Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/65VLLIiuJ5qEWzlTL8bDPQaXC0Q.roa
File:                     65VLLIiuJ5qEWzlTL8bDPQaXC0Q.roa (raw, json)
Hash identifier:          GHn5qym9RY2vfwCFSyOG8H8PzjhUQ85pGkSebCOprIA=
Subject key identifier:   EB:95:4B:2C:88:AE:27:9A:84:5B:39:53:2F:C6:C3:3D:06:97:0B:44
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       01857315F58BDB650BFD602B2860626601D2
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/65VLLIiuJ5qEWzlTL8bDPQaXC0Q.roa
Signing time:             Mon 02 Jan 2023 15:24:56 +0000
ROA not before:           Mon 02 Jan 2023 15:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40975
IP address blocks:        185.165.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:f5:8b:db:65:0b:fd:60:2b:28:60:62:66:01:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jan  2 15:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb954b2c88ae279a845b39532fc6c33d06970b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:ab:44:dc:98:30:5f:0e:74:87:1e:79:37:
                    48:d8:e0:f5:f5:e9:72:24:4a:82:81:1f:f3:1d:c5:
                    d8:0a:97:64:b9:b8:0e:7c:75:79:4f:c9:3d:04:0d:
                    e2:fe:93:df:47:2e:a2:90:7a:38:5f:4c:85:f3:c9:
                    9a:3d:eb:13:30:59:07:a5:81:05:dc:59:8f:bb:93:
                    2a:e8:89:86:9b:65:7d:ba:48:ec:1e:a2:8b:93:32:
                    08:44:97:e7:b9:45:52:6f:dd:fc:a1:96:88:b0:3a:
                    b1:1b:b8:0d:89:48:73:c1:9b:00:ee:6e:6a:a8:99:
                    c1:d8:f2:56:ca:42:91:fd:89:0d:31:47:b9:a0:ad:
                    4a:f5:ac:1d:38:58:b0:33:84:62:e8:d3:37:cf:36:
                    ba:d8:e7:35:ef:9f:97:96:84:e4:9e:ea:8a:d0:e8:
                    71:be:c6:0b:87:81:47:c3:87:ef:db:a0:7f:74:c4:
                    f9:61:cb:dc:da:82:50:ed:77:b6:6f:b3:58:b7:c3:
                    70:bc:3f:ab:78:62:77:59:d7:da:b8:3b:15:45:6c:
                    4c:3b:10:c3:39:ea:92:a8:b4:f3:77:cd:fe:69:cf:
                    dc:04:e0:52:86:7e:90:01:a7:f7:ff:03:a7:bd:18:
                    a6:18:a7:12:ac:db:d9:59:aa:90:94:e3:b0:eb:4f:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:4B:2C:88:AE:27:9A:84:5B:39:53:2F:C6:C3:3D:06:97:0B:44
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/65VLLIiuJ5qEWzlTL8bDPQaXC0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:68:e9:f8:8a:64:af:5e:11:df:11:59:ef:9e:bd:7c:be:87:
         09:da:b9:67:7e:03:61:29:87:d3:ad:3c:e9:8d:63:6b:b2:0b:
         37:28:25:e7:98:0d:71:1a:fb:a5:8c:19:9e:bb:03:84:9f:fc:
         f4:fe:bb:8e:bc:80:f0:58:98:78:af:4c:5a:5e:aa:7a:60:ed:
         1f:8d:51:a5:93:f6:1c:99:f6:b9:eb:b1:24:7a:78:e2:e6:f0:
         64:e0:d0:f8:9b:5a:f4:b5:81:53:87:e7:77:ae:1d:f1:a9:0e:
         45:7d:5b:92:a0:95:01:a6:cb:d9:89:47:c1:8e:f4:35:6f:de:
         d9:e4:1c:ee:af:6f:20:44:b4:c3:01:c8:ae:c1:df:45:20:34:
         98:b4:8f:3c:97:91:aa:6d:3c:52:cc:81:64:93:ef:58:c2:50:
         d7:71:b6:f6:32:71:ae:13:e8:33:c9:d5:c6:0f:67:b7:c2:a0:
         b3:51:e2:04:7b:e1:99:62:4b:8c:4d:5b:d3:04:7e:a4:e4:3b:
         bc:92:73:3c:ae:7f:f8:08:11:c1:26:0c:ca:57:35:c3:84:8c:
         e7:e3:46:a9:9c:c7:01:8c:c7:a1:32:c2:65:57:73:8f:45:03:
         58:40:83:18:a7:55:31:78:64:e3:fc:d4:0a:8a:68:ce:1e:6d:
         12:88:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----