Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa
File:                     cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa (raw, json)
Hash identifier:          QTexiThjroj8Q7+rR+nGN5v5qJ4TroTC0jrKdZW8AeQ=
Subject key identifier:   71:30:BE:ED:72:DE:CB:44:C5:5D:AE:0D:67:92:43:31:B1:C1:F9:42
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       0185727A2A5B07433D899E5954D024B3EEC9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa
Signing time:             Mon 02 Jan 2023 12:34:46 +0000
ROA not before:           Mon 02 Jan 2023 12:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        82.115.0.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:7a:2a:5b:07:43:3d:89:9e:59:54:d0:24:b3:ee:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  2 12:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7130beed72decb44c55dae0d67924331b1c1f942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:27:f6:b7:61:30:b9:06:33:95:85:5d:75:
                    87:4c:3d:80:f4:47:15:86:a4:af:5f:47:cb:d2:d8:
                    97:07:1c:c8:28:02:e0:d2:ee:78:8e:ca:39:2d:d0:
                    8f:af:f0:2b:86:55:1b:d9:a3:a9:c5:71:72:a0:74:
                    23:17:2d:78:e8:33:87:a1:8e:58:df:96:c8:0d:eb:
                    68:30:a6:84:ab:b1:23:b8:cb:bd:b2:46:fa:36:17:
                    0a:0f:eb:b1:1e:5e:ee:db:9a:1b:d3:c4:1a:d2:3d:
                    c2:5a:93:d9:6c:6b:4a:87:69:7d:1a:f4:cd:dc:e0:
                    04:1b:b7:69:d2:07:cf:24:43:98:a1:2d:45:f3:c3:
                    f1:13:b0:11:00:8d:58:d5:10:c5:dd:de:bc:29:ba:
                    14:7b:2f:5e:75:b4:93:45:96:df:54:63:52:67:a1:
                    11:eb:ed:8f:de:bc:0d:93:8b:52:61:10:77:8b:36:
                    7d:54:90:68:0a:79:25:ac:e6:21:dd:d9:9f:b9:e1:
                    64:6b:cb:2f:ed:55:80:c3:5c:fa:b0:b5:12:82:34:
                    53:3f:6f:cc:a9:47:b5:55:1b:98:16:c6:8c:a2:d1:
                    5f:5b:69:c3:a1:13:1b:a9:8b:b5:89:2b:a5:98:23:
                    ef:15:d8:3c:90:82:5d:bd:c7:cb:5c:93:86:ff:a9:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:BE:ED:72:DE:CB:44:C5:5D:AE:0D:67:92:43:31:B1:C1:F9:42
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cTC-7XLey0TFXa4NZ5JDMbHB-UI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.115.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:9c:b5:ab:0f:77:57:eb:f3:29:8d:c1:63:10:88:30:ab:78:
         c8:f2:0b:4d:3e:3f:4f:14:6b:da:d8:d1:f7:ca:f8:94:cf:c6:
         c9:d9:cd:63:7a:0c:59:b8:dc:92:2c:e2:89:69:f5:ee:94:3a:
         1b:99:a6:e5:aa:d6:a4:f6:a9:86:58:e7:00:7d:7d:70:8a:e7:
         64:c7:3f:6f:54:94:71:6c:0d:98:fd:50:86:d0:78:2f:47:89:
         95:2c:f2:8a:cc:e4:18:13:37:96:17:b2:20:a6:34:5b:c5:40:
         7b:33:d9:da:43:d8:f7:d0:28:de:58:ee:a3:82:68:4a:5d:45:
         f6:49:5d:6d:bf:eb:a0:6f:73:27:5b:32:cc:45:06:ed:72:97:
         8d:46:79:4f:43:ec:b0:9e:03:da:aa:54:da:bb:c0:6a:c9:8d:
         68:d9:72:3e:e6:8d:b0:fa:8d:3d:00:09:ab:8d:d4:70:c2:97:
         95:f0:bc:d5:0f:2b:65:62:4c:85:69:d6:78:da:56:26:74:35:
         95:e4:e9:7a:a7:f5:d7:3f:1a:03:8e:05:92:60:d4:03:ab:91:
         b9:53:0b:74:ad:d7:61:5d:1b:d9:c9:f4:41:47:a6:a9:47:d4:
         6f:8e:64:7b:d6:62:3e:e6:70:47:18:a5:5d:6f:b0:b5:1b:9b:
         1b:9b:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----