Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/g3dpTlTo2zpojZ2cXP3hln3IAKQ.roa
File:                     g3dpTlTo2zpojZ2cXP3hln3IAKQ.roa (raw, json)
Hash identifier:          RP+pYMdZwndOo1slamU8miZVPHtcsTTabs2GyPJaZNE=
Subject key identifier:   83:77:69:4E:54:E8:DB:3A:68:8D:9D:9C:5C:FD:E1:96:7D:C8:00:A4
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0185DF60C1688E0181F71A52B7A658E3E868
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/g3dpTlTo2zpojZ2cXP3hln3IAKQ.roa
Signing time:             Mon 23 Jan 2023 16:05:37 +0000
ROA not before:           Mon 23 Jan 2023 16:05:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203930
IP address blocks:        212.110.143.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:df:60:c1:68:8e:01:81:f7:1a:52:b7:a6:58:e3:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan 23 16:05:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8377694e54e8db3a688d9d9c5cfde1967dc800a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:1c:38:c7:6c:27:8c:eb:0f:f8:ce:a5:a1:
                    ab:c2:af:55:a2:7d:4e:96:c9:36:bc:60:b1:a7:c5:
                    ec:31:ea:bf:6e:b5:79:bd:1b:73:05:43:a8:85:85:
                    7a:26:fa:fa:1a:da:0c:ca:41:47:8e:16:e4:79:dc:
                    63:fc:81:9b:51:4f:88:07:c5:97:21:6e:45:99:1d:
                    46:3e:a1:8c:ed:ec:3c:27:97:b2:2d:c2:33:bb:cb:
                    30:31:b2:bc:2e:ba:42:87:03:60:7e:b1:95:3e:0d:
                    24:71:1c:b5:e2:6f:73:50:49:c6:f4:ea:03:69:8a:
                    da:20:0a:fd:c9:8e:86:f1:79:0a:54:9b:8f:8f:1e:
                    fb:7f:a2:e0:31:1d:57:6e:e2:95:14:e1:d4:a2:e8:
                    b6:9c:db:48:19:aa:ee:ff:43:d3:14:18:72:ce:df:
                    26:c4:02:04:be:eb:d8:52:c1:79:5c:ca:e4:67:4b:
                    a9:ec:e2:75:a9:a7:48:eb:8a:6f:83:92:34:1e:4d:
                    f6:4d:23:44:f4:4b:ce:6e:f3:a9:13:a4:65:cd:15:
                    ab:0e:da:9e:e6:fa:a2:29:07:5d:8b:33:68:cd:23:
                    85:c5:2e:28:93:bd:4a:6e:58:d5:00:55:f1:bf:b0:
                    89:d6:33:c1:84:16:be:ab:a1:0e:fb:21:c7:39:fa:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:69:4E:54:E8:DB:3A:68:8D:9D:9C:5C:FD:E1:96:7D:C8:00:A4
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/g3dpTlTo2zpojZ2cXP3hln3IAKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:d9:11:ed:13:e9:0e:27:f6:92:02:5f:6c:f6:d8:35:29:
         91:fc:77:aa:a2:93:26:bd:d1:87:49:c4:63:4d:c6:c2:04:1c:
         5c:a7:6d:64:ae:d1:ff:ad:d7:4f:0e:f1:4f:77:6e:83:58:31:
         b9:07:4c:3b:89:81:44:d9:a9:9f:86:78:6d:d3:a2:08:41:01:
         b4:80:3b:01:6f:b8:c6:2f:b9:ed:ff:6a:cb:1d:bd:ca:de:91:
         ac:2c:33:7d:cf:d5:2a:8b:c0:58:e4:05:7f:04:63:a6:e5:01:
         ed:28:62:1e:19:94:05:0b:aa:c0:df:dc:53:14:7d:40:4c:52:
         0a:4d:47:ab:23:69:54:d0:a4:7e:e8:e4:6e:ce:da:cc:f2:21:
         76:b4:8c:16:c7:21:bd:85:2e:86:f3:ea:3a:0a:f1:e1:5c:df:
         97:9b:29:8c:9a:f9:0b:2b:ff:15:7c:e9:ab:b3:82:da:62:96:
         9a:5c:a8:32:4b:4c:28:5c:ec:b2:26:97:d1:96:49:22:f5:ef:
         1a:49:f1:5e:bb:60:b3:5e:2b:44:b4:13:2e:8e:f4:57:db:80:
         75:07:8c:c3:b5:28:18:d6:2e:47:45:30:9d:20:4c:8c:0b:b6:
         68:ba:20:19:53:af:78:dd:3f:90:49:ca:e2:e8:6f:dc:19:20:
         2e:54:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----