Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/ujsXnx2ZTk5j_mK7PCo8yvDp_s4.roa
File:                     ujsXnx2ZTk5j_mK7PCo8yvDp_s4.roa (raw, json)
Hash identifier:          pebAU7EgMz629bFCIs25i8fAaQIcFSNfHYqXLro6Ea8=
Subject key identifier:   BA:3B:17:9F:1D:99:4E:4E:63:FE:62:BB:3C:2A:3C:CA:F0:E9:FE:CE
Certificate issuer:       /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial:       0185712779DEA8C58D202C43C8C006E35906
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/ujsXnx2ZTk5j_mK7PCo8yvDp_s4.roa
Signing time:             Mon 02 Jan 2023 06:24:50 +0000
ROA not before:           Mon 02 Jan 2023 06:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47366
IP address blocks:        185.62.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:79:de:a8:c5:8d:20:2c:43:c8:c0:06:e3:59:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
        Validity
            Not Before: Jan  2 06:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba3b179f1d994e4e63fe62bb3c2a3ccaf0e9fece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7f:12:11:db:cc:0b:01:b0:43:af:7a:c8:96:
                    d3:e7:d1:a2:3c:7e:0f:33:80:80:df:15:11:71:b9:
                    43:29:13:63:8c:08:49:5e:c4:c8:97:bd:52:c2:71:
                    3d:a8:ec:7e:b8:2f:9b:76:42:ab:c8:c6:e4:0c:11:
                    73:34:6a:70:e2:51:aa:02:9e:7f:6f:6f:ff:74:e1:
                    2b:83:ee:01:83:1e:03:30:9f:8a:a0:e9:13:8d:11:
                    32:75:a4:22:84:cd:11:85:15:cf:32:10:b9:01:c2:
                    4d:0a:ba:49:39:32:f5:37:ac:7b:21:80:78:84:46:
                    e7:da:f3:50:52:0b:1c:ae:53:94:0b:2b:bf:50:db:
                    62:73:0e:5f:6c:df:a6:10:ba:0f:ed:58:b0:39:67:
                    db:52:15:da:7d:ba:ce:3f:2b:3c:c1:ba:f0:85:74:
                    6d:50:d9:4f:76:2f:88:7c:98:81:a0:b2:4c:2c:03:
                    fe:5c:92:91:00:8c:2f:e9:42:cc:7c:6d:9d:8b:c2:
                    1a:09:a2:eb:7b:2a:14:e3:f6:e8:0e:1e:5a:ed:a3:
                    67:10:fc:69:4b:c3:6a:4c:90:f8:32:d7:a9:fb:f6:
                    7f:85:13:c1:17:43:6d:17:ed:62:a0:a8:21:ae:74:
                    29:1b:63:63:83:e3:14:50:d2:1e:f4:b8:ae:23:2d:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3B:17:9F:1D:99:4E:4E:63:FE:62:BB:3C:2A:3C:CA:F0:E9:FE:CE
            X509v3 Authority Key Identifier:
                keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/ujsXnx2ZTk5j_mK7PCo8yvDp_s4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:3b:d5:62:fd:9f:30:82:60:ac:08:53:4a:2c:a7:5f:30:f6:
         50:d3:a3:fd:64:8f:56:1c:b3:c1:b4:c9:42:3b:0c:01:b5:a4:
         8f:46:c1:fe:f2:36:ce:64:95:ef:2f:cf:2b:92:55:18:ae:b8:
         5d:7d:6e:4c:01:1c:aa:8e:9a:cf:fc:bf:0c:61:d5:21:c1:6d:
         f6:b8:53:77:80:19:b4:d4:8c:c4:42:ab:bf:7e:de:73:fa:30:
         7a:8c:08:14:8f:29:3f:58:93:97:8b:e5:ab:59:87:1d:40:45:
         6d:a6:f3:f5:87:62:52:14:aa:3f:17:d1:64:b4:a8:87:81:3e:
         cb:bf:86:0a:ff:a2:4f:15:10:27:f6:5d:55:2c:08:32:ed:e3:
         f7:30:de:eb:24:b1:91:f8:1c:de:14:04:4f:7d:07:70:1b:b4:
         76:08:b0:be:29:5d:51:a9:d1:e5:3c:38:8b:9f:2f:87:c7:64:
         b8:d7:43:3f:6b:3c:b4:ad:2d:24:ec:0d:07:f4:7d:2e:8e:a5:
         b5:3c:72:d6:ff:f1:e4:78:98:07:00:fd:ed:51:4a:b1:0e:ee:
         f0:56:82:ee:a9:b1:ee:1d:74:0b:76:18:a7:34:04:ef:80:bf:
         ee:78:27:68:fb:5d:0a:e3:1a:7b:9e:40:80:0d:17:21:6c:0d:
         71:98:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----