Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/YfUdBPSQY5QDpTezHp95HwQnyqo.roa
File:                     YfUdBPSQY5QDpTezHp95HwQnyqo.roa (raw, json)
Hash identifier:          wSr6AOM35Iea5lwOILIiZyEoy2YlsMrZe1j2UuXntXc=
Subject key identifier:   61:F5:1D:04:F4:90:63:94:03:A5:37:B3:1E:9F:79:1F:04:27:CA:AA
Certificate issuer:       /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Certificate serial:       01856E01EACC44A9015202AD877F5B29BDAD
Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/YfUdBPSQY5QDpTezHp95HwQnyqo.roa
Signing time:             Sun 01 Jan 2023 15:44:57 +0000
ROA not before:           Sun 01 Jan 2023 15:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213150
IP address blocks:        185.216.11.0/24 maxlen: 24
                          2a07:e940::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:ea:cc:44:a9:01:52:02:ad:87:7f:5b:29:bd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
        Validity
            Not Before: Jan  1 15:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=61f51d04f490639403a537b31e9f791f0427caaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:b6:13:3d:0a:0a:38:2f:68:46:86:e5:95:
                    7e:8a:1f:a0:b2:ff:e7:a3:53:83:4d:1a:2e:a3:e8:
                    88:34:f3:09:37:c6:0b:f5:41:99:d1:4d:2c:72:16:
                    ec:57:be:cf:61:5b:6f:cc:da:e6:6c:47:14:de:5f:
                    d2:27:0a:0a:15:35:14:53:a2:8a:0b:41:dc:2a:71:
                    fe:63:61:a9:12:5d:5e:dd:9e:67:7d:7c:ed:2c:d0:
                    58:e6:04:dc:fb:15:dd:4c:f4:54:18:d2:22:d7:39:
                    c2:c8:09:0b:d2:75:04:1e:58:4c:4c:07:97:9b:89:
                    77:d1:0e:46:17:14:ef:af:78:2c:2c:dd:10:98:cc:
                    df:e4:f0:e0:36:51:f3:9b:b5:56:b3:ef:17:ac:96:
                    4d:f0:ed:22:1e:26:2c:01:7f:5f:d7:6b:ae:c1:c4:
                    d2:e6:d6:67:06:d6:71:c1:05:f5:64:12:56:3f:a0:
                    b3:3b:cf:aa:86:d0:fa:ea:b2:c3:37:c4:07:bb:67:
                    c3:c5:cc:8e:a1:66:85:f8:f4:40:e4:0c:3a:ef:cb:
                    5c:a9:71:ee:69:10:3c:80:9b:46:de:fb:33:75:67:
                    87:30:98:cd:77:23:19:00:cd:c8:58:64:06:e4:31:
                    6f:6f:ac:8b:28:c9:3a:81:a6:af:11:82:b4:55:78:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F5:1D:04:F4:90:63:94:03:A5:37:B3:1E:9F:79:1F:04:27:CA:AA
            X509v3 Authority Key Identifier:
                keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/YfUdBPSQY5QDpTezHp95HwQnyqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.11.0/24
                IPv6:
                  2a07:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:5f:12:76:7a:25:78:37:6a:74:cd:c7:85:7f:05:57:01:
         36:62:f2:8a:55:39:2c:83:89:b1:3a:cd:11:c0:94:15:df:33:
         4f:94:25:16:07:c8:a3:4f:fc:40:04:54:fc:3d:a4:fc:ad:02:
         18:47:9e:b7:f2:c5:2e:db:ec:11:c0:3b:ac:db:f7:6d:45:b4:
         2a:62:c5:74:db:bb:6c:d3:fb:80:f8:4c:54:0a:7a:6b:89:ab:
         f3:4a:81:83:21:85:45:40:7a:77:e6:22:93:20:3a:d9:ef:ed:
         d7:47:65:40:dd:df:10:75:92:d0:50:63:28:71:ff:91:f0:50:
         9b:84:f3:2a:3d:8a:4f:e5:8e:aa:11:c6:92:90:2d:3e:ac:7e:
         0e:e3:64:5c:ea:74:78:61:30:24:ef:77:29:a4:a0:7e:9d:61:
         5a:92:bb:8e:7b:f9:d1:6b:14:fb:d5:47:a2:d9:95:78:75:74:
         5f:77:05:d1:39:35:43:9a:48:ac:bb:9c:d0:e3:95:f7:b7:90:
         06:64:c7:c6:28:34:90:98:39:84:d2:da:0e:d2:a7:34:ed:14:
         56:1f:fa:09:9f:70:39:31:08:cd:55:54:b1:8d:7c:47:a8:77:
         65:a0:cf:b2:ef:92:83:8e:cb:c0:ff:ea:c4:57:b5:28:11:2b:
         33:dd:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----