Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa
File:                     np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa (raw, json)
Hash identifier:          Q7vXfZuU3YredmzRXIR+U+Lift7OeZAYkPcO+IwFvX8=
Subject key identifier:   9E:9F:82:C6:3D:1E:C4:06:32:62:5C:39:BD:8B:7F:A5:F8:E1:03:56
Certificate issuer:       /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial:       01857079A80E05C81B9DEC7FA0C26DEFF145
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa
Signing time:             Mon 02 Jan 2023 03:14:59 +0000
ROA not before:           Mon 02 Jan 2023 03:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58138
IP address blocks:        185.43.80.0/22 maxlen: 24
                          91.239.32.0/23 maxlen: 24
                          2a04:9040::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:a8:0e:05:c8:1b:9d:ec:7f:a0:c2:6d:ef:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
        Validity
            Not Before: Jan  2 03:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e9f82c63d1ec40632625c39bd8b7fa5f8e10356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fe:10:17:44:b4:16:c6:fa:f7:03:ef:2b:ae:
                    e9:d3:e7:5d:80:28:ba:0d:fd:c6:38:ae:ea:6b:8c:
                    4c:b2:79:c5:ee:8d:97:fc:4a:6d:bf:25:13:16:b5:
                    66:59:30:69:d9:cc:df:5b:74:76:ab:e5:69:d8:57:
                    b2:c5:c1:fa:07:31:9b:1e:b7:19:17:0b:c2:ae:fd:
                    b8:e8:10:73:76:21:2e:7e:86:b5:6d:b6:95:65:d2:
                    e0:ab:85:21:9c:1c:a2:05:c8:33:15:d3:30:e0:c2:
                    da:a2:ce:a5:7d:f2:e5:70:66:c3:56:dd:6c:ec:bb:
                    28:1c:8a:12:f7:0f:77:88:af:95:88:8c:bc:1e:09:
                    d5:bb:01:43:75:c3:ea:4b:11:20:8c:9a:34:82:29:
                    16:0f:72:14:fa:93:d1:3a:c6:e2:63:67:fc:cb:34:
                    af:a9:f0:d1:85:f6:af:30:51:20:66:fb:b2:c2:87:
                    7b:2a:63:77:c6:db:cd:0a:f5:c9:68:27:d0:ac:64:
                    58:ed:83:00:e5:3e:c1:48:d2:ed:4d:13:ff:da:ed:
                    7e:9b:55:dd:26:a9:34:99:ab:d1:47:ac:6f:10:d0:
                    59:32:3a:ca:1b:fe:a8:46:0e:b4:53:b9:f0:da:35:
                    d5:22:64:3c:0b:f2:cb:77:9c:1e:87:5e:c2:51:05:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9F:82:C6:3D:1E:C4:06:32:62:5C:39:BD:8B:7F:A5:F8:E1:03:56
            X509v3 Authority Key Identifier:
                keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.32.0/23
                  185.43.80.0/22
                IPv6:
                  2a04:9040::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:fb:d7:c0:6d:4b:19:1d:c3:05:1f:a4:5c:d5:b3:29:aa:
         ee:ee:2e:a6:38:cd:fd:e9:ae:c5:ae:61:a5:f7:7b:24:77:7c:
         06:e5:ff:f9:6a:e5:0f:dd:5c:61:4e:a9:70:a3:ab:13:56:25:
         d6:49:f0:c4:32:72:23:61:0c:20:87:9a:aa:38:e5:4a:f8:39:
         f8:3d:5a:54:4e:1d:c7:e8:15:d8:95:36:5f:ac:48:c2:47:34:
         7a:12:53:75:1a:66:da:0d:8a:13:9b:21:21:76:cc:0b:65:31:
         38:bc:97:e3:f2:f8:f2:2d:05:58:a1:e5:dd:d5:75:c8:45:37:
         5d:96:81:ef:d8:6d:3d:f3:0e:6b:38:30:cc:cf:f5:e6:74:d1:
         d7:f9:82:6e:52:3d:57:bf:fb:d0:eb:e7:6d:78:ce:0b:ee:29:
         3d:9a:10:9a:82:8e:50:56:03:df:70:03:50:cd:d4:e9:d5:73:
         92:3d:19:20:82:96:f1:2c:21:62:b6:34:c6:33:28:aa:4b:e4:
         1e:62:b1:c3:81:89:c6:78:a2:b1:88:cf:77:a7:13:2e:62:65:
         3d:54:51:95:db:cc:ca:68:76:cb:09:24:7b:3f:58:4f:dc:2a:
         39:9d:7b:17:ad:ca:15:57:48:31:e5:8c:dd:c2:14:34:94:ed:
         2a:79:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----