Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa
File:                     vYPLool2JSEft5GOgoySqhsRBXQ.roa (raw, json)
Hash identifier:          gbi9aqaV7uD6oJ8tlXhXMo0VIh7oOIL9Ch79JLIbq10=
Subject key identifier:   BD:83:CB:A2:89:76:25:21:1F:B7:91:8E:82:8C:92:AA:1B:11:05:74
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       0186E94520B98F1D2E87166416F15E128ECF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa
Signing time:             Thu 16 Mar 2023 07:14:27 +0000
ROA not before:           Thu 16 Mar 2023 07:14:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204916
IP address blocks:        84.54.36.0/24 maxlen: 24
                          83.171.240.0/24 maxlen: 24
                          83.171.240.0/22 maxlen: 22
                          83.171.243.0/24 maxlen: 24
                          83.171.242.0/24 maxlen: 24
                          194.113.105.0/24 maxlen: 24
                          2a10:c0c3::/32 maxlen: 32
                          2a10:c0c0::/29 maxlen: 29
                          2a11:200::/36 maxlen: 36
                          2a11:200:4000::/36 maxlen: 36
                          2a11:202::/32 maxlen: 32
                          2a09:4e01:3000::/36 maxlen: 36
                          2a09:4e01:4000::/36 maxlen: 36
                          2a11:201::/32 maxlen: 32
                          2a10:c0c1::/32 maxlen: 32
                          2a10:c0c7:3000::/36 maxlen: 36
                          2a10:c0c7:5000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e9:45:20:b9:8f:1d:2e:87:16:64:16:f1:5e:12:8e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Mar 16 07:14:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd83cba2897625211fb7918e828c92aa1b110574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:a8:07:99:41:41:7f:52:67:7c:b4:be:bf:
                    23:9e:1e:9d:ac:a3:66:ed:4c:09:46:a2:97:51:0c:
                    db:e4:a2:7b:ab:03:fa:b5:a1:0a:82:05:b1:ec:c3:
                    51:2f:a7:17:53:60:ca:76:45:00:5d:3f:69:09:5b:
                    35:93:56:f8:0e:0a:04:56:fe:77:90:86:1a:dc:fa:
                    f9:a5:07:30:33:03:e5:1e:58:46:93:6d:8c:65:b1:
                    fe:1c:78:db:80:cf:88:2c:1b:f7:14:0f:51:c5:15:
                    61:8c:ab:2e:d2:7f:94:33:ef:1d:a1:b6:dc:e0:8a:
                    a0:4d:e9:7a:82:a8:d0:b9:54:32:d2:93:25:f5:14:
                    62:ee:a2:8e:3d:8f:31:12:18:72:e3:07:b9:ca:70:
                    6f:b9:96:84:fd:b1:bd:87:3b:5a:0b:e6:8b:d3:49:
                    46:61:56:74:6c:7e:a0:35:6d:46:34:e0:f2:f3:e2:
                    94:c7:1d:18:5c:f8:2d:e5:af:84:0d:d9:83:97:fa:
                    78:66:a5:1d:66:56:d6:2a:3a:f1:9e:55:73:aa:d5:
                    27:12:4b:03:2c:12:70:e3:9b:86:5e:8b:e1:00:45:
                    b4:58:db:42:00:75:fb:ed:a3:cb:ea:5a:2c:1b:90:
                    7c:d7:3d:d4:26:85:80:54:c2:fb:16:18:f8:ac:08:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:CB:A2:89:76:25:21:1F:B7:91:8E:82:8C:92:AA:1B:11:05:74
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/vYPLool2JSEft5GOgoySqhsRBXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.240.0/22
                  84.54.36.0/24
                  194.113.105.0/24
                IPv6:
                  2a09:4e01:3000::-2a09:4e01:4fff:ffff:ffff:ffff:ffff:ffff
                  2a10:c0c0::/29
                  2a11:200::/36
                  2a11:200:4000::/36
                  2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1f:c8:12:ac:15:7b:45:dc:77:06:8a:d0:2d:16:ef:cb:57:af:
         13:d3:ea:4e:dd:08:b1:79:3a:a1:36:19:40:d8:68:27:e9:3d:
         5b:57:e5:64:29:31:d4:f0:a5:7c:38:de:d4:b6:e3:7e:75:2b:
         d0:f6:c0:9b:ca:f8:60:79:17:8f:16:28:d0:14:17:c3:05:a1:
         04:73:fe:ac:af:be:b8:e5:5a:13:91:08:4d:43:d4:22:86:51:
         1d:7b:3b:44:88:4f:5f:7b:59:2f:ef:9a:3b:20:72:bb:e9:c3:
         be:f0:2a:27:33:1d:24:82:3d:e7:2d:c0:06:38:25:df:28:db:
         d5:bf:db:d4:37:b3:c8:a3:f5:24:ed:ae:e6:e3:6c:eb:5b:ed:
         76:aa:ac:9b:ca:4c:01:f1:6c:ce:55:2c:89:b8:b2:b6:17:00:
         a1:3f:29:cb:47:56:24:c5:cf:9e:44:c2:5d:2a:3e:3e:91:22:
         77:e6:ea:59:ec:55:ac:51:bd:5e:35:bd:19:ad:41:db:9b:17:
         e3:64:5e:96:52:24:de:ae:65:31:2d:3e:d0:42:ce:79:dc:82:
         28:f8:10:0d:ff:d0:00:5c:1d:fc:cb:e9:84:1b:56:d1:e5:c0:
         41:8b:c9:73:16:97:9a:a1:3d:f0:8e:87:22:26:77:fe:b8:4b:
         db:9d:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----