Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/4Z_a-vkkdtS6Z-9T1n_QYXQqm1I.roa
File:                     4Z_a-vkkdtS6Z-9T1n_QYXQqm1I.roa (raw, json)
Hash identifier:          uBWC0OvgC9K4CesvEkLBo30pFJVQaOkvjX8oETagrxE=
Subject key identifier:   E1:9F:DA:FA:F9:24:76:D4:BA:67:EF:53:D6:7F:D0:61:74:2A:9B:52
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       01856F14EC12551465A7653EFA1E10A27A1C
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/4Z_a-vkkdtS6Z-9T1n_QYXQqm1I.roa
Signing time:             Sun 01 Jan 2023 20:45:20 +0000
ROA not before:           Sun 01 Jan 2023 20:45:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199842
IP address blocks:        213.199.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:ec:12:55:14:65:a7:65:3e:fa:1e:10:a2:7a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  1 20:45:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e19fdafaf92476d4ba67ef53d67fd061742a9b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:ec:25:3a:09:26:45:bb:69:0d:ce:9d:da:
                    62:0e:9f:1e:e7:7b:34:84:1e:76:1d:86:b8:79:50:
                    de:e7:83:85:40:b1:78:f5:f5:9e:48:c0:98:75:7b:
                    f1:30:c9:fc:b4:64:0b:15:6b:54:2d:d8:ac:ac:ee:
                    3b:18:fc:78:79:84:bb:5b:73:61:5d:6f:f9:e5:ad:
                    4b:24:ef:fb:22:17:ee:bd:68:4f:ca:a9:26:44:0f:
                    df:f9:3e:fd:75:1d:dc:98:41:c3:77:bd:c4:f2:3c:
                    da:c4:a4:81:39:42:5b:46:d6:08:de:14:41:c2:2d:
                    2f:e0:72:16:14:dd:67:6f:eb:9b:6f:70:e3:25:16:
                    ee:64:96:e2:73:b2:a1:b9:9b:a0:e2:44:49:7c:ef:
                    9d:8f:36:43:ed:68:18:24:f7:e6:81:17:4f:2a:8e:
                    ce:fb:dd:37:88:f4:7d:82:4e:29:00:5c:b2:50:58:
                    6f:82:33:70:49:87:a4:de:fa:d9:54:94:43:89:02:
                    68:38:6a:7f:62:09:f5:0f:aa:db:64:f6:9b:17:09:
                    a9:c6:8e:af:2a:4f:f8:05:ca:a8:69:4f:7d:6c:e5:
                    86:60:4d:35:9e:85:b9:12:8c:e4:9f:da:e3:84:04:
                    d6:f9:40:8a:17:05:ad:d8:e5:9e:f8:68:f0:57:46:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9F:DA:FA:F9:24:76:D4:BA:67:EF:53:D6:7F:D0:61:74:2A:9B:52
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/4Z_a-vkkdtS6Z-9T1n_QYXQqm1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.199.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:83:1d:68:53:4d:3f:fd:a4:63:5e:0f:b6:5c:ee:b7:ec:
         85:87:44:62:52:cb:1a:82:b0:b4:84:66:73:9d:46:6b:af:8f:
         d3:6c:ef:b4:5a:29:87:d9:02:24:df:63:ae:3e:d8:31:61:0d:
         c8:ad:43:ba:ff:09:c5:75:a0:4b:83:84:e1:1a:d4:e2:49:1c:
         bf:f5:71:fc:4d:30:8d:f0:47:08:15:c1:df:fc:2d:c8:fb:f8:
         d2:3d:a7:80:20:5c:e0:93:7a:ef:83:02:36:c2:7f:ac:c8:84:
         28:2c:73:09:ff:e3:96:ec:ed:94:0e:0e:88:91:b7:a6:f7:fc:
         b4:37:c6:a2:b3:8e:c6:74:ff:28:c7:ab:e9:63:61:42:42:29:
         44:88:ed:b4:83:75:4e:6c:f2:b4:4d:9c:c8:06:b1:5e:db:c9:
         2e:a0:32:d8:2c:90:05:cd:4e:be:4c:55:e5:0c:76:b3:5b:c2:
         8a:7a:ce:27:9d:27:31:7c:99:5c:ac:d7:e1:c9:4e:68:c2:13:
         b3:66:06:cb:67:0a:d4:3f:2e:e9:76:ca:5b:b8:c6:9f:c1:bd:
         3e:e3:28:e1:49:4a:14:b2:85:22:99:30:ab:06:9d:ca:c8:5a:
         8b:4b:eb:53:a6:09:da:0b:e2:63:40:43:ab:53:d0:f1:5b:d4:
         06:35:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----