Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/bu9FN8NhLjvYCjSxNeLuzyuLuok.roa
File:                     bu9FN8NhLjvYCjSxNeLuzyuLuok.roa (raw, json)
Hash identifier:          27ao0FqcwJzYoDog88Ox5sDL2yjFjNk9x5m1U4384SQ=
Subject key identifier:   6E:EF:45:37:C3:61:2E:3B:D8:0A:34:B1:35:E2:EE:CF:2B:8B:BA:89
Certificate issuer:       /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial:       01856FA71E2C4F6C09889586853328B106D4
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/bu9FN8NhLjvYCjSxNeLuzyuLuok.roa
Signing time:             Sun 01 Jan 2023 23:25:01 +0000
ROA not before:           Sun 01 Jan 2023 23:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29422
IP address blocks:        185.196.232.0/22 maxlen: 22
                          2a0a:73c0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:1e:2c:4f:6c:09:88:95:86:85:33:28:b1:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
        Validity
            Not Before: Jan  1 23:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6eef4537c3612e3bd80a34b135e2eecf2b8bba89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:83:aa:cb:3a:da:00:41:25:1c:39:9b:9a:
                    2f:d1:fd:59:c6:05:2b:ad:58:30:ca:92:b1:3e:ac:
                    0f:db:dc:c9:74:da:59:39:27:ae:a6:ec:0e:da:4e:
                    85:b6:fd:ea:d6:23:2f:db:fb:e5:37:ab:de:24:6a:
                    2c:09:18:e6:f7:80:54:c0:c4:1f:9c:5f:5b:79:46:
                    ca:db:bc:84:a1:dd:5f:9e:40:f6:dc:44:ce:d3:05:
                    9b:48:e4:73:43:c1:fd:4c:27:77:87:c4:0f:ab:91:
                    99:b4:39:99:0b:48:0f:89:90:3e:93:17:6e:e9:63:
                    7f:42:9f:98:f4:92:9d:ce:bf:ff:b1:8d:e2:85:21:
                    13:99:ff:1a:92:63:fe:c9:b2:80:d7:ff:a5:35:58:
                    a5:c4:40:3d:dd:33:83:6c:9e:0b:42:6a:8d:47:5a:
                    b4:e1:5e:00:5e:97:41:d3:a3:16:4f:a7:d5:63:1d:
                    3c:10:2f:fb:f7:66:16:11:55:f2:13:b3:fd:b8:fc:
                    da:5d:3c:c7:79:c6:2b:d7:ea:73:5d:2f:e5:0b:8f:
                    d5:93:f0:d3:fe:25:80:62:09:ad:c8:62:d2:32:9f:
                    0a:9b:41:d8:b8:e2:62:df:9f:8a:e3:e3:b4:6d:43:
                    a3:04:17:e5:fa:6d:74:ea:c2:c0:52:13:15:b2:fe:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:45:37:C3:61:2E:3B:D8:0A:34:B1:35:E2:EE:CF:2B:8B:BA:89
            X509v3 Authority Key Identifier:
                keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/bu9FN8NhLjvYCjSxNeLuzyuLuok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.232.0/22
                IPv6:
                  2a0a:73c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:31:b4:53:44:be:42:07:ab:ea:3b:10:2c:e0:65:4d:76:
         b4:52:bf:dc:09:10:d3:a9:b0:2e:11:15:57:0f:82:fc:92:4e:
         58:04:aa:7e:04:f3:1f:b5:9a:66:62:d7:1e:a4:1e:7b:e4:7c:
         ef:84:80:07:58:a1:41:8c:56:83:80:55:24:eb:ff:8a:23:b0:
         5b:15:d7:e0:fc:c7:ba:db:fc:4f:8e:72:6e:89:4c:67:96:50:
         d7:b9:04:5f:9d:47:bf:f6:b0:16:d3:54:d4:ae:b9:22:30:d0:
         c9:2e:1e:8c:6d:68:d4:62:d8:48:15:7c:c8:fd:de:cd:65:3e:
         05:6f:9a:5a:a9:bf:d0:2a:49:05:17:18:3e:e3:b6:d2:ce:c2:
         ac:e6:d5:b3:a5:c4:1b:19:17:cb:e5:d5:89:3d:a7:d2:f3:2c:
         e5:0c:66:3d:ed:1f:be:d7:76:ee:c5:d6:d0:88:57:93:2b:96:
         2d:8e:bb:53:3e:dd:73:41:7d:85:7f:df:80:e1:44:5c:06:0f:
         81:b7:db:fb:e4:1d:14:3b:3f:10:cc:26:e6:8d:1f:28:62:74:
         75:e6:1c:3f:b7:65:ba:d0:82:60:0f:b0:f9:70:18:4b:00:44:
         7d:45:73:12:d4:04:33:3b:0a:58:64:46:d7:67:0a:76:06:17:
         2f:b1:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----