Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/yp1xL72lhNvuXzSq-D6NRRI9olI.roa
File:                     yp1xL72lhNvuXzSq-D6NRRI9olI.roa (raw, json)
Hash identifier:          +bDuVkA1ajSJlnCUK33cvHuENuZvr/QBy3w8VC2Sxe0=
Subject key identifier:   CA:9D:71:2F:BD:A5:84:DB:EE:5F:34:AA:F8:3E:8D:45:12:3D:A2:52
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       01856CC17A39959A3F828BA3A1EB48407BA3
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/yp1xL72lhNvuXzSq-D6NRRI9olI.roa
Signing time:             Sun 01 Jan 2023 09:54:57 +0000
ROA not before:           Sun 01 Jan 2023 09:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31108
IP address blocks:        88.221.82.0/24 maxlen: 24
                          2a02:26f0:1c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:c1:7a:39:95:9a:3f:82:8b:a3:a1:eb:48:40:7b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  1 09:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca9d712fbda584dbee5f34aaf83e8d45123da252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:1e:9b:a4:ee:fc:2a:d3:02:40:39:8d:25:
                    c7:19:cc:fa:3a:b7:9f:dc:76:67:14:1d:b3:d2:2b:
                    6f:a9:2c:f8:96:39:c1:db:da:64:86:e4:42:09:24:
                    e3:a9:d2:91:b7:44:e9:55:b2:90:0d:a7:51:29:8d:
                    ba:d3:7f:4c:33:af:0e:d6:d1:84:62:fe:b2:39:24:
                    7f:57:de:26:e1:05:cf:a4:7e:2d:12:39:ad:68:d9:
                    cb:c3:c1:ba:83:66:75:ea:df:e5:d1:43:b6:f7:cb:
                    32:06:bd:88:82:fc:1f:dc:6d:d1:29:95:89:70:4b:
                    01:64:ff:20:b0:e8:13:ef:42:25:16:d5:0d:ae:38:
                    eb:5e:a4:13:30:42:3e:51:93:dc:5f:35:d1:fc:ab:
                    b0:95:b1:67:3f:10:95:6b:e9:2e:7c:31:ea:73:9c:
                    1f:db:ad:cd:9a:1a:e6:48:9b:f3:cb:83:cb:26:3e:
                    b7:ac:b2:1f:94:5f:d3:41:92:e6:c5:92:5e:79:45:
                    85:13:f6:16:a0:54:b2:d5:13:ec:a3:26:53:08:e1:
                    57:37:8b:ed:c2:fe:4a:19:42:3e:c9:7f:3c:cc:f3:
                    73:92:ef:dc:43:c7:d8:a1:13:c6:38:c2:62:2e:c8:
                    62:a0:13:4d:e4:56:9d:a3:e4:5a:93:24:ca:09:62:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:71:2F:BD:A5:84:DB:EE:5F:34:AA:F8:3E:8D:45:12:3D:A2:52
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/yp1xL72lhNvuXzSq-D6NRRI9olI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.221.82.0/24
                IPv6:
                  2a02:26f0:1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:95:eb:7c:70:52:c1:9b:5a:34:66:cd:88:90:ee:e9:fa:d8:
         66:04:14:04:3b:0b:b0:b9:c3:eb:03:a8:e5:3e:fc:84:6a:c9:
         95:3d:2f:45:57:f4:63:54:a4:b8:db:bb:8a:19:d6:cd:50:49:
         ce:77:cf:d4:1c:10:a6:95:ec:e5:fd:0e:23:7d:c2:03:18:6c:
         08:15:3e:65:58:ae:b3:bc:03:4f:b3:f0:14:74:d6:8b:de:53:
         ba:0e:e7:db:ec:70:b2:1b:6a:15:16:9f:29:6f:28:7f:0f:36:
         03:c5:d5:07:13:83:3d:1b:06:1d:3c:d0:9c:e3:96:4a:ac:a6:
         a4:20:84:87:5d:2d:fc:fc:71:dc:ad:a0:5a:70:12:0c:86:48:
         45:6c:1c:19:a4:a3:da:5f:07:08:d1:48:89:e8:01:4e:d2:54:
         6d:68:6d:01:16:56:15:66:74:13:fd:1d:85:b2:19:60:4f:83:
         3a:a1:4e:97:01:14:f1:43:63:6c:c5:4a:da:f3:eb:7a:ae:57:
         13:96:e5:75:8e:5b:cf:a9:a6:14:95:d1:8b:f4:c4:8a:89:00:
         2f:cc:b8:21:6c:3c:2b:81:e8:3a:b4:72:5a:f7:e9:11:d1:66:
         3b:4f:20:57:c2:60:e6:8e:59:87:e2:fd:a1:2e:aa:0e:ff:ef:
         84:fa:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----