Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/0Ymmeq1yOgyBOuDC5vk2GTFkbsQ.roa
File:                     0Ymmeq1yOgyBOuDC5vk2GTFkbsQ.roa (raw, json)
Hash identifier:          b3TienhK4i27ATZCBwfGDA6AK8wugjTrMp3MR8UV+/c=
Subject key identifier:   D1:89:A6:7A:AD:72:3A:0C:81:3A:E0:C2:E6:F9:36:19:31:64:6E:C4
Certificate issuer:       /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Certificate serial:       01857169D19FC1C9B329A9CA4B3B418A4D66
Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/0Ymmeq1yOgyBOuDC5vk2GTFkbsQ.roa
Signing time:             Mon 02 Jan 2023 07:37:18 +0000
ROA not before:           Mon 02 Jan 2023 07:37:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205891
IP address blocks:        185.55.212.0/22 maxlen: 22
                          5.182.68.0/22 maxlen: 22
                          2a02:4e20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:d1:9f:c1:c9:b3:29:a9:ca:4b:3b:41:8a:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
        Validity
            Not Before: Jan  2 07:37:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d189a67aad723a0c813ae0c2e6f9361931646ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:45:39:b8:1b:3c:a3:ec:b8:78:de:c8:60:
                    a8:ca:b3:95:52:2d:d9:73:7c:8c:a2:9d:2f:f7:b5:
                    10:c2:4e:8b:a3:00:5b:18:d7:dd:3b:bd:eb:a3:29:
                    3b:f2:20:1c:1d:0e:fc:5d:ec:1e:8e:4c:16:94:51:
                    87:e2:e0:41:d4:72:d6:24:c3:d8:71:34:37:29:ed:
                    fc:8d:be:19:df:6c:61:a0:3b:97:d3:6b:1d:77:b6:
                    a3:c3:8e:56:c5:5d:2c:7f:7c:0c:d6:8d:10:bb:62:
                    4a:1e:3f:c9:93:a5:ad:ad:9f:e8:70:b6:87:52:c8:
                    11:50:e1:28:e2:5e:17:a9:d3:56:e2:f3:e7:19:dd:
                    20:0d:ef:76:6c:37:0b:46:d6:02:39:e2:6e:3c:d0:
                    4d:cc:79:ff:c8:f4:f9:0c:f4:44:e2:1a:10:1a:7f:
                    ee:51:38:02:b9:b1:2b:fd:7e:eb:5a:8a:ad:5e:38:
                    92:b2:7b:b5:4a:f4:13:2f:6a:78:b6:76:3d:2c:6e:
                    1d:d1:72:0b:8d:19:a8:65:f2:4e:c7:66:82:54:c1:
                    53:58:00:d3:87:20:17:4b:8c:7f:4b:9e:1b:41:84:
                    86:30:3e:10:2d:91:2a:cb:1e:0b:3c:f0:46:41:97:
                    72:49:8a:02:11:77:af:29:9b:90:8b:33:55:69:9d:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:89:A6:7A:AD:72:3A:0C:81:3A:E0:C2:E6:F9:36:19:31:64:6E:C4
            X509v3 Authority Key Identifier:
                keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/0Ymmeq1yOgyBOuDC5vk2GTFkbsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.68.0/22
                  185.55.212.0/22
                IPv6:
                  2a02:4e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:f7:20:24:cf:3a:96:f9:3a:60:7b:9f:dc:2b:93:34:2d:
         c3:e3:1f:b9:32:d4:ae:12:be:9b:91:c3:6a:d7:de:0c:6e:1a:
         3a:c8:8b:5e:ed:17:33:2c:ee:c3:47:f8:2c:1d:b0:a8:7d:b6:
         07:1b:bf:96:53:5e:1e:51:26:66:2a:1b:07:8b:a7:ff:6c:cc:
         da:12:dd:71:83:a8:ea:f0:6d:bc:6a:08:9d:ee:60:37:6e:f5:
         3d:f2:83:40:41:7f:64:59:41:51:58:7d:c1:e2:bb:ba:33:73:
         3e:1a:45:86:2b:21:ed:1f:ba:9a:9a:4e:47:be:c8:1b:2d:85:
         3b:e4:da:c4:30:73:cb:82:0e:bd:55:61:c1:62:16:c1:38:54:
         1c:bf:71:c8:e9:98:fe:a5:55:ab:0f:cd:76:c6:31:35:1c:65:
         35:d9:4c:84:36:c2:53:90:82:a2:80:db:77:21:a9:94:a2:ac:
         36:bc:be:b5:77:35:8c:ae:84:db:15:10:28:66:86:a5:4d:0f:
         b4:6d:e5:7b:fa:08:75:8e:09:70:f3:57:cc:60:39:c4:3c:d6:
         f2:00:59:9e:bb:db:66:88:4e:8b:b0:24:05:d4:56:e3:7f:76:
         38:d3:93:8b:11:56:91:20:74:48:f0:64:7f:c2:11:77:31:d5:
         49:2e:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----