Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa
File:                     2GYP-1AX_0oAv0KG7meXB2IaZR8.roa (raw, json)
Hash identifier:          fiq8ah8Z1cmguI1pDToxTeAe0C97CZUnHzREGrwVR04=
Subject key identifier:   D8:66:0F:FB:50:17:FF:4A:00:BF:42:86:EE:67:97:07:62:1A:65:1F
Certificate issuer:       /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial:       01856E942D85F420894D2E824462C5425704
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa
Signing time:             Sun 01 Jan 2023 18:24:42 +0000
ROA not before:           Sun 01 Jan 2023 18:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201931
IP address blocks:        185.217.232.0/23 maxlen: 23
                          2a07:6882::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:94:2d:85:f4:20:89:4d:2e:82:44:62:c5:42:57:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
        Validity
            Not Before: Jan  1 18:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8660ffb5017ff4a00bf4286ee679707621a651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:d4:df:5b:e4:40:24:20:6d:fb:c9:7f:d1:
                    59:fa:3c:4b:25:a9:ef:ca:f3:7a:b1:9f:08:e3:b7:
                    35:56:c0:df:33:97:5f:78:f4:a4:b5:b5:ce:0f:ed:
                    ce:35:3f:aa:24:ed:8f:d9:34:b1:bd:8c:7a:47:fd:
                    44:52:c7:d8:88:08:4c:00:6e:37:ba:46:5c:86:02:
                    0d:5e:7a:e4:e2:98:f2:12:00:d2:8b:26:fd:45:0c:
                    36:77:7f:35:e6:21:c8:05:2f:43:1a:d5:a7:cf:d3:
                    5f:64:6f:37:8c:be:a6:38:38:60:29:f7:7f:76:cc:
                    4a:cb:22:25:3a:82:c7:cb:91:94:db:32:44:cc:66:
                    e6:ad:8d:c2:57:3b:08:74:63:1b:37:a4:c8:38:78:
                    ee:3d:6a:ca:51:7c:c1:7f:d1:81:69:7a:fd:e5:bb:
                    dc:f2:cf:0c:6b:52:62:8f:8c:68:dc:2a:12:fa:ea:
                    4d:b7:4c:19:49:73:4b:5e:4c:f3:96:d4:29:29:26:
                    3f:fc:71:95:b7:c3:0a:21:72:83:95:b4:d2:d3:90:
                    e3:ce:89:66:a3:d3:36:d5:e7:76:f5:31:4e:05:d5:
                    53:db:34:00:ef:19:7d:a9:3a:73:86:ff:43:76:c8:
                    02:cc:a1:2d:8d:1d:ab:23:41:8e:75:b4:22:fe:7e:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:0F:FB:50:17:FF:4A:00:BF:42:86:EE:67:97:07:62:1A:65:1F
            X509v3 Authority Key Identifier:
                keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2GYP-1AX_0oAv0KG7meXB2IaZR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.232.0/23
                IPv6:
                  2a07:6882::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:33:2d:a1:f7:34:b0:7e:6e:46:b6:a4:f2:15:5b:0f:12:10:
         a0:31:07:97:37:fe:5f:b6:9e:99:ea:03:cd:49:7d:33:7d:c5:
         f5:31:52:cb:b7:95:0b:60:9a:53:ee:0c:07:70:19:3d:33:e8:
         3e:e2:cc:6b:99:ce:87:40:aa:6b:ae:17:f2:89:2a:1f:90:2a:
         d6:62:e3:95:e0:51:63:38:c6:7a:c7:ab:77:08:22:52:ea:0f:
         6c:3e:45:c9:03:f4:d8:4b:02:82:ca:02:80:40:c0:bf:2c:b1:
         57:08:bb:d6:9a:b4:ac:19:96:5d:0a:ab:4d:65:62:93:3b:0c:
         a9:3a:d8:7e:e9:ec:85:89:66:54:a5:e7:63:50:48:f6:f2:7c:
         2d:b7:5c:92:f4:f6:3b:3c:19:60:fe:b2:64:49:3c:de:9b:f5:
         10:ce:09:ed:17:c2:fb:a9:80:d3:bc:86:b3:84:a7:96:4e:b0:
         87:6f:ef:c6:98:fc:bb:a9:ba:b0:dd:d6:29:71:19:c1:f4:7f:
         18:d9:98:b5:b4:eb:9d:28:29:f7:a8:75:cd:74:32:80:1e:95:
         89:5b:77:75:69:62:36:ef:a1:b9:22:d6:5f:83:f8:e2:0d:4d:
         0a:3f:40:c1:b4:28:9e:a1:ca:bf:5b:5c:4e:36:dc:78:a2:27:
         82:3b:19:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----