Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa
File:                     N_9RovqRSbfPkHzB2kC15wWa-Kw.roa (raw, json)
Hash identifier:          BvTp+a5h4dc0vHi554zGF+oHAbM8/9wzZkAdAg8SFXY=
Subject key identifier:   37:FF:51:A2:FA:91:49:B7:CF:90:7C:C1:DA:40:B5:E7:05:9A:F8:AC
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       018571BA18A813821E03555E49F3AC16161A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa
Signing time:             Mon 02 Jan 2023 09:04:59 +0000
ROA not before:           Mon 02 Jan 2023 09:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13020
IP address blocks:        94.45.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:18:a8:13:82:1e:03:55:5e:49:f3:ac:16:16:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  2 09:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37ff51a2fa9149b7cf907cc1da40b5e7059af8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:e4:cc:45:94:2c:be:cd:1c:c4:f3:62:a4:
                    45:08:9d:20:db:8f:5c:5a:19:61:7f:5a:86:d3:59:
                    35:e7:11:d1:90:b2:e1:d8:93:d4:c6:4c:12:91:51:
                    91:4d:3c:27:2f:b5:fe:a4:28:71:20:bd:2b:1a:36:
                    98:42:dc:03:af:51:66:7d:4e:b0:98:31:31:f8:97:
                    5e:8f:a1:a2:d9:c7:b9:83:10:8b:f8:24:da:f8:6f:
                    c7:cb:57:52:c9:f6:99:f7:a0:fc:32:6f:63:9e:ba:
                    51:f4:b8:d6:f8:4a:2e:08:e6:4c:4d:bd:cc:6c:8a:
                    9a:c9:98:d5:c5:c0:ef:7b:20:5f:94:68:fb:1d:f1:
                    ca:d8:d6:08:11:9b:32:a7:97:72:f0:5a:46:af:ca:
                    c4:e8:ca:e1:4a:58:c0:4b:e1:87:e5:e0:5c:aa:6d:
                    4f:14:63:97:3b:4c:cf:54:96:de:dd:62:36:90:e6:
                    4a:06:c0:f4:79:92:45:a7:4e:66:05:48:d9:79:50:
                    02:b2:20:a7:45:f0:04:32:1a:e9:2a:b2:7c:01:98:
                    c1:29:38:67:eb:fa:6d:6d:e3:78:0c:7d:3d:b9:40:
                    a8:e5:22:0c:cd:f4:17:ef:9d:6b:49:75:a9:4d:1f:
                    02:1b:6d:1c:73:65:12:9a:2a:73:81:98:26:81:2a:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:51:A2:FA:91:49:B7:CF:90:7C:C1:DA:40:B5:E7:05:9A:F8:AC
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/N_9RovqRSbfPkHzB2kC15wWa-Kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:a2:ef:69:c7:11:6b:59:ce:5d:00:e7:01:1b:bf:a2:d2:
         48:49:d9:cc:c7:10:75:20:99:1a:a1:9a:1b:ca:fa:5f:71:1b:
         53:b6:36:17:d3:5e:1b:fd:6b:de:a7:86:e4:8b:ce:6e:70:83:
         24:3d:44:98:5f:5c:47:3e:df:b0:fe:33:90:e9:86:f1:b4:f0:
         eb:82:ab:49:a4:26:28:d9:c8:d1:7c:44:01:a5:f0:42:cd:f0:
         7e:5d:6e:a6:0c:c1:10:d2:ca:cb:34:5d:0e:42:03:72:56:83:
         e9:75:c3:df:72:bb:a8:12:6e:00:52:04:4b:5f:6d:a7:cf:88:
         57:59:b4:1c:36:45:d3:79:38:95:58:ab:60:fa:94:bf:8b:f8:
         1b:95:c2:30:61:7f:98:6c:b6:c3:d4:6b:4a:cf:09:3f:89:0c:
         e7:4b:cf:de:ce:98:eb:6b:d5:bf:44:e4:d3:3f:97:96:3d:ba:
         21:17:00:8f:1b:a0:b7:29:aa:f7:21:be:f3:c1:35:27:ca:11:
         a2:b1:c0:de:14:54:d5:ed:a0:0c:0b:93:9f:f4:11:c9:35:c3:
         93:55:73:48:16:c2:ee:4a:8d:e6:c3:41:1a:64:3d:c3:f8:21:
         84:3a:42:15:17:e2:3e:17:3b:7b:cf:97:de:d3:ac:5d:b9:fc:
         00:cf:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----