Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa
File:                     4J4FAysrWSZFyn2iKsQgrQL3-EI.roa (raw, json)
Hash identifier:          WEm7sCubY4PaoJXh0F8hvfXq1DA9um5jfmT3gtRTL3k=
Subject key identifier:   E0:9E:05:03:2B:2B:59:26:45:CA:7D:A2:2A:C4:20:AD:02:F7:F8:42
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       018570C2C5CD9E6E398E4AD00F74ABB42459
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa
Signing time:             Mon 02 Jan 2023 04:34:50 +0000
ROA not before:           Mon 02 Jan 2023 04:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     196948
IP address blocks:        193.105.155.0/24 maxlen: 24
                          2001:67c:2980::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:c2:c5:cd:9e:6e:39:8e:4a:d0:0f:74:ab:b4:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Jan  2 04:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e09e05032b2b592645ca7da22ac420ad02f7f842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:19:3c:ae:de:fd:36:82:42:35:63:d4:95:
                    6a:33:34:cc:8b:42:99:72:8f:19:a4:ba:84:e6:3e:
                    93:b5:c1:d1:18:43:ab:72:f2:5e:cd:80:cb:80:5e:
                    88:8a:af:4f:69:67:38:fd:6d:d8:79:9c:ef:f7:56:
                    5a:bb:24:81:bf:c5:78:d0:7b:4f:e5:08:65:f8:8a:
                    b2:0a:f4:9f:84:33:cf:48:49:42:dd:46:a3:cc:57:
                    b2:20:54:98:2a:ca:da:92:d4:0b:6c:a8:56:7e:9e:
                    c9:c9:75:98:6a:d6:57:a1:09:a6:78:7d:5b:66:9e:
                    fe:e8:9d:0b:e8:2d:46:af:24:fc:bc:ee:8a:42:5e:
                    7a:4b:0d:30:94:99:a8:92:dd:9e:a4:0a:af:6c:e9:
                    be:f0:78:65:31:ee:d6:83:39:76:6c:27:f3:14:af:
                    15:bd:c3:a5:bb:cd:5f:bc:d9:dc:f1:97:8c:d4:1c:
                    7f:e4:5e:d3:34:84:d7:60:a4:b4:e6:b3:24:42:c6:
                    3c:9b:06:df:3a:d6:bd:54:fe:b5:fe:6b:ac:aa:e6:
                    44:fb:5f:ab:12:18:90:b5:f6:bb:fa:20:eb:85:3b:
                    cb:54:19:e8:38:60:2e:63:30:da:ee:b8:25:aa:97:
                    47:7a:72:6d:0c:1c:0b:4c:91:09:0f:b1:73:de:de:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9E:05:03:2B:2B:59:26:45:CA:7D:A2:2A:C4:20:AD:02:F7:F8:42
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/4J4FAysrWSZFyn2iKsQgrQL3-EI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.155.0/24
                IPv6:
                  2001:67c:2980::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:92:3d:1f:e1:14:1d:0c:24:c4:d3:55:19:be:06:7d:1a:
         96:06:22:a7:d9:ca:b1:dd:15:e2:16:af:dd:57:a1:7f:88:9c:
         fa:e4:c9:39:16:e1:54:dc:1d:d1:76:2a:dd:4b:64:79:6e:ab:
         d7:2f:e1:08:fb:da:ba:d1:e8:60:81:75:6c:55:c9:59:90:da:
         2f:de:21:ef:7b:52:3a:98:3f:dc:14:ea:af:47:1a:e6:b9:dd:
         ad:eb:d7:e9:9a:11:6f:a9:07:08:06:3a:c1:81:84:f8:44:15:
         7d:19:96:46:92:d4:8c:68:82:61:0a:d8:db:12:3c:23:41:83:
         98:d8:d4:2e:06:76:4f:79:6f:d4:dc:16:8e:f4:a1:d2:49:f0:
         38:7b:63:31:88:28:a8:44:41:10:07:b2:1a:0f:d2:98:a4:60:
         e3:23:08:74:4e:ef:f0:10:51:d7:2a:c0:c0:2b:94:c8:99:43:
         09:c0:67:cd:89:54:c6:1c:ea:75:21:b8:d7:01:a5:87:d2:87:
         6d:42:cb:2b:ef:65:5f:5b:1d:00:68:5c:f8:c5:d1:7b:21:95:
         2b:12:10:89:94:25:d8:66:ad:66:87:eb:11:26:df:68:b9:d5:
         1d:1d:ab:81:b1:d9:5a:8c:45:31:c9:f5:a4:0f:95:fc:24:c2:
         60:31:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----