Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/nZPrp428Hts8dhEYGrKMoMpbAzE.roa
File:                     nZPrp428Hts8dhEYGrKMoMpbAzE.roa (raw, json)
Hash identifier:          7W8/fDFlWS8kP+AzQKo9QIopPo8e24MASVxa1Lm6e38=
Subject key identifier:   9D:93:EB:A7:8D:BC:1E:DB:3C:76:11:18:1A:B2:8C:A0:CA:5B:03:31
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       018571DE8957AFA895B9D24C1F70B1FB11D4
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/nZPrp428Hts8dhEYGrKMoMpbAzE.roa
Signing time:             Mon 02 Jan 2023 09:44:47 +0000
ROA not before:           Mon 02 Jan 2023 09:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201304
IP address blocks:        212.18.248.0/24 maxlen: 24
                          2a04:2b00:13ee::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:de:89:57:af:a8:95:b9:d2:4c:1f:70:b1:fb:11:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Jan  2 09:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d93eba78dbc1edb3c7611181ab28ca0ca5b0331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:22:0f:c7:b4:1f:06:15:2b:c6:13:e3:bb:
                    dd:ad:cd:2c:1c:94:f6:66:96:32:84:1f:f8:b2:fc:
                    16:79:35:be:67:5b:da:57:87:1d:a7:5c:84:07:96:
                    15:e4:c3:39:63:b3:3d:8a:1d:b2:81:26:54:c3:91:
                    10:83:41:34:fc:cd:0c:ca:62:cf:74:13:89:07:4e:
                    fd:6a:51:17:37:28:1d:56:b3:8d:be:16:18:72:e0:
                    48:18:b6:bc:42:5e:73:78:9a:49:ba:e2:da:19:27:
                    88:2f:f0:10:46:b5:d5:bf:19:d1:b5:9f:e5:f7:f8:
                    19:b0:fa:57:96:3e:58:66:c6:a1:6b:52:3f:19:1a:
                    dc:ef:7a:a0:45:aa:c3:e4:2e:7e:f8:7c:84:07:cd:
                    e1:ac:3b:e8:0c:5e:a6:67:ad:89:66:99:2e:13:46:
                    16:6b:ef:01:50:63:d2:6c:41:42:84:c6:fe:de:8c:
                    06:c4:c1:b1:37:b8:63:07:2f:ab:9d:6a:5e:d3:28:
                    b6:2f:fe:c7:33:a1:35:f2:74:06:9f:26:ce:a0:56:
                    4f:e9:5d:57:e5:ef:74:4a:6e:55:b7:f7:b4:16:ab:
                    0d:fb:96:b7:fd:58:4b:17:cf:ce:2b:57:83:9c:84:
                    09:c6:6c:1e:d5:0a:e1:f1:b0:1d:0e:f8:a4:1d:81:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:EB:A7:8D:BC:1E:DB:3C:76:11:18:1A:B2:8C:A0:CA:5B:03:31
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/nZPrp428Hts8dhEYGrKMoMpbAzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.248.0/24
                IPv6:
                  2a04:2b00:13ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:75:ec:5d:26:3b:43:93:7f:46:c3:26:7c:3d:53:ff:ab:15:
         31:a1:fe:59:06:52:d8:a1:c8:45:74:d1:ef:be:52:87:49:00:
         f1:5f:59:a0:c2:dd:9f:07:9c:95:0b:d0:ed:54:ce:c8:83:32:
         da:4f:4b:fc:41:63:b6:63:e7:e5:dc:5e:9b:f6:4f:a1:d4:cc:
         b1:51:ad:79:f0:8a:e8:72:4b:9e:8a:4b:d0:98:f8:61:7e:11:
         71:90:82:a9:e2:d0:cb:09:49:22:0e:c4:a4:ba:d6:48:42:91:
         5b:24:1f:7a:b5:e3:5f:8b:1c:d4:c4:7b:10:26:e1:0d:04:e9:
         1b:a9:6e:19:7b:67:6d:08:5f:f0:75:a0:7c:f7:fb:bf:86:99:
         75:24:69:0d:ab:0f:23:b6:aa:17:42:c3:20:55:3d:97:b1:60:
         29:e4:c2:98:97:03:3d:b8:fd:05:b8:6b:d4:c9:e0:8f:2b:87:
         54:4a:21:21:1c:c2:10:a1:5b:fb:5d:10:d3:ea:c3:77:e0:3a:
         c6:78:66:22:10:9b:92:17:90:f8:6b:99:18:1f:1f:90:e2:cb:
         6f:56:8f:8e:b9:46:dd:f4:6c:b0:a3:c2:4c:7d:9b:21:ef:b4:
         f4:3e:57:6d:06:2f:90:7d:8e:ed:ee:fa:8b:a0:dd:27:bf:47:
         70:60:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----