Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa
File:                     7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa (raw, json)
Hash identifier:          Jcys0qMkgEitnpYrTafKCpnZFqSsFoPy/AlCA1/VWeI=
Subject key identifier:   ED:19:95:A9:56:6D:E9:CE:64:E3:66:29:9E:3C:B5:0D:66:78:CD:FB
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01856F1DCDEC42ABA957F3742B5A14FC297C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa
Signing time:             Sun 01 Jan 2023 20:55:02 +0000
ROA not before:           Sun 01 Jan 2023 20:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34854
IP address blocks:        94.124.117.0/24 maxlen: 24
                          2a09:0:10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:cd:ec:42:ab:a9:57:f3:74:2b:5a:14:fc:29:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 20:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed1995a9566de9ce64e366299e3cb50d6678cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:c7:4a:47:e9:3e:3d:7c:91:ba:e8:24:c0:
                    6c:32:7e:99:4c:0d:03:99:99:85:b2:81:d8:42:bd:
                    0d:8f:8c:ca:e6:d5:15:5f:fa:13:d8:98:ac:71:f9:
                    65:fc:84:8b:10:53:83:50:ce:91:54:82:6d:06:1a:
                    4a:85:6e:22:2e:e7:6f:07:2c:60:db:14:64:f9:69:
                    a4:56:33:af:fa:6a:1c:44:a7:9b:49:b9:58:11:85:
                    92:2c:eb:74:f0:87:b3:51:7a:b7:93:45:fe:fd:2e:
                    75:9c:9f:2f:a7:0d:25:3a:ff:05:8c:aa:ce:9a:18:
                    f9:11:75:3b:0a:0a:18:ed:74:66:ec:27:63:eb:ae:
                    fb:b0:89:d9:4d:62:88:7f:72:e1:21:08:e0:07:91:
                    d8:d5:ce:15:59:c3:3a:24:ef:e6:07:4f:8c:21:cf:
                    77:b0:cf:e9:c2:8a:40:0c:bd:f7:3a:db:01:9e:ca:
                    61:32:2c:fb:13:23:b1:62:99:ba:3b:1b:a7:e3:fc:
                    50:45:45:35:43:4b:f6:5a:01:51:ab:ba:fc:f0:8d:
                    95:22:4a:ca:25:a1:88:f2:4c:ed:56:3c:b0:86:99:
                    93:b9:9a:70:ab:9f:57:98:88:2b:a1:7d:0f:cc:14:
                    bf:d7:41:7f:94:c0:a9:6a:32:74:f8:1a:59:6a:83:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:95:A9:56:6D:E9:CE:64:E3:66:29:9E:3C:B5:0D:66:78:CD:FB
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.117.0/24
                IPv6:
                  2a09:0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:42:b9:e1:8b:3c:b0:b1:b3:17:31:8c:23:64:4d:8c:85:8f:
         ed:b7:fa:96:e9:9c:a1:40:3c:c5:ae:2c:3c:ca:d6:0e:f9:1f:
         06:72:6e:9d:8a:ed:be:57:41:54:54:69:36:46:d5:29:df:1f:
         98:fe:87:b8:54:a0:18:bc:ed:98:22:01:71:7f:6f:08:a5:0a:
         e2:7e:07:a0:af:fa:e1:8a:d8:7a:e0:06:93:64:2a:1e:da:d6:
         b7:3d:b0:d6:e3:7a:c3:e0:0a:32:18:42:64:ae:11:36:b6:51:
         96:41:f9:a7:8c:2e:7d:fa:c7:4b:05:cd:02:b6:38:82:fc:9d:
         05:f5:b1:1f:f6:f3:3c:f9:97:fe:29:30:67:48:f0:95:bd:84:
         f5:6c:e4:22:ad:01:2a:60:81:76:48:52:96:f3:f3:c7:53:51:
         f4:14:ad:7f:a9:3c:c6:55:19:d9:1f:63:02:64:5b:90:16:7d:
         af:0a:42:28:00:90:77:1c:8a:ae:55:6f:43:1e:de:66:48:cc:
         d1:7c:60:12:41:3e:08:00:05:56:d4:dc:9d:98:71:a6:ed:10:
         fc:c7:8a:ea:79:53:51:a5:26:6c:48:56:5f:fe:17:87:2b:ff:
         68:80:4f:59:8d:79:9c:47:a7:39:85:1c:be:84:ea:36:1b:3b:
         06:24:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----