Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa
File:                     RM-TuB4U99g8tUuGrauRdk9MIIg.roa (raw, json)
Hash identifier:          M16urYDU8/q1ctkAIDPkvHGZywCajwVcRmRQYZMtZ1g=
Subject key identifier:   44:CF:93:B8:1E:14:F7:D8:3C:B5:4B:86:AD:AB:91:76:4F:4C:20:88
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01856F1DCE98B9DA2D49F09BE48B653DC10C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa
Signing time:             Sun 01 Jan 2023 20:55:02 +0000
ROA not before:           Sun 01 Jan 2023 20:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35536
IP address blocks:        94.124.116.0/24 maxlen: 24
                          2a09:6:6::/48 maxlen: 48
                          2a09:7:2003::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:ce:98:b9:da:2d:49:f0:9b:e4:8b:65:3d:c1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 20:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44cf93b81e14f7d83cb54b86adab91764f4c2088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:e6:12:8c:cd:3f:18:72:1e:06:e1:c1:7b:
                    92:5f:3c:14:98:24:27:44:27:27:a9:57:d2:d3:a6:
                    54:6f:01:ef:a3:4d:47:ab:a8:fe:4b:f9:c1:ae:39:
                    64:8a:7a:37:b9:a8:d3:38:0e:98:21:05:05:5c:05:
                    8e:1f:d9:e8:24:4b:89:34:c4:69:a0:24:66:ff:45:
                    b1:96:b7:47:ff:18:52:88:97:10:2d:a3:7e:db:53:
                    28:14:7f:b8:6d:c3:d9:54:ad:72:5f:40:43:53:da:
                    22:62:3f:00:e2:44:e8:86:9a:c6:1b:69:d7:e4:6f:
                    6d:41:53:b4:ca:d6:1c:eb:0b:ab:6d:c6:ab:00:24:
                    a8:de:a7:5a:41:73:75:3b:63:7a:ac:03:73:98:fe:
                    73:d4:c8:cf:fd:51:d6:39:10:d3:3f:ee:49:4f:cc:
                    18:a6:ec:b3:d5:3f:b4:ea:f4:ef:2b:87:52:fc:25:
                    9d:05:4c:1c:09:77:7f:c9:ef:ca:33:fa:b7:77:f0:
                    d6:60:4a:51:75:a5:dc:ec:b8:65:42:0d:81:17:c1:
                    a3:52:e2:22:a9:88:f3:2c:33:d3:58:39:b2:a7:82:
                    3b:69:b7:b9:58:3d:d9:9c:83:91:51:d6:82:87:ab:
                    42:26:17:18:e1:53:e9:96:08:d9:65:72:86:43:f8:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:93:B8:1E:14:F7:D8:3C:B5:4B:86:AD:AB:91:76:4F:4C:20:88
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.116.0/24
                IPv6:
                  2a09:6:6::/48
                  2a09:7:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:90:41:92:a7:8a:ea:a4:e0:a3:90:38:51:4f:e1:43:bb:
         0b:16:23:7c:3d:3a:47:bc:fc:01:a5:9b:0a:f6:fa:ea:0d:17:
         1a:3a:37:17:9e:0a:c7:36:57:a5:24:5a:9b:e9:d0:80:06:95:
         9a:58:07:64:f9:fa:b0:92:70:c8:94:ba:6c:d3:cc:94:02:35:
         79:a1:39:74:d7:58:da:ad:df:8e:cf:79:44:05:76:15:1a:11:
         78:9d:ba:bf:b3:4c:4c:a0:37:5d:c3:3e:a3:85:ae:43:69:30:
         1f:f7:d4:78:27:a5:b7:42:1f:3e:8a:e1:93:52:91:0e:1c:29:
         ed:39:6d:d5:1f:bc:79:2e:7c:df:d3:92:b3:73:e9:71:04:14:
         65:90:25:94:6f:33:cf:ad:9e:56:d5:46:58:b1:11:60:1f:03:
         fc:1a:77:e2:28:7e:9a:5a:f3:b7:4a:2b:1b:b2:64:ee:cd:dd:
         83:00:19:d4:27:bd:f5:bc:13:08:18:9c:6d:60:48:e1:f8:80:
         b8:89:81:c7:a5:bc:1a:f6:cc:bb:8d:43:74:30:65:a2:46:c6:
         91:2b:4d:c4:82:41:b4:75:be:b6:4a:e2:21:e3:e0:f5:4a:3c:
         ab:88:15:7c:5e:01:70:22:5c:f6:35:fb:2e:c2:75:b7:82:46:
         64:1e:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----