Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa
File:                     ZukzDGGMRMVV_OD-A7osWCNwCaw.roa (raw, json)
Hash identifier:          KH4sy7qKAm18LNBaelpjLHlRU/LbKd0ZM9k+QYJqXXo=
Subject key identifier:   66:E9:33:0C:61:8C:44:C5:55:FC:E0:FE:03:BA:2C:58:23:70:09:AC
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       0186C3506D2BFBD79C7EAE8B53AD55AD5E08
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa
Signing time:             Wed 08 Mar 2023 22:21:13 +0000
ROA not before:           Wed 08 Mar 2023 22:21:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200157
IP address blocks:        185.159.190.0/24 maxlen: 24
                          2a12:86c0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c3:50:6d:2b:fb:d7:9c:7e:ae:8b:53:ad:55:ad:5e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Mar  8 22:21:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=66e9330c618c44c555fce0fe03ba2c58237009ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:0b:37:33:05:b0:43:53:1d:64:c0:04:d6:
                    b5:29:41:2c:d3:d9:a1:43:dc:a0:54:e6:6a:94:b6:
                    25:09:b1:4a:d9:19:da:54:09:be:66:a3:24:33:79:
                    78:67:62:5e:cf:71:02:f7:5c:0b:ad:00:7e:ce:14:
                    1e:c7:b5:0c:53:f0:4e:6f:4f:b7:8a:db:3d:c9:f2:
                    d6:8b:65:a9:7d:c8:59:ed:f5:db:fb:7f:a4:e3:f8:
                    04:cd:5d:4f:02:ce:90:ab:a8:d9:74:46:fe:f2:21:
                    7a:64:ed:e4:25:bd:61:34:fa:9e:f5:17:02:d0:30:
                    17:95:47:7f:a5:fc:56:fe:96:19:8e:75:cc:df:22:
                    cd:f4:21:57:af:07:2d:aa:b9:aa:e2:c0:ae:1e:8f:
                    d8:b6:70:f4:1c:04:5f:70:7e:ab:6a:da:2a:29:8a:
                    c4:ef:e3:bb:3f:b9:05:4f:b1:1a:d8:89:2d:a1:57:
                    e2:94:9d:d5:ea:12:84:0d:e8:74:e4:97:71:a6:be:
                    d4:00:ba:90:d0:8a:2b:52:0a:86:c3:eb:58:17:f2:
                    e5:c6:fc:4e:86:d6:c0:1e:74:1b:87:37:0d:6b:71:
                    87:9c:98:7e:73:62:cc:ba:34:2f:b7:e6:a7:f1:f5:
                    ba:b3:d4:e2:b0:28:44:76:bd:f2:1e:e5:97:7a:c3:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:33:0C:61:8C:44:C5:55:FC:E0:FE:03:BA:2C:58:23:70:09:AC
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/ZukzDGGMRMVV_OD-A7osWCNwCaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.190.0/24
                IPv6:
                  2a12:86c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:71:9e:f9:39:fa:5d:52:88:90:06:ab:87:5e:02:02:84:
         94:70:85:66:51:29:21:d2:0f:22:c6:56:98:33:80:fb:5e:53:
         a0:8e:55:59:4d:2d:d4:86:14:82:e1:00:ee:47:9c:83:7f:ab:
         c4:1e:f2:9a:00:9a:ca:28:ed:7c:90:fa:2f:db:59:6c:1f:d0:
         7c:82:4c:d7:00:7f:b5:85:c0:25:12:06:aa:30:10:fa:9f:13:
         f3:61:76:e3:15:74:e3:8e:44:7d:9f:2b:ff:9e:3a:cf:81:98:
         97:1f:d6:fe:ae:79:ca:24:0d:bf:ce:3d:99:f2:ed:28:1f:4c:
         69:e4:81:72:23:ea:8c:31:d5:dd:00:f6:34:0c:83:49:9a:d9:
         ae:3d:58:37:38:1b:b0:4f:bd:3f:ae:1a:4f:87:e7:d5:69:c8:
         c4:fb:b3:f8:74:38:2e:15:8d:ca:32:ae:4b:aa:6c:3b:44:73:
         b7:09:01:95:80:77:91:61:3c:1e:6e:3a:23:43:a7:62:15:40:
         ad:be:4f:f8:c9:a7:bc:56:c0:e6:8f:3f:69:6b:61:84:c4:78:
         84:47:e2:89:65:39:82:64:13:d3:4e:ce:a0:54:f5:88:6a:3e:
         b3:f6:b7:32:a6:ed:df:ba:5e:a6:43:50:cc:27:73:4f:29:f3:
         61:37:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----