Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/yOyTqN0Bz5vLfpNNpMqZiDMogoI.roa
File:                     yOyTqN0Bz5vLfpNNpMqZiDMogoI.roa (raw, json)
Hash identifier:          247cC9PMQ1/xdZ4GTWSElyD2cHvzmsb/mEeV97kLRFM=
Subject key identifier:   C8:EC:93:A8:DD:01:CF:9B:CB:7E:93:4D:A4:CA:99:88:33:28:82:82
Certificate issuer:       /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial:       0185729ED68285788AF47FD3AE9639923145
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/yOyTqN0Bz5vLfpNNpMqZiDMogoI.roa
Signing time:             Mon 02 Jan 2023 13:14:50 +0000
ROA not before:           Mon 02 Jan 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204793
IP address blocks:        185.136.116.0/22 maxlen: 22
                          2a06:fc40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:d6:82:85:78:8a:f4:7f:d3:ae:96:39:92:31:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
        Validity
            Not Before: Jan  2 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c8ec93a8dd01cf9bcb7e934da4ca998833288282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:56:dc:ab:d7:78:37:17:10:b0:c9:fd:23:
                    b0:6d:be:a0:a0:86:67:c8:2f:ea:6f:ef:72:6b:78:
                    ef:5d:d0:9f:7f:f5:50:44:8b:c6:e1:3d:c2:27:58:
                    73:f7:14:08:2f:a1:22:25:15:2a:f5:4b:8a:a9:ba:
                    d4:7b:7a:a5:a0:c9:b5:6a:fd:af:55:df:c4:4d:9c:
                    2a:23:6f:b0:7e:2e:ac:5f:0a:56:df:d9:2b:bb:b2:
                    39:f1:35:44:03:d5:2b:20:9a:e4:41:40:09:b9:a9:
                    f4:de:c3:a0:92:e9:a0:32:21:a7:fc:d5:19:53:df:
                    12:97:e6:37:e3:fd:da:91:7b:3e:10:17:74:d2:89:
                    d6:01:45:db:84:07:d6:0b:be:8e:d5:15:ec:7c:e8:
                    1b:09:94:c3:59:ed:22:24:0f:25:98:24:dc:33:e1:
                    dd:5b:ac:1e:63:42:18:53:44:09:62:89:16:0f:5c:
                    58:79:5d:1b:4b:35:5c:c4:92:11:f2:74:45:fc:70:
                    93:c0:b0:ea:e2:9d:7d:4a:c7:6d:41:a0:9f:23:4f:
                    8a:6a:8c:0c:ac:1c:aa:67:85:32:4f:96:1f:52:a4:
                    cf:21:82:6f:3d:31:91:5f:61:af:ff:78:14:68:16:
                    f3:0c:61:7b:e6:3b:b4:cd:2a:25:b8:93:89:a2:6a:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:93:A8:DD:01:CF:9B:CB:7E:93:4D:A4:CA:99:88:33:28:82:82
            X509v3 Authority Key Identifier:
                keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/yOyTqN0Bz5vLfpNNpMqZiDMogoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.116.0/22
                IPv6:
                  2a06:fc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:a2:46:97:8e:b8:32:13:f7:c5:ae:91:28:d3:b0:b3:ad:
         86:f9:81:05:97:b2:49:ce:21:0e:83:42:f6:68:d5:12:e9:f6:
         0b:fd:b1:fc:fd:11:6f:f2:96:56:2d:a0:b0:1a:9b:b0:06:ca:
         2a:bf:fc:1c:a3:58:89:f4:e8:5f:f1:37:b7:1a:0c:27:18:83:
         fa:81:0f:a1:ae:54:b6:45:3e:c7:b0:40:cd:1e:0a:0b:61:01:
         19:36:cf:b6:21:d7:bf:4d:96:88:5b:6b:3a:7b:73:f8:db:44:
         3f:58:b0:2e:ce:f6:2d:35:4d:d1:e5:a3:f0:46:02:ae:55:00:
         98:8b:3b:b4:7f:94:11:17:59:aa:0c:bd:f8:51:bd:ab:93:49:
         2f:73:bb:ea:4a:c3:9e:dd:09:5c:da:10:1b:4a:21:8d:09:06:
         7f:00:a4:ba:eb:ec:07:7d:9f:5c:45:10:76:17:f1:de:ef:69:
         1a:db:54:b5:83:e2:ca:f9:0e:7e:94:3c:39:fc:22:db:ad:73:
         b2:e7:4e:c8:59:4b:be:55:86:b3:57:0d:38:99:5c:3d:58:38:
         55:85:0a:60:2e:62:bf:6d:38:96:54:94:d4:21:be:ff:66:d2:
         e2:d2:3d:a6:61:45:d1:68:95:1e:f8:40:d3:66:c4:e0:da:b3:
         84:73:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----