subject key identifier:   07:36:CA:FD:BA:5A:A4:C2:68:81:7F:07:9E:F0:41:DA:91:5F:C2:25
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       01878FE3C43E9EB0358F51FC5761396EE2A5
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/BzbK_bpapMJogX8HnvBB2pFfwiU.roa
Signing time:             Mon 17 Apr 2023 15:44:41 +0000
ROA not before:           Mon 17 Apr 2023 15:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        185.162.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8f:e3:c4:3e:9e:b0:35:8f:51:fc:57:61:39:6e:e2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Apr 17 15:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0736cafdba5aa4c268817f079ef041da915fc225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:66:d7:37:cb:3a:b3:3d:c2:11:b5:e4:3a:
                    ee:8d:83:c4:fc:c1:8b:0c:0f:89:e5:23:fa:20:b2:
                    d9:11:9c:80:c8:52:6a:d4:8e:09:1b:84:4c:8c:6f:
                    00:81:e0:97:47:80:fa:21:7e:6f:d0:61:ab:97:10:
                    70:8a:0f:c1:51:6c:ac:f5:bb:4e:9b:34:e8:99:cd:
                    83:4a:f8:82:eb:fe:95:de:bc:ff:4d:ac:ed:f1:37:
                    0f:1d:3a:6f:1f:01:fa:60:3b:77:87:00:f2:9e:8f:
                    5c:bf:89:d5:73:d2:ba:2b:78:f2:5b:e5:6f:73:51:
                    75:38:7c:7d:11:b5:46:93:11:d4:8e:7d:c1:86:7f:
                    4e:25:96:ea:50:79:88:88:df:5b:34:d0:1f:5c:b0:
                    19:fd:f7:76:db:80:ae:5c:60:c9:9e:1d:4b:ad:04:
                    6a:0e:77:41:6b:33:78:d3:7d:3f:32:65:f9:7e:4d:
                    00:e1:49:06:d2:56:7b:b9:38:e3:6d:60:08:5b:02:
                    d2:54:b9:85:45:e5:fe:ba:b5:8e:f7:72:57:c6:2e:
                    b7:29:37:ff:44:44:09:4a:f0:20:38:33:96:08:c1:
                    3d:27:2d:b0:ce:78:6c:28:c0:33:c1:00:ea:4d:b4:
                    22:03:70:03:3d:b7:53:3e:f7:00:92:99:a0:d5:d9:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:CA:FD:BA:5A:A4:C2:68:81:7F:07:9E:F0:41:DA:91:5F:C2:25
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/BzbK_bpapMJogX8HnvBB2pFfwiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:2d:67:53:f5:52:85:15:42:6a:43:27:85:fc:85:d8:0d:42:
         d3:80:79:a8:5d:13:34:57:89:4c:6d:9e:b6:4d:4f:53:9c:51:
         9f:20:ec:ef:f4:33:8c:c1:bc:40:a1:53:7c:89:98:89:86:f6:
         87:83:0b:a9:8a:3e:83:b9:df:d4:01:7d:b3:9a:8a:13:c6:64:
         87:8b:6e:d6:92:07:cf:79:5b:1b:27:d8:88:47:95:df:ae:b1:
         18:f4:d6:94:4e:7a:85:90:0f:1a:c2:90:15:e8:7a:f8:38:a6:
         4b:a1:ba:e0:c4:d5:8b:f4:ea:ca:b8:e1:5f:3d:c9:89:61:78:
         f9:54:41:5c:d7:d0:0c:4b:9c:dd:41:eb:f8:df:c9:13:e7:ac:
         1f:66:da:0d:18:c0:73:c9:d6:bc:e7:42:6c:7c:40:8e:91:5a:
         26:82:e6:81:88:f0:55:35:a1:fa:4e:cc:30:73:59:a3:20:bb:
         ea:9f:88:5d:9a:cd:a6:c3:dd:89:13:4c:52:96:9a:97:f9:f8:
         7e:37:aa:f1:49:6b:40:c0:5d:9b:43:e3:89:78:4d:27:b0:31:
         72:05:8d:16:e4:23:21:54:70:82:82:22:70:2c:8d:5c:6e:a9:
         b3:8c:4a:91:e9:93:eb:83:8f:d8:41:7f:67:d8:7f:27:9d:7c:
         3a:e6:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----