Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/bFR2UsvQRLBaFGleu7zBh7G5pbc.roa
File:                     bFR2UsvQRLBaFGleu7zBh7G5pbc.roa (raw, json)
Hash identifier:          qyea2ysk+A+6SCVlzsBlssubo85pc/ZYssAvtXD2Qvw=
Subject key identifier:   6C:54:76:52:CB:D0:44:B0:5A:14:69:5E:BB:BC:C1:87:B1:B9:A5:B7
Certificate issuer:       /CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Certificate serial:       0185DB63067828717491EFE32DA90F34620D
Authority key identifier: E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/bFR2UsvQRLBaFGleu7zBh7G5pbc.roa
Signing time:             Sun 22 Jan 2023 21:29:38 +0000
ROA not before:           Sun 22 Jan 2023 21:29:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49080
IP address blocks:        62.233.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:db:63:06:78:28:71:74:91:ef:e3:2d:a9:0f:34:62:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
        Validity
            Not Before: Jan 22 21:29:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c547652cbd044b05a14695ebbbcc187b1b9a5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:22:77:8c:2c:b8:28:5e:0d:9f:e0:e0:26:
                    d8:ed:6c:13:93:68:1d:cb:5c:d2:5d:5f:4f:73:ea:
                    ab:87:4d:1b:e2:e5:c1:e5:25:a4:38:10:88:ff:31:
                    8c:48:03:ff:37:2a:21:e1:14:ac:96:89:69:06:0a:
                    ac:6c:be:55:65:23:22:96:84:90:2d:ff:85:4a:68:
                    c2:f5:c1:02:b5:44:8c:49:64:e6:a7:ac:a3:24:04:
                    f3:54:2d:e0:f8:87:7e:82:12:3f:8a:5b:0e:d4:5e:
                    5b:dd:e2:18:5d:fd:71:d2:ec:43:44:c6:d9:a2:41:
                    6f:71:0a:90:20:fc:53:b8:2b:51:6f:32:c6:ed:ad:
                    25:81:94:1a:de:8f:94:39:15:bd:54:9b:ab:04:95:
                    c7:ae:a1:2e:ac:b0:c4:e8:53:29:80:f9:b3:20:10:
                    1d:1a:8f:d8:09:a9:53:4e:71:4c:24:2b:41:24:6b:
                    18:9b:a1:be:59:43:a9:a3:6b:b6:32:33:91:aa:81:
                    08:8e:9b:5f:ed:02:64:01:e9:35:ee:e2:0f:a1:b4:
                    db:54:06:47:9b:e5:bc:21:f2:26:6d:ba:0f:a5:55:
                    3b:2d:da:0d:d3:7c:83:63:7b:26:0d:fe:4d:b9:de:
                    a5:56:1e:31:d6:31:45:12:9b:2e:a1:3e:de:a8:66:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:54:76:52:CB:D0:44:B0:5A:14:69:5E:BB:BC:C1:87:B1:B9:A5:B7
            X509v3 Authority Key Identifier:
                keyid:E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/bFR2UsvQRLBaFGleu7zBh7G5pbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:28:0a:ab:91:2d:89:e6:cc:b0:99:2f:5c:4a:38:2a:85:89:
         1f:06:42:2f:50:84:0b:a6:8d:e3:a9:56:c6:31:50:37:53:13:
         7d:13:e5:46:b4:10:d5:76:90:82:a8:4b:42:94:e4:db:72:a5:
         9c:3e:01:e1:c7:e4:d8:30:d7:3a:e9:b3:a8:08:ab:39:fd:99:
         99:de:e7:68:d7:b2:5e:93:bc:c8:9d:fe:0c:ea:a6:3c:1f:c3:
         51:c9:e8:f3:5b:1d:5e:7c:56:91:70:06:10:fc:72:56:e1:32:
         72:e7:e2:5c:06:a0:af:20:b7:00:b7:bc:70:a0:e6:be:54:f6:
         6a:ed:99:27:82:e7:65:93:f8:3f:36:8c:e5:6f:91:ad:18:e2:
         fb:b9:0e:e2:46:f1:ba:c9:17:3e:f1:65:3d:7e:67:8d:e1:32:
         e3:44:92:8b:2a:79:20:e7:4f:47:21:02:f1:2b:b8:c9:25:5e:
         82:9f:ae:ff:b5:2d:1e:5b:59:48:b4:dd:1f:09:78:14:b0:6b:
         ec:02:65:f5:0b:ba:4c:69:d7:9f:0e:c0:a8:24:0a:e9:1b:c3:
         e4:f4:11:80:f8:1c:b7:b0:51:3b:7b:91:d6:aa:60:c5:f1:94:
         a3:0c:f6:c9:e5:69:69:8a:6d:24:cd:f1:a8:92:95:c5:81:a9:
         5c:ca:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----