Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa
File:                     XJYiyagAe7-gE2-J9U9XXpQwyiA.roa (raw, json)
Hash identifier:          Cx1Y0/oQNuLFhS9td11QKHXxhLGsorWJz86guLfLGy4=
Subject key identifier:   5C:96:22:C9:A8:00:7B:BF:A0:13:6F:89:F5:4F:57:5E:94:30:CA:20
Certificate issuer:       /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial:       0186F088924A7BFA87B0D4220AD3C4343321
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa
Signing time:             Fri 17 Mar 2023 17:05:27 +0000
ROA not before:           Fri 17 Mar 2023 17:05:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        194.50.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f0:88:92:4a:7b:fa:87:b0:d4:22:0a:d3:c4:34:33:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
        Validity
            Not Before: Mar 17 17:05:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c9622c9a8007bbfa0136f89f54f575e9430ca20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:1a:7b:53:bc:b1:42:e1:e4:4a:2a:4e:eb:
                    fb:a1:98:08:9c:05:ba:95:24:31:a3:76:b2:a5:c6:
                    dd:2e:8f:88:c3:02:79:99:0c:45:0d:3c:a6:ef:92:
                    6e:27:de:9d:51:27:51:21:05:9c:93:76:d3:b3:82:
                    44:f4:57:be:7c:20:11:53:bc:3d:d7:f9:38:05:40:
                    3c:ca:d8:05:53:50:76:31:46:2a:42:fb:31:cd:12:
                    6d:fb:5a:d3:5f:e3:c4:f3:33:1b:8e:b4:61:96:9c:
                    1e:80:cd:e8:0e:ba:30:12:71:fc:9b:e7:ba:e9:f2:
                    00:4d:ce:26:ab:59:21:a0:a4:ee:94:f0:6d:8b:f0:
                    c9:f6:2f:99:b7:fc:ea:93:ac:65:98:68:be:ed:6f:
                    ee:23:e6:39:be:6e:75:5e:2c:8c:5e:fa:d0:38:7a:
                    60:89:db:68:fd:c8:1f:8f:3e:54:ea:cf:d9:24:fe:
                    1d:e4:ab:fd:89:71:97:39:a3:1b:cb:af:fd:2a:58:
                    3e:87:51:ba:09:13:a3:4b:b5:5a:dd:26:90:0a:e8:
                    8a:87:02:ec:24:6f:d1:67:d9:19:05:43:d9:4c:62:
                    b3:ac:8d:49:e5:22:e4:91:8a:00:ca:4c:41:e5:9e:
                    e7:dc:d2:9c:5a:01:48:9c:4c:21:1b:30:f4:90:5f:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:22:C9:A8:00:7B:BF:A0:13:6F:89:F5:4F:57:5E:94:30:CA:20
            X509v3 Authority Key Identifier:
                keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/XJYiyagAe7-gE2-J9U9XXpQwyiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:0b:7b:e3:54:a4:26:46:2f:58:b1:01:06:22:1b:f5:1c:
         09:39:be:c6:f7:6e:68:71:5d:19:08:29:3e:5e:4d:3b:ff:15:
         ed:cd:c4:56:ff:b2:5d:b9:d7:01:3f:1a:1b:ac:20:3a:a3:b9:
         3b:75:dd:2b:2e:7f:50:03:bc:11:09:ac:b6:b6:13:cc:28:0f:
         99:12:9f:17:ec:78:19:bf:ab:c3:92:6c:96:22:8d:e7:cf:64:
         7d:db:9d:17:58:03:c9:7d:87:8c:30:55:af:c6:d4:39:d7:4a:
         e8:e8:61:d6:dc:d4:5d:e6:79:4f:ef:b4:20:3e:9b:b2:b3:36:
         42:7e:c1:22:1e:6b:84:e2:da:55:36:a2:6c:18:62:18:d4:8b:
         66:87:70:a8:0b:ef:3f:eb:58:2d:f1:6b:b4:3f:dd:5c:76:6d:
         9d:50:12:fe:b8:2a:8f:2f:73:ed:23:21:1c:c3:07:25:0c:28:
         a6:76:bd:f7:b7:f8:aa:fd:6b:ed:0d:ca:84:37:2c:b1:38:6f:
         45:89:3c:80:e0:8d:53:07:47:cf:a4:cf:35:bf:dc:f0:7d:d2:
         b0:f9:95:47:e7:32:94:57:40:a8:0a:99:1e:22:a5:79:53:fc:
         1d:92:4c:04:8b:f2:b4:86:66:ff:48:a7:08:06:48:ca:1b:c7:
         73:8b:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----