Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/b1uHjkkFZV3O0STKIEoVY-tUS10.roa
File:                     b1uHjkkFZV3O0STKIEoVY-tUS10.roa (raw, json)
Hash identifier:          AE0szttlcDAXLulHIokBeLOMK7XGmzRhIiMc246FTEc=
Subject key identifier:   6F:5B:87:8E:49:05:65:5D:CE:D1:24:CA:20:4A:15:63:EB:54:4B:5D
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       01857315F6002B640BF95CE4F9194751F67D
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/b1uHjkkFZV3O0STKIEoVY-tUS10.roa
Signing time:             Mon 02 Jan 2023 15:24:57 +0000
ROA not before:           Mon 02 Jan 2023 15:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51295
IP address blocks:        185.179.156.0/22 maxlen: 22
                          185.248.196.0/22 maxlen: 22
                          194.165.26.0/24 maxlen: 24
                          2a0a:8880:1::/48 maxlen: 48
                          2a0a:8880:2::/48 maxlen: 48
                          2a0a:8880:aaaa::/48 maxlen: 48
                          2a0f:4440:aaaa::/48 maxlen: 48
                          2a0f:4440:abcd::/48 maxlen: 48
                          2a0a:8880::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:f6:00:2b:64:0b:f9:5c:e4:f9:19:47:51:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jan  2 15:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f5b878e4905655dced124ca204a1563eb544b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:0b:5d:af:d3:16:2d:e3:33:28:7b:07:5a:
                    a6:a4:05:14:46:7f:2d:1f:b0:10:95:de:3d:f6:a6:
                    4f:8a:d5:a6:62:46:d1:f5:7d:3b:42:ae:ce:c5:42:
                    44:e4:c2:7d:0f:23:8b:fb:14:12:fa:27:47:4c:08:
                    ab:59:9c:58:71:8d:19:c6:13:02:5e:12:d0:33:02:
                    11:e2:9a:c0:87:11:4b:11:d9:a4:3a:36:a1:ea:6e:
                    16:22:0e:c6:a0:1d:34:e7:dd:44:56:56:60:f1:36:
                    76:2c:f5:af:ef:4e:dc:59:aa:87:68:c7:9a:6e:13:
                    8e:0b:da:f1:5e:6f:da:5d:f7:bd:fa:7a:2f:14:f7:
                    c3:c4:57:6d:a4:95:2e:3a:87:e2:8e:cc:d5:a3:be:
                    3b:a2:eb:ab:27:5a:c0:74:ea:20:f2:00:e6:de:e7:
                    4d:c7:f4:9a:ad:1a:8d:38:15:be:1f:5f:07:ad:8b:
                    9d:b8:07:4c:13:c9:bc:1b:ff:df:a0:14:7b:ea:bd:
                    50:37:47:15:31:78:37:67:ed:03:e5:bb:98:37:19:
                    51:07:e6:f0:10:5f:c8:af:fa:bf:54:5d:f2:d3:56:
                    62:27:77:eb:a4:6f:ab:bc:76:b3:a8:40:6c:85:44:
                    38:89:3a:a5:6d:35:39:25:5d:35:89:40:40:8d:15:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:87:8E:49:05:65:5D:CE:D1:24:CA:20:4A:15:63:EB:54:4B:5D
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/b1uHjkkFZV3O0STKIEoVY-tUS10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.156.0/22
                  185.248.196.0/22
                  194.165.26.0/24
                IPv6:
                  2a0a:8880::-2a0a:8880:2:ffff:ffff:ffff:ffff:ffff
                  2a0a:8880:aaaa::/48
                  2a0f:4440:aaaa::/48
                  2a0f:4440:abcd::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:31:57:23:64:dd:4d:b0:2e:d8:c9:27:a8:d0:77:bc:ff:
         c7:35:eb:5a:62:03:f1:43:d6:ee:f1:14:f9:f8:ff:d3:86:a7:
         d8:b6:13:bf:bf:e6:fd:0c:64:e8:a7:74:5e:fe:19:25:fb:87:
         ba:f2:10:bb:3f:cd:a5:a3:be:93:1e:b1:15:d5:39:c5:dc:8a:
         3b:5f:f7:44:31:f3:48:fb:64:d1:3e:a3:76:e3:91:7b:45:c9:
         b5:c1:b8:9f:e0:45:1f:e7:f1:c4:eb:f8:e2:9f:da:8f:46:9e:
         81:c8:6a:ff:77:52:4a:07:e5:79:ef:4b:aa:9f:74:14:90:b4:
         0d:39:0c:d8:4f:4c:24:cb:73:f1:34:ab:f0:ec:b0:0b:85:96:
         02:5f:d1:37:e0:bc:5c:f8:7c:a5:8a:3e:e4:5e:58:e4:5f:96:
         c5:1a:29:f6:4e:c7:58:aa:91:68:cc:24:67:bb:30:88:f6:e7:
         16:f2:d9:c3:c8:bb:1c:3a:69:26:6f:71:7b:3f:2c:b8:ec:11:
         8f:c7:a6:90:85:4a:01:8f:52:56:fe:bf:2b:d9:7b:85:35:fd:
         30:e7:48:6e:cc:4e:9f:6c:4c:7b:42:a3:99:2f:12:01:1e:cd:
         29:4e:6a:87:e8:b7:1a:9d:eb:10:0b:40:89:c8:e7:74:3f:a1:
         e5:9d:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----