Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/EWJp_xVm-aWj1Id_ilNrD-jN5xI.roa
File:                     EWJp_xVm-aWj1Id_ilNrD-jN5xI.roa (raw, json)
Hash identifier:          XsqwJ1MuFrhIyrjSMy01OyHKFluQvpHZDB3w0Yzp8qs=
Subject key identifier:   11:62:69:FF:15:66:F9:A5:A3:D4:87:7F:8A:53:6B:0F:E8:CD:E7:12
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0185DF5EEAB4CABD8D2E543FF4BFE11A3ABA
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/EWJp_xVm-aWj1Id_ilNrD-jN5xI.roa
Signing time:             Mon 23 Jan 2023 16:03:37 +0000
ROA not before:           Mon 23 Jan 2023 16:03:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209242
IP address blocks:        212.110.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:5e:ea:b4:ca:bd:8d:2e:54:3f:f4:bf:e1:1a:3a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan 23 16:03:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=116269ff1566f9a5a3d4877f8a536b0fe8cde712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:c2:b8:b1:28:48:9a:87:86:f8:fe:a3:0f:
                    69:b1:b2:d6:dc:30:9a:3a:1b:ff:53:f7:73:69:ea:
                    46:e3:ed:da:ae:b7:a3:ee:9c:ad:a2:b6:2b:36:a4:
                    6b:3c:bf:30:c1:80:b9:b1:29:0d:9e:29:4e:35:8d:
                    65:0a:20:92:25:64:16:32:af:77:7e:72:e9:9b:ab:
                    1a:fb:95:ac:1c:c9:d7:e0:90:85:ad:ee:16:1c:c4:
                    60:7f:d9:c8:f2:7a:34:11:7d:7f:95:09:37:2f:f2:
                    02:f0:b8:66:33:b0:a1:83:22:cc:c4:30:03:db:49:
                    1a:ac:0a:03:b9:ec:ea:a6:32:e2:85:ff:e1:77:f6:
                    6a:94:32:d5:72:51:b3:9c:43:ea:9f:11:53:1a:a1:
                    97:db:e8:e6:a8:ae:70:af:b8:5f:74:8e:22:cd:1d:
                    3a:72:9e:e5:a2:54:18:c8:53:85:87:05:db:66:c5:
                    1a:bb:3b:fe:c9:2a:0a:36:51:6c:9d:1d:05:23:e6:
                    53:7c:8c:2a:d6:e3:a7:43:32:23:b3:52:54:14:10:
                    e6:7f:17:75:59:f9:e0:d3:e0:6f:a7:7f:07:b1:be:
                    8e:69:5d:23:ae:c7:13:a9:82:99:46:24:db:ac:2c:
                    ec:9c:21:fc:16:ef:6c:40:f3:cc:73:91:be:44:2a:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:62:69:FF:15:66:F9:A5:A3:D4:87:7F:8A:53:6B:0F:E8:CD:E7:12
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/EWJp_xVm-aWj1Id_ilNrD-jN5xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:46:8d:a7:d4:d7:2f:a3:44:cc:f0:78:2e:29:40:a7:87:
         ba:f0:a1:18:fd:9a:d7:b2:58:6f:cc:45:0e:51:47:72:6e:8d:
         4d:6c:24:30:92:01:de:3a:61:3f:04:80:78:07:9b:80:7f:e3:
         fa:db:7b:7f:88:1c:77:d8:b8:c8:7c:ad:8b:19:d2:e2:3f:5b:
         0f:87:5e:e9:e6:26:0f:57:9e:96:1a:ed:67:6f:72:da:d4:d6:
         a7:11:2a:13:ee:8e:f4:4b:64:45:a8:89:91:b6:8a:84:e1:63:
         3b:3c:d1:07:7c:15:c1:a2:30:dc:9d:da:97:b3:96:52:68:35:
         02:17:61:43:28:97:d1:c6:7a:c3:b9:43:92:cf:90:02:68:9b:
         54:62:3a:2b:b0:c0:17:3b:37:5e:85:a7:67:4b:a0:38:dd:df:
         f0:ff:34:28:29:b9:12:27:52:84:2a:4d:33:04:4b:b6:d0:87:
         5c:f0:45:83:03:cf:68:03:50:2e:e2:a5:c1:4d:0b:18:87:49:
         cf:7d:c2:bb:0e:f3:9f:2d:cc:d0:d9:57:f2:61:ee:fe:36:cf:
         46:8a:87:a2:5d:cc:62:a5:6f:79:51:0e:a1:01:df:ed:0f:db:
         d5:c6:1a:55:77:89:4e:0b:a4:7b:c4:81:e8:39:ca:ee:90:9c:
         57:c3:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----