Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa
File:                     NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa (raw, json)
Hash identifier:          yzRLzNBvby6NiQpcZIjNWd4C3oDIenAMLtbYrj+AHQE=
Subject key identifier:   35:A3:8F:09:51:16:B5:23:70:3E:74:FB:04:C2:C5:7E:92:F0:91:F1
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       0185704BC14551C32FB7E10B849BA0F392D1
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa
Signing time:             Mon 02 Jan 2023 02:24:50 +0000
ROA not before:           Mon 02 Jan 2023 02:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50265
IP address blocks:        91.233.88.0/24 maxlen: 24
                          193.106.68.0/22 maxlen: 24
                          2a00:46e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:4b:c1:45:51:c3:2f:b7:e1:0b:84:9b:a0:f3:92:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Jan  2 02:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=35a38f095116b523703e74fb04c2c57e92f091f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e6:c5:16:0c:e5:77:06:3f:e0:e9:0c:d7:54:
                    dc:75:49:2b:d6:68:cc:5c:0e:eb:ed:88:31:e3:c4:
                    18:2b:5b:11:60:4f:86:24:81:12:fb:e8:f7:2f:07:
                    62:a4:a4:e0:e8:1c:25:7d:38:c5:d6:be:c7:21:dc:
                    ca:be:6d:a4:b3:67:fd:37:db:9e:34:bc:22:05:50:
                    94:0d:bb:57:01:ba:73:3c:9d:86:9b:c5:38:da:18:
                    0a:db:ce:51:22:d7:6a:68:29:4a:18:52:47:0b:ee:
                    86:67:61:85:3b:23:26:01:80:59:18:4d:f7:4a:b0:
                    46:8b:bf:3d:fe:4a:26:5f:6a:84:fe:f4:f9:c6:db:
                    09:57:0d:fc:6d:71:44:27:a8:d8:30:78:eb:52:9a:
                    62:2a:c3:5b:7f:51:ca:7b:c9:95:6e:40:2b:be:c4:
                    f7:16:b8:9c:2c:75:30:1e:9d:e9:42:24:ac:68:13:
                    70:74:0f:46:d5:6f:57:3a:e3:9f:6d:b1:e7:1e:23:
                    73:60:18:8c:2b:6d:c2:7a:71:89:62:61:94:ec:37:
                    3a:c5:d4:6e:5d:f1:75:2c:ea:07:c4:d8:8a:79:18:
                    a2:36:47:e7:96:09:4d:d4:58:3a:f8:96:72:4a:d8:
                    5a:00:7f:ae:05:12:7c:f7:1b:38:a6:63:bc:9a:6a:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:8F:09:51:16:B5:23:70:3E:74:FB:04:C2:C5:7E:92:F0:91:F1
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/NaOPCVEWtSNwPnT7BMLFfpLwkfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.88.0/24
                  193.106.68.0/22
                IPv6:
                  2a00:46e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:96:1a:7a:8e:dc:d4:a8:3f:55:38:8c:93:7c:49:4a:58:4f:
         4d:f3:99:2d:12:a3:03:1c:21:20:bd:4e:d8:2a:6f:ed:5e:7f:
         6b:9e:35:76:79:46:25:52:48:65:90:26:72:ad:30:92:f4:e2:
         ee:f4:f1:35:18:ab:c2:a7:48:4d:65:56:83:ec:c7:e0:ff:6a:
         cf:16:7d:ab:e0:e5:19:4e:a6:3d:90:9b:25:d9:51:4b:ef:61:
         ae:0d:4b:1c:08:be:89:e7:d9:be:ba:03:1c:ea:ce:e7:07:ea:
         bc:cb:d7:f9:40:e0:32:b8:89:9f:b5:1e:81:d6:e8:54:72:1e:
         75:1b:d6:1a:62:0c:f9:8c:ca:17:0a:c1:08:67:2a:2a:03:73:
         ed:8a:b5:c1:7e:a4:58:a6:3c:b9:45:47:f6:53:95:e2:3a:49:
         68:8a:3e:d8:64:32:40:a6:49:b5:12:33:20:5f:2b:ba:dd:4b:
         d2:95:7d:ac:d8:a5:ee:27:88:a2:f4:b3:3b:90:cb:5c:ac:f2:
         45:dc:dd:76:be:fa:f6:f7:c2:c8:cd:90:6e:09:74:c4:84:f4:
         89:c5:a6:3c:e8:7c:5e:1e:f4:29:56:eb:7d:66:21:af:94:18:
         2c:7c:b0:0e:08:c1:ea:ee:a1:a1:6b:b5:a2:9f:3b:e7:d3:39:
         af:4c:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----