Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa
File:                     Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa (raw, json)
Hash identifier:          G9ASAwYuymmXPFlm++7WyvEcC6Z3FanCGsuY7Nv7otk=
Subject key identifier:   1A:AB:F5:02:DF:17:A1:00:C4:99:5F:81:33:93:51:3F:0D:ED:E8:FB
Certificate issuer:       /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial:       018570FBE5BB0EDF8F84C4A33598CB219257
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa
Signing time:             Mon 02 Jan 2023 05:37:14 +0000
ROA not before:           Mon 02 Jan 2023 05:37:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197600
IP address blocks:        91.223.160.0/24 maxlen: 24
                          2001:678:7b8::/48 maxlen: 48
                          2001:678:7bc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:e5:bb:0e:df:8f:84:c4:a3:35:98:cb:21:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
        Validity
            Not Before: Jan  2 05:37:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1aabf502df17a100c4995f813393513f0dede8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:c5:b6:05:22:97:ab:92:30:9d:18:22:c4:
                    45:38:9e:7f:c8:7b:3d:3a:80:63:94:20:6f:cd:c2:
                    39:e3:ad:72:98:0f:86:29:49:06:2c:3b:5c:a4:fb:
                    eb:44:25:64:17:95:87:ff:d4:e4:5f:81:76:ac:b5:
                    dd:0c:22:e0:1b:52:54:91:f9:93:a6:48:e8:9b:ee:
                    20:06:73:a7:8d:23:1a:3a:fb:66:aa:17:51:f8:bf:
                    75:94:26:0a:3f:66:10:48:5f:91:29:ae:de:38:16:
                    8a:b4:3c:33:75:78:8c:90:c9:bb:1a:cc:cf:73:54:
                    9d:cc:b7:03:8b:fe:f6:20:96:87:3d:0a:62:d7:8e:
                    f1:bc:2e:51:ac:71:13:d9:2f:91:72:fa:1b:77:5d:
                    e7:71:c9:af:c0:ea:86:3c:31:81:00:08:58:b1:38:
                    89:fe:90:bd:01:e6:5d:cf:a6:25:db:fc:5b:d5:d7:
                    53:07:0c:95:71:eb:dd:85:79:2d:22:34:2e:00:51:
                    e7:ed:0d:30:cb:ff:b4:3a:0f:7e:8a:ae:20:0a:31:
                    e0:49:62:57:bd:bc:36:06:5a:c1:7a:07:4e:35:7c:
                    9a:49:5f:27:97:3b:3a:b1:a5:fc:96:cc:55:af:72:
                    8e:44:c0:0d:f8:06:7c:25:3d:aa:cb:51:37:1b:44:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:F5:02:DF:17:A1:00:C4:99:5F:81:33:93:51:3F:0D:ED:E8:FB
            X509v3 Authority Key Identifier:
                keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.160.0/24
                IPv6:
                  2001:678:7b8::/48
                  2001:678:7bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:61:fc:6e:4b:95:d0:18:68:67:aa:e7:4b:a0:64:2c:7e:
         06:f2:cb:b9:7a:7c:27:80:ab:f7:a3:8e:d9:01:68:c2:68:5d:
         4f:0e:47:18:b2:6d:31:98:48:b7:9a:66:72:16:60:2e:ef:ac:
         af:b2:96:dd:17:9f:74:f2:93:3b:dc:b0:3f:34:03:13:3d:45:
         38:87:e5:87:67:7e:37:04:a4:45:e4:82:61:4a:13:26:8a:e1:
         23:45:ec:2f:09:7c:6c:3e:fd:10:80:cc:bc:c1:86:8b:ed:69:
         2f:31:8c:99:3c:59:56:e1:7e:11:57:62:58:03:68:e1:e2:37:
         34:2f:0a:96:94:ce:8e:aa:89:6e:bd:9e:a4:3b:40:80:9d:c1:
         88:18:38:d7:05:99:ee:6b:76:f6:e1:2d:5a:e6:4c:4e:2c:74:
         e0:3b:b5:9c:61:82:ee:21:a5:65:e2:73:b7:89:6b:18:1d:20:
         17:cf:67:b1:84:77:9e:b2:38:0c:ee:1c:c7:57:0a:ea:35:99:
         ba:9a:94:58:65:46:fc:e0:d9:58:ac:63:98:7c:67:d9:e1:03:
         61:8a:41:ac:23:57:7a:41:7b:eb:54:19:33:d7:37:4b:e0:9d:
         25:72:6d:f1:8b:2f:7a:f2:03:65:6c:a1:c1:c9:35:da:92:17:
         11:31:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----