Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/Pnb4MsCdxInSIogB4I114rmD57I.roa
File:                     Pnb4MsCdxInSIogB4I114rmD57I.roa (raw, json)
Hash identifier:          YlwIt4vhFIzClh4AZgGe9K5McJK6B4r2otwEr9D9q64=
Subject key identifier:   3E:76:F8:32:C0:9D:C4:89:D2:22:88:01:E0:8D:75:E2:B9:83:E7:B2
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       01856F14E639D76347771FC8AC49CE71059B
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/Pnb4MsCdxInSIogB4I114rmD57I.roa
Signing time:             Sun 01 Jan 2023 20:45:18 +0000
ROA not before:           Sun 01 Jan 2023 20:45:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44390
IP address blocks:        80.92.239.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:e6:39:d7:63:47:77:1f:c8:ac:49:ce:71:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan  1 20:45:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e76f832c09dc489d2228801e08d75e2b983e7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:7f:76:32:b2:50:b6:ca:b7:b5:e3:a2:ae:
                    53:63:b8:46:2e:21:08:b3:a3:0c:de:af:d7:48:e9:
                    8d:54:72:ad:7e:37:50:d5:1f:5e:39:65:6e:d9:6e:
                    64:f0:57:d8:d3:8a:a5:33:00:9e:b6:f5:d7:8c:5b:
                    af:bf:f7:d3:cf:bd:cc:51:11:45:62:9d:ce:99:81:
                    36:1e:b4:34:0b:5d:f3:2f:0c:a4:61:79:a5:f4:11:
                    78:27:de:14:26:b7:64:89:5b:12:35:6a:f0:31:62:
                    5e:6a:ec:20:30:a3:45:a0:5c:78:ba:d0:37:fe:3a:
                    a9:03:ab:73:a1:40:89:dd:52:27:ec:32:b8:67:d9:
                    77:fb:bf:a0:36:2c:34:b3:b6:89:d5:c1:55:57:31:
                    eb:9c:dd:2d:2b:0d:10:bd:05:87:f5:4d:55:b6:1f:
                    d5:94:4c:e5:9c:60:94:75:02:73:d6:6f:38:65:a7:
                    9a:32:c3:86:8d:cb:b3:de:37:f0:46:cf:99:ca:f5:
                    8a:31:bf:64:85:75:b4:21:f6:6b:48:f1:18:45:fb:
                    e2:93:11:d3:35:68:91:af:f2:84:6c:7a:e4:03:1d:
                    22:c0:b8:d0:19:eb:80:61:2b:ad:6e:a1:5a:8d:44:
                    24:14:91:69:09:d5:d2:79:e7:c3:56:71:54:7a:3a:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:F8:32:C0:9D:C4:89:D2:22:88:01:E0:8D:75:E2:B9:83:E7:B2
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/Pnb4MsCdxInSIogB4I114rmD57I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ad:c4:e8:08:18:51:56:93:87:8c:bb:78:bc:38:bf:3e:33:
         4f:c8:e6:67:d5:0e:c2:f2:28:d9:dc:a7:8a:26:02:8a:45:2e:
         6f:94:a1:82:da:f4:d4:73:ff:e0:49:d8:59:8a:cd:4a:2b:1b:
         2f:f2:ff:98:f0:18:ba:7b:e8:e3:72:5d:83:75:83:78:f6:b8:
         07:d2:b8:82:98:df:60:17:81:7e:fe:05:b6:c4:7f:da:1f:ed:
         95:d4:17:cb:c9:fe:76:d5:d6:46:8f:2e:d5:92:ae:84:4c:08:
         2b:d7:3a:45:6a:54:ba:56:cf:d6:ae:d8:6d:3e:7b:18:d9:ae:
         a9:12:85:e0:6c:2e:f6:3f:68:0d:a5:80:18:11:59:c2:49:88:
         17:47:15:d3:ee:d5:c3:c9:51:04:86:3b:f3:b8:60:cf:7d:9f:
         b4:74:42:5a:74:61:d7:46:1f:7a:14:9d:fe:a6:33:f8:4d:94:
         f0:6a:20:4d:d9:fc:30:6a:71:ae:d7:c0:27:56:86:35:b5:b7:
         eb:9a:b1:4b:23:dc:49:9c:61:a6:cb:3e:5c:00:64:f0:19:3a:
         d5:f9:db:a4:42:1b:5d:80:08:cc:54:5f:31:75:0f:3e:21:61:
         5e:14:05:84:d0:28:95:73:30:f6:75:6b:ad:9a:5f:2e:62:76:
         f9:60:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----