Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BiVxd8WO8Bn0zlnIPIhHqVYTzeo.roa
File:                     BiVxd8WO8Bn0zlnIPIhHqVYTzeo.roa (raw, json)
Hash identifier:          kRBJ7XjZT9R1Rf94bbDLp/PYCrnysL404FpPTUCXmCo=
Subject key identifier:   06:25:71:77:C5:8E:F0:19:F4:CE:59:C8:3C:88:47:A9:56:13:CD:EA
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       018570F0BBB430BB1FA2C7F48B9737061986
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BiVxd8WO8Bn0zlnIPIhHqVYTzeo.roa
Signing time:             Mon 02 Jan 2023 05:25:02 +0000
ROA not before:           Mon 02 Jan 2023 05:25:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201044
IP address blocks:        82.177.162.0/24 maxlen: 24
                          2a00:4120:8000:6::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:bb:b4:30:bb:1f:a2:c7:f4:8b:97:37:06:19:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  2 05:25:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06257177c58ef019f4ce59c83c8847a95613cdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:40:fd:55:3c:c3:08:4c:4f:90:aa:92:f5:
                    44:0c:d1:68:d2:09:8a:92:85:02:41:7f:32:e0:b9:
                    92:52:77:fc:ef:72:cf:12:a9:86:ed:a0:c3:b5:e6:
                    eb:ac:ff:bc:9d:22:47:01:97:f7:f0:3f:f3:a6:df:
                    61:11:1d:b8:01:39:ab:ef:1a:ab:20:29:cb:80:ab:
                    82:ec:74:bc:03:b0:34:ff:20:c6:8b:62:e3:e9:fc:
                    57:24:81:21:18:17:be:e0:3b:75:a4:e6:e0:b5:a0:
                    fb:50:5f:04:2f:32:b0:c0:1e:a7:61:c2:4a:ff:e2:
                    2b:4f:a7:58:60:38:45:87:b0:36:3b:5f:77:d2:2e:
                    81:a9:60:2e:44:e2:fe:7c:dc:49:1c:0b:9b:62:5b:
                    29:49:54:2d:ff:4a:f2:06:70:ca:3e:75:57:d2:e0:
                    dd:f9:9f:f5:9f:91:b1:72:ac:58:be:a0:24:b1:55:
                    67:95:cc:58:3c:37:8c:21:24:cc:a9:20:5e:e2:ce:
                    24:ca:05:1e:bb:43:ba:c2:8c:36:65:07:cb:e8:79:
                    1d:cc:63:31:8d:18:c6:81:e7:09:1b:df:f6:23:36:
                    0d:53:8d:94:38:0c:22:7d:39:a3:bf:80:bb:d3:e1:
                    58:b0:0e:cf:14:37:36:63:76:4e:c8:88:70:91:27:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:71:77:C5:8E:F0:19:F4:CE:59:C8:3C:88:47:A9:56:13:CD:EA
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BiVxd8WO8Bn0zlnIPIhHqVYTzeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.162.0/24
                IPv6:
                  2a00:4120:8000:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:2c:57:97:22:d6:33:b0:a7:7b:ef:a9:98:f7:0b:10:e4:
         15:ec:f6:36:55:97:20:a6:0e:f1:21:dd:8c:be:66:a0:0a:07:
         92:af:9c:7c:90:c7:03:0f:3a:c6:55:ce:e6:2f:45:c5:6f:40:
         7c:60:1a:b3:29:1d:f3:77:15:c3:a2:69:6f:b8:f9:04:68:64:
         8e:7f:50:fa:c3:88:f2:66:21:bd:5f:01:8f:f0:07:9c:d3:18:
         81:2d:2c:fa:90:33:b0:be:01:0a:fe:ec:a0:4a:50:68:7c:1a:
         18:4f:8c:50:60:d0:f1:f1:cd:2e:1e:df:f3:1b:72:8b:ec:00:
         26:93:43:27:7d:fa:0e:9a:63:44:04:74:c8:48:bf:d6:86:90:
         c7:cd:5c:21:3a:b3:48:a5:35:5b:03:bb:c4:cb:b4:ba:b6:a5:
         96:1b:01:e4:45:2f:5a:3d:ca:9c:d1:66:2d:1e:8b:44:87:f1:
         41:3b:90:e2:b9:96:ba:98:40:75:cc:f6:c2:da:7e:be:39:97:
         db:74:de:a4:39:13:e2:94:72:cc:13:bd:ba:63:46:23:74:e6:
         07:93:85:13:41:52:e4:77:59:e4:e0:58:d4:01:1e:95:37:43:
         53:aa:5f:50:16:5c:e5:48:84:9e:68:21:69:42:4e:38:f0:b5:
         08:8a:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----