Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uOeo-xHxhrIYjsVeJdNa0YsW-Xg.roa
File:                     uOeo-xHxhrIYjsVeJdNa0YsW-Xg.roa (raw, json)
Hash identifier:          UeMyBaw8aPLlRc4O+FLT5GUncsj5duA2Z7XgSd6+pFk=
Subject key identifier:   B8:E7:A8:FB:11:F1:86:B2:18:8E:C5:5E:25:D3:5A:D1:8B:16:F9:78
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       0186FDDBD2D70D5107AD2714673AFD3665BC
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uOeo-xHxhrIYjsVeJdNa0YsW-Xg.roa
Signing time:             Mon 20 Mar 2023 07:11:27 +0000
ROA not before:           Mon 20 Mar 2023 07:11:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209408
IP address blocks:        80.71.225.0/24 maxlen: 24
                          80.71.228.0/24 maxlen: 24
                          45.66.224.0/22 maxlen: 22
                          81.29.145.0/24 maxlen: 24
                          81.29.146.0/24 maxlen: 24
                          81.29.149.0/24 maxlen: 24
                          81.29.148.0/24 maxlen: 24
                          81.29.147.0/24 maxlen: 24
                          81.29.156.0/24 maxlen: 24
                          81.29.158.0/24 maxlen: 24
                          2a09:6c40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fd:db:d2:d7:0d:51:07:ad:27:14:67:3a:fd:36:65:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Mar 20 07:11:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8e7a8fb11f186b2188ec55e25d35ad18b16f978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:13:20:c7:75:29:81:d5:fd:83:f4:4e:5e:
                    c1:f6:9b:8e:3a:12:fb:4d:16:87:50:a0:c1:3e:ac:
                    c2:d3:51:ee:f4:52:7d:09:8f:15:96:07:e0:09:03:
                    71:34:0d:fd:ad:ce:32:75:aa:da:6f:ea:c1:e2:c8:
                    ba:8c:42:6c:40:42:6d:5c:7c:05:8c:12:b4:0f:ec:
                    19:c6:48:01:49:f3:33:96:5b:b2:82:8c:93:6f:6b:
                    80:e9:57:27:ef:7f:6d:86:ec:1f:c7:ae:15:45:5f:
                    aa:e2:b8:93:2a:d6:da:19:ea:ab:f1:4e:22:f4:9c:
                    d1:a2:91:26:f6:be:e3:b8:c8:0f:01:57:f2:a0:cc:
                    9b:0d:3a:80:fe:a1:64:29:59:15:45:d2:e9:c3:32:
                    49:59:18:8c:32:64:e1:b8:0a:4c:e7:4c:32:59:24:
                    17:c7:fd:22:c2:0d:be:42:f1:d8:e4:6f:3e:40:6d:
                    32:ba:b8:05:4e:5b:0b:0f:53:72:d4:36:08:9a:cd:
                    b5:4d:55:1a:19:b9:cf:fe:ee:8f:12:aa:80:b5:98:
                    d9:bc:ce:21:2e:64:5b:20:19:93:9a:93:21:f3:87:
                    79:02:a4:8e:ff:b9:57:9c:7a:3e:f7:96:f7:73:0b:
                    d9:0a:c3:3e:bb:10:be:2a:26:87:f7:1a:d4:e2:9c:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E7:A8:FB:11:F1:86:B2:18:8E:C5:5E:25:D3:5A:D1:8B:16:F9:78
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uOeo-xHxhrIYjsVeJdNa0YsW-Xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.224.0/22
                  80.71.225.0/24
                  80.71.228.0/24
                  81.29.145.0-81.29.149.255
                  81.29.156.0/24
                  81.29.158.0/24
                IPv6:
                  2a09:6c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:ba:c3:4a:ae:2a:fa:68:04:8d:65:31:06:bd:1c:a2:25:
         e6:4a:07:7b:e9:ba:fc:18:c1:9b:8c:f0:69:c9:7f:df:72:98:
         ff:93:a6:10:92:8a:24:37:ad:aa:1d:9a:4c:7c:7d:62:05:aa:
         53:60:51:e7:2c:35:ca:33:a3:c4:5a:70:c3:af:99:46:4c:62:
         d7:15:3c:18:0f:9f:01:dc:29:98:62:e7:07:4b:5e:82:cf:bd:
         ce:f5:4a:74:6e:4c:35:5d:2e:81:38:a5:b3:41:01:eb:bb:56:
         47:20:d2:6a:3b:7d:6b:75:9a:01:6a:89:36:cc:b8:22:ae:9f:
         c0:b1:ec:44:9f:3d:b5:99:bc:9c:be:c2:b1:93:0d:e8:88:93:
         a1:97:61:c8:dc:25:26:73:33:36:54:69:dc:36:4e:b1:1f:b7:
         f8:4e:19:d1:6b:f2:e5:73:8d:00:79:a6:f6:04:04:ba:43:94:
         7c:3a:42:40:65:18:91:be:45:69:b4:71:0d:3c:71:13:64:2f:
         39:6d:7b:32:28:b7:3c:91:64:60:3c:d2:5c:7a:a8:60:07:1e:
         09:ef:49:32:32:2f:64:18:2f:46:db:a9:56:a4:a6:70:1b:6c:
         f5:47:44:58:c0:85:b6:12:6f:22:8c:e9:68:ab:8e:62:fc:35:
         b1:00:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----