Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/3JE74AtFJ2an8ZbkzHAHEAzqh60.roa
File:                     3JE74AtFJ2an8ZbkzHAHEAzqh60.roa (raw, json)
Hash identifier:          U2Hy8y6mgNR0ipNNVHkethXA8c6p7kdkZmM5LR8uRBM=
Subject key identifier:   DC:91:3B:E0:0B:45:27:66:A7:F1:96:E4:CC:70:07:10:0C:EA:87:AD
Certificate issuer:       /CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Certificate serial:       0188460F8F660E3889E9F4497D301C03B212
Authority key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/3JE74AtFJ2an8ZbkzHAHEAzqh60.roa
Signing time:             Tue 23 May 2023 00:43:24 +0000
ROA not before:           Tue 23 May 2023 00:43:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206033
IP address blocks:        185.0.26.0/24 maxlen: 24
                          2001:7f8:146::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:46:0f:8f:66:0e:38:89:e9:f4:49:7d:30:1c:03:b2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
        Validity
            Not Before: May 23 00:43:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc913be00b452766a7f196e4cc7007100cea87ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:f0:b9:bc:37:5e:e7:ab:3a:44:3a:bf:77:
                    ab:29:a3:34:98:c5:67:ad:e8:e8:dd:bb:6d:8f:15:
                    36:5b:6b:e7:6f:5a:14:cc:d7:45:ba:00:ce:ea:b1:
                    95:2d:4a:e5:46:19:b4:75:27:8a:42:e9:b1:38:8d:
                    ae:31:38:ce:82:a2:98:de:c7:63:a2:45:b7:86:66:
                    af:b2:9d:fe:4b:a6:d6:4d:5d:77:98:a4:df:08:37:
                    68:fe:81:d2:e5:82:66:6f:8c:9c:24:63:2f:17:0d:
                    63:f0:66:9e:83:f2:7e:c1:8e:d9:41:fb:8e:42:7a:
                    bd:02:e5:92:b3:07:3e:25:63:31:e0:06:2b:02:bb:
                    bc:ff:89:f1:e2:74:5a:3f:38:76:b1:e8:14:31:48:
                    ef:f2:3d:e5:5c:cc:98:04:a9:cc:1a:2c:43:23:19:
                    45:b7:9a:ab:e2:0f:2b:d9:6c:ff:5d:0d:dc:6c:92:
                    84:fb:9b:97:f9:24:42:f6:b6:71:5f:57:53:7d:0a:
                    94:20:29:45:41:20:9f:41:fd:d1:e3:4c:d0:14:e5:
                    34:52:0b:28:51:52:bc:db:bd:0a:f8:9d:66:bb:b8:
                    59:fc:e6:7a:a5:42:ae:91:41:a1:98:a0:e3:62:d7:
                    0d:79:fe:97:ab:86:0d:f7:9a:b7:8c:b5:67:56:50:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:3B:E0:0B:45:27:66:A7:F1:96:E4:CC:70:07:10:0C:EA:87:AD
            X509v3 Authority Key Identifier:
                keyid:A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/3JE74AtFJ2an8ZbkzHAHEAzqh60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.26.0/24
                IPv6:
                  2001:7f8:146::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:16:34:fe:9a:64:ac:0b:b7:6a:93:a1:b2:60:12:a9:2c:3d:
         d3:25:07:6c:07:2d:25:4c:bb:d8:fa:0d:d8:37:c3:7c:ef:86:
         74:4c:5f:86:2d:1a:0e:ce:2b:b5:2a:ab:8d:96:34:80:d7:3c:
         fe:b2:1e:b2:0c:18:8b:a4:ca:f7:76:6a:6b:3f:f1:01:11:28:
         0e:c7:58:1e:d3:ae:a4:cd:69:e8:a5:ed:3e:29:46:08:c5:db:
         b9:62:77:06:79:5e:e9:2e:25:49:a7:73:13:07:f1:cc:3a:90:
         58:92:dd:6b:fd:57:91:18:c5:92:08:37:56:c3:cc:aa:c0:3e:
         bc:66:74:f2:06:62:c1:5a:8e:4e:1e:55:29:00:85:2e:93:4b:
         26:0b:55:b1:e7:f4:9a:af:84:0b:19:e7:9b:b2:65:8a:0c:b3:
         fe:3b:a0:3a:8a:e1:50:e7:f3:8d:45:41:d6:37:1e:32:91:1c:
         4b:06:f6:dd:e0:21:bb:fa:b5:1b:26:b1:e6:76:e7:a8:c4:3c:
         3d:e3:48:02:f9:0c:eb:64:25:0d:7c:c0:41:1d:f2:08:50:87:
         bb:69:33:df:99:ca:46:1c:43:62:a5:0b:c0:74:4c:cb:9d:07:
         c3:2d:17:f1:8d:ce:b5:7a:8d:86:73:8f:76:6c:f1:d6:db:1d:
         23:c3:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----