Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z9SgLfTj1PAe22dOT_zTBs1fgrM.roa
File:                     z9SgLfTj1PAe22dOT_zTBs1fgrM.roa (raw, json)
Hash identifier:          itC/ypGCxHSozdbYZ9nj+Nry3eeWfnnlg8+D/gbFb7c=
Subject key identifier:   CF:D4:A0:2D:F4:E3:D4:F0:1E:DB:67:4E:4F:FC:D3:06:CD:5F:82:B3
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       01856DC199278086E44F6882575B9996BEC6
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z9SgLfTj1PAe22dOT_zTBs1fgrM.roa
Signing time:             Sun 01 Jan 2023 14:34:42 +0000
ROA not before:           Sun 01 Jan 2023 14:34:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42337
IP address blocks:        178.239.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:99:27:80:86:e4:4f:68:82:57:5b:99:96:be:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan  1 14:34:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cfd4a02df4e3d4f01edb674e4ffcd306cd5f82b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:04:94:e6:c2:f0:74:81:cd:78:98:bd:71:
                    32:ad:a3:dd:37:38:c1:79:d9:c9:1f:9b:8a:d6:71:
                    1c:ac:68:d4:06:4e:85:73:5c:0a:46:a9:82:e1:06:
                    c3:90:4b:ae:d6:c6:a6:64:d3:88:bf:8b:6c:1e:ba:
                    89:41:6e:09:37:ac:80:62:c6:bb:cf:1b:7f:7f:b0:
                    7f:a5:7e:6d:f9:7e:c7:e2:0d:76:0c:98:5c:1a:ef:
                    b9:2d:99:27:1f:2e:6f:f2:22:a6:76:ac:60:78:22:
                    7d:19:13:04:c0:60:8f:5f:7d:16:31:73:da:ed:c4:
                    8a:06:b5:53:b8:0b:c4:f3:76:c6:d3:e2:5f:f7:1a:
                    e2:3d:7f:e9:6b:7c:1a:d2:88:09:94:5b:48:79:16:
                    38:72:02:e4:49:2a:80:22:d7:92:df:aa:0a:bb:9d:
                    58:d9:06:4e:eb:d6:8e:35:ff:5a:26:d5:c1:2c:e6:
                    7a:f0:6d:6f:69:b0:d8:eb:63:fb:ac:6e:16:36:c1:
                    5e:43:79:4d:cf:c7:40:94:44:3c:72:9c:14:54:19:
                    1a:bd:b4:db:91:c6:94:9b:8e:2f:28:fd:3c:28:8b:
                    b7:42:c8:d8:72:75:1f:c0:20:4e:17:80:74:97:6c:
                    7f:03:fd:85:b3:2f:31:36:f4:16:d3:92:9a:95:52:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:A0:2D:F4:E3:D4:F0:1E:DB:67:4E:4F:FC:D3:06:CD:5F:82:B3
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/z9SgLfTj1PAe22dOT_zTBs1fgrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:c7:33:eb:30:c1:1b:70:10:e1:65:dc:66:06:2a:2a:16:
         7c:2f:59:72:ab:94:31:9f:52:c5:5d:7e:73:12:a8:5f:8b:70:
         d5:53:40:eb:b0:21:75:28:7e:1d:93:ef:7b:2d:65:3b:19:2e:
         28:cd:79:58:bc:db:92:bf:9a:81:de:ac:9f:2d:f2:b7:e3:c5:
         47:b1:98:6e:c4:a6:fd:db:45:aa:99:d9:ee:6c:95:c5:9b:d9:
         b6:8c:53:0d:93:4e:ae:2b:cd:5f:8c:a5:1a:80:e0:7e:ee:5e:
         c0:4a:c8:4c:e6:c9:25:7b:bc:e1:93:83:62:64:49:d9:26:6e:
         72:9b:1a:ed:37:89:8c:94:25:a5:a7:2f:c2:ca:c2:cd:c8:ef:
         0c:57:02:b0:e9:25:f5:f5:49:de:ed:5d:9e:08:49:5e:16:16:
         c5:de:b7:f0:7d:cf:de:cb:11:0d:2b:c5:54:39:b6:3d:8d:cf:
         23:7e:46:3e:e8:52:bb:1e:92:9d:57:60:5e:4c:4f:76:2f:11:
         f0:18:c0:dc:5a:2f:36:5f:60:84:7b:70:36:5e:60:14:9f:65:
         92:28:5b:12:fd:e5:32:6f:ec:81:96:a2:6a:fa:5d:e6:11:67:
         22:9d:c9:77:10:bf:6a:56:d8:41:c4:d6:15:04:ab:c5:1f:2d:
         37:93:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----