Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa
File:                     RSJW8uyzgsSjWum8YkkFqnx7xb4.roa (raw, json)
Hash identifier:          RhoBV25oOrpdCE12077xgwF9jK74gV1zTv5kUlV9pL4=
Subject key identifier:   45:22:56:F2:EC:B3:82:C4:A3:5A:E9:BC:62:49:05:AA:7C:7B:C5:BE
Certificate issuer:       /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial:       01856DCAFD8D6D8441F6BD36CF812FCD8FA9
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa
Signing time:             Sun 01 Jan 2023 14:44:57 +0000
ROA not before:           Sun 01 Jan 2023 14:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210646
IP address blocks:        62.233.37.0/24 maxlen: 24
                          2a11:9d40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:fd:8d:6d:84:41:f6:bd:36:cf:81:2f:cd:8f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
        Validity
            Not Before: Jan  1 14:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=452256f2ecb382c4a35ae9bc624905aa7c7bc5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:fd:96:66:6d:54:f0:66:07:6b:e2:c0:c2:
                    7c:67:9b:ce:0a:69:1a:41:0e:7f:f8:c2:89:44:37:
                    53:10:c3:ac:4c:ce:50:ad:63:28:f6:95:a5:87:d7:
                    9f:f3:21:d9:a6:84:ff:3c:4f:14:cf:0f:25:4b:41:
                    4a:b7:72:a3:53:25:f7:49:b1:e3:b0:79:c8:b2:57:
                    8c:ac:29:5f:c3:1a:5b:bb:16:5d:b2:96:c9:23:c6:
                    9f:66:b0:50:f3:12:16:3c:26:ef:0b:dc:aa:1d:09:
                    ab:97:6a:de:55:b2:78:7e:bb:81:67:02:f3:55:a4:
                    cd:b5:35:e0:1d:44:86:db:71:0f:a8:65:82:59:04:
                    4a:05:da:05:ff:da:56:62:ed:05:2c:78:5d:e0:45:
                    15:a0:30:35:f7:bc:91:37:34:45:05:27:6f:ea:15:
                    76:3c:28:a5:68:d6:9c:53:75:0d:89:4a:61:3a:8a:
                    62:d2:9e:c6:03:6f:3e:8f:40:74:d8:e0:c4:ae:d2:
                    42:96:50:60:e2:ec:23:ec:e1:07:04:4e:95:c7:72:
                    eb:0d:60:65:bb:c6:e1:67:d3:d5:05:f8:91:28:95:
                    07:d1:59:5b:e7:1b:97:5d:28:0b:c1:bc:f2:0f:06:
                    15:6a:44:17:2f:a9:93:9a:1d:10:3d:13:ac:7e:62:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:56:F2:EC:B3:82:C4:A3:5A:E9:BC:62:49:05:AA:7C:7B:C5:BE
            X509v3 Authority Key Identifier:
                keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/RSJW8uyzgsSjWum8YkkFqnx7xb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.37.0/24
                IPv6:
                  2a11:9d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:da:05:8d:a3:ee:6c:74:d8:6e:81:ab:b4:dc:53:61:79:a7:
         2c:73:ac:53:6c:70:5f:e9:4d:7c:4f:d7:b9:f3:1e:c3:a3:f7:
         f2:98:5f:8e:cb:59:c3:d6:68:47:3d:c2:9a:75:12:3d:1c:7c:
         38:65:21:a5:49:96:ce:ac:4e:9a:b3:49:d8:d5:69:7c:be:e1:
         f8:1a:91:70:e4:92:2b:cb:8b:ef:cd:91:e0:e0:ce:d7:e2:ad:
         1d:86:46:cc:1f:35:66:61:5a:98:ce:f0:f5:49:30:d6:0c:cc:
         04:f4:2a:0a:99:51:d9:81:50:3c:20:5e:03:f5:7e:c2:18:6e:
         34:90:a4:56:7f:6b:4a:79:7f:ec:c9:dd:c5:a1:fe:42:d5:1a:
         07:1f:89:db:06:2d:c3:0f:a9:1b:d0:a4:7e:7c:4e:11:48:96:
         ea:e7:d8:26:d1:51:32:0e:33:bd:82:49:05:22:83:11:5a:e5:
         18:0d:6a:8a:19:13:6d:4b:2c:33:1b:55:c1:4b:32:2e:64:5c:
         9c:1e:e1:67:f3:2f:b4:8d:0e:d2:bc:60:80:3d:53:f0:a4:e5:
         ea:be:43:3a:0d:cd:35:ad:10:20:56:86:6e:68:08:b5:81:70:
         c7:00:4f:06:3d:47:70:f1:ad:14:95:b2:df:cb:3e:9a:1c:33:
         01:2e:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----