Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/kiXnmb9HiF8t03mHEj33XrDkKI8.roa
File:                     kiXnmb9HiF8t03mHEj33XrDkKI8.roa (raw, json)
Hash identifier:          JD+jCtAm96r2yJXiTR1H1dJrMLz7lVcBFt2amzs849c=
Subject key identifier:   92:25:E7:99:BF:47:88:5F:2D:D3:79:87:12:3D:F7:5E:B0:E4:28:8F
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       01874BC241D77D7ADFB3A289D169527D29FC
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/kiXnmb9HiF8t03mHEj33XrDkKI8.roa
Signing time:             Tue 04 Apr 2023 10:13:54 +0000
ROA not before:           Tue 04 Apr 2023 10:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203318
IP address blocks:        185.138.80.0/22 maxlen: 24
                          185.214.73.0/24 maxlen: 24
                          2a00:1ac1::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4b:c2:41:d7:7d:7a:df:b3:a2:89:d1:69:52:7d:29:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Apr  4 10:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9225e799bf47885f2dd37987123df75eb0e4288f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:72:da:a1:d7:ce:d0:cf:a8:e2:8d:76:45:
                    74:87:66:78:a4:dc:4a:58:05:63:c1:00:bd:7f:b4:
                    62:be:61:83:27:49:d1:ed:09:d1:82:3e:60:77:1b:
                    51:2a:b3:56:bc:bb:ba:73:c0:8a:92:22:c4:26:e1:
                    ca:d0:fd:5c:87:84:88:9a:7f:9e:67:af:21:4b:e9:
                    9f:73:6b:ca:fb:5f:80:1a:37:36:5f:9e:f9:65:d6:
                    da:8a:6d:ef:66:56:78:51:41:3e:48:88:ff:47:43:
                    56:03:13:fa:af:ec:40:86:d0:24:fd:2b:1d:b4:41:
                    fd:39:0f:12:e7:77:ed:c9:5b:b3:67:66:59:84:a9:
                    18:e4:f9:52:9a:e6:2d:63:55:9f:e0:1d:9d:ec:f3:
                    db:86:a9:2d:bb:96:bf:ee:66:ca:8f:2e:0b:3a:21:
                    9f:5a:af:a7:93:c2:8b:c5:ff:9a:6b:e2:cf:06:7b:
                    7c:71:3f:b2:04:a5:3f:2d:42:48:c9:24:6b:dc:d7:
                    30:da:0e:2a:3a:7f:be:9b:9f:fc:b9:bd:1e:74:a4:
                    8f:ce:02:bf:79:63:d3:40:bb:27:f1:8b:f9:ba:0e:
                    69:0e:65:5a:75:7f:1c:5c:0c:54:73:db:04:7f:8f:
                    e8:85:d2:93:63:c9:f0:06:b8:c0:3f:e5:16:9f:67:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:E7:99:BF:47:88:5F:2D:D3:79:87:12:3D:F7:5E:B0:E4:28:8F
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/kiXnmb9HiF8t03mHEj33XrDkKI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.80.0/22
                  185.214.73.0/24
                IPv6:
                  2a00:1ac1::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:24:94:a8:53:60:ad:21:8b:b7:a9:d5:30:7d:08:fc:29:a0:
         87:18:95:f3:0e:f5:03:61:32:76:8f:86:a8:2a:37:b0:22:a3:
         c2:68:c7:da:64:3a:54:aa:41:04:1d:88:6a:04:c2:aa:d8:66:
         ac:67:d4:eb:25:d9:f0:f5:fd:52:26:c4:98:96:a0:9a:c2:ae:
         bb:85:59:dd:8c:0a:86:25:80:28:37:a0:ae:9c:54:4c:9a:64:
         1d:14:e0:26:3a:08:e6:77:8c:ea:68:92:3a:32:ec:71:7f:90:
         26:6f:f7:4c:29:c2:eb:ca:91:c9:19:8e:71:cf:df:14:bc:d6:
         38:2d:49:04:b8:d6:73:d6:47:d4:0e:f9:24:ad:70:4b:70:1e:
         dd:c6:38:8a:e2:1e:2e:37:70:ca:fe:61:85:e2:7b:e6:ca:72:
         6e:15:44:0d:3a:4b:b0:e2:e3:44:35:4c:03:a5:ff:2f:3d:9d:
         e7:2b:32:21:f4:0a:0a:45:ca:ed:43:0d:94:fc:0e:aa:ad:fd:
         21:e2:77:8f:48:db:81:cb:d7:21:b6:90:32:19:78:ba:a2:b0:
         93:c4:15:bd:05:30:91:74:95:cc:c4:69:4c:62:c6:e3:84:9b:
         ff:b9:67:44:f6:b7:d9:e1:4f:c9:f9:a9:b4:86:a1:90:1b:b1:
         61:ec:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----