Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/cP_ulTSPY_Bh-wn-R7EBKw4dPRw.roa
File:                     cP_ulTSPY_Bh-wn-R7EBKw4dPRw.roa (raw, json)
Hash identifier:          ah0/yK3mo711iGoSthrEYc/kP0tghRmVidMk3Pcc6GY=
Subject key identifier:   70:FF:EE:95:34:8F:63:F0:61:FB:09:FE:47:B1:01:2B:0E:1D:3D:1C
Certificate issuer:       /CN=fa27c6d0a06c2c1c2c9195fd9a9adbce4f865b87
Certificate serial:       018571953C6E3A0C8C0EDD7EFBD72DBC2971
Authority key identifier: FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ifG0KBsLBwskZX9mprbzk-GW4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/cP_ulTSPY_Bh-wn-R7EBKw4dPRw.roa
Signing time:             Mon 02 Jan 2023 08:24:43 +0000
ROA not before:           Mon 02 Jan 2023 08:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29376
IP address blocks:        195.137.226.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:3c:6e:3a:0c:8c:0e:dd:7e:fb:d7:2d:bc:29:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa27c6d0a06c2c1c2c9195fd9a9adbce4f865b87
        Validity
            Not Before: Jan  2 08:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70ffee95348f63f061fb09fe47b1012b0e1d3d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:70:27:1b:02:b9:59:11:81:06:2f:b7:ba:
                    71:f4:bb:5e:4c:aa:01:bf:a0:ad:de:3b:96:79:dd:
                    89:65:a1:70:0b:53:86:56:5f:7b:45:85:2a:d1:99:
                    c3:c2:93:60:5b:40:33:8d:02:39:67:1c:b7:29:2e:
                    7f:b0:b8:d0:8d:a7:40:03:61:03:ee:71:18:da:3f:
                    25:53:21:04:5b:8e:d6:93:f8:36:0a:86:4c:be:34:
                    ab:62:9f:ec:11:7e:3c:d0:ff:32:f7:48:80:71:7b:
                    ad:ac:1a:7a:e8:5a:ba:d9:e1:51:24:44:11:e3:e5:
                    ba:65:cb:3b:bc:aa:7a:e7:e7:5a:f9:9c:ba:4d:29:
                    62:cb:a5:d5:a8:af:51:d5:0f:e2:35:85:1b:a9:c8:
                    be:6d:49:af:d5:1b:b4:64:9f:31:cd:95:53:37:b4:
                    75:62:ce:e2:29:5d:2b:97:e2:83:51:bd:1e:39:c5:
                    18:f2:9b:b5:cb:37:7f:ad:b6:38:35:cc:e1:b0:a8:
                    4f:8e:a3:b5:09:7a:68:39:d0:a4:37:9f:99:91:20:
                    9f:55:9a:9a:f6:a6:b9:3d:9d:a6:dc:6b:0a:99:c0:
                    4f:6d:0d:e2:f7:ec:e1:f8:eb:cf:09:c2:4a:4f:b9:
                    2d:58:70:99:29:77:d2:8c:0b:47:e1:0e:a3:a0:d2:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:EE:95:34:8F:63:F0:61:FB:09:FE:47:B1:01:2B:0E:1D:3D:1C
            X509v3 Authority Key Identifier:
                keyid:FA:27:C6:D0:A0:6C:2C:1C:2C:91:95:FD:9A:9A:DB:CE:4F:86:5B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ifG0KBsLBwskZX9mprbzk-GW4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/cP_ulTSPY_Bh-wn-R7EBKw4dPRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/805412-63ba-470a-89c9-562b490110e0/1/1-ifG0KBsLBwskZX9mprbzk-GW4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.137.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:49:51:ef:8d:8f:41:83:cd:e7:6c:84:56:d3:c5:2b:8a:
         2b:f2:d6:d1:eb:52:8a:2c:6e:18:33:3c:91:71:2b:35:18:7d:
         7d:20:79:64:2f:b1:6e:77:8f:9d:95:e2:33:ca:1b:21:a9:1e:
         4e:c1:ce:bf:6d:e0:ae:c8:05:81:3b:ea:40:60:42:65:15:f4:
         52:51:40:15:8c:a7:1d:c5:48:5c:4f:1d:d0:8f:5d:6b:2c:21:
         12:63:90:bc:f4:76:d0:c6:8c:c6:31:51:8a:3c:87:20:fa:32:
         6c:65:b2:ac:d7:ff:28:9d:53:d7:3a:3c:1c:99:45:16:83:5d:
         01:20:9a:77:fb:5e:2f:5a:82:41:e2:a7:81:91:e2:29:25:d3:
         b1:53:5c:81:00:55:10:f1:f6:c2:75:06:72:93:b7:bb:a9:5a:
         3c:a5:86:56:22:78:5c:8c:8a:cb:78:1f:89:40:0f:e2:f8:84:
         8d:0f:5f:3b:fc:58:f0:5a:50:4e:f0:02:6c:cf:3c:31:1b:1d:
         95:a3:8c:ab:d3:9c:c1:a5:9d:17:a4:68:23:50:2d:ab:bd:df:
         7c:de:0c:22:2e:aa:3f:f3:3a:af:6b:9d:2d:ec:07:ee:ec:90:
         d3:7c:4d:1a:d6:41:39:8d:27:30:7b:37:d4:0e:af:61:30:88:
         2d:0a:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----