Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/s07DjlT09uUhV7tv4rO3VP3_yVw.roa
File:                     s07DjlT09uUhV7tv4rO3VP3_yVw.roa (raw, json)
Hash identifier:          2EFt01QguXrQ312bEbKoCDOmP6cDHiSri40M4WyGSSA=
Subject key identifier:   B3:4E:C3:8E:54:F4:F6:E5:21:57:BB:6F:E2:B3:B7:54:FD:FF:C9:5C
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       018C3355AB442FB537F277B658B9100CED54
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/s07DjlT09uUhV7tv4rO3VP3_yVw.roa
Signing time:             Mon 04 Dec 2023 05:38:21 +0000
ROA not before:           Mon 04 Dec 2023 05:38:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203187
IP address blocks:        185.82.80.0/22 maxlen: 24
                          2a05:8e00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:33:55:ab:44:2f:b5:37:f2:77:b6:58:b9:10:0c:ed:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Dec  4 05:38:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b34ec38e54f4f6e52157bb6fe2b3b754fdffc95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ca:40:3d:74:c9:48:a3:84:44:76:f9:ac:e6:
                    f7:30:23:0b:25:7f:bb:db:05:23:0e:be:21:21:ab:
                    6f:cb:c4:c0:7b:b3:af:85:b7:db:54:f5:f5:5a:c8:
                    48:5d:b6:b9:e5:d7:03:1d:8d:8b:e4:5b:43:9b:87:
                    d5:35:aa:2f:a6:70:b4:42:3d:bc:17:5b:19:17:49:
                    81:1e:d0:d3:54:28:68:ef:45:9b:63:91:8a:41:8e:
                    12:5d:fe:ef:33:91:f9:4d:11:c3:30:97:74:af:67:
                    dd:54:d4:6b:fa:8d:77:12:ef:10:71:9a:42:84:51:
                    7f:4e:32:9d:28:5a:01:75:00:10:73:de:49:60:b5:
                    47:6a:7e:25:ec:b8:0d:34:e3:e8:a1:03:8c:6b:fc:
                    64:d8:3e:80:3e:18:b4:2e:14:95:0f:ed:cc:04:aa:
                    0d:43:d8:7b:06:71:a4:4b:ce:55:d6:5f:9f:ab:a4:
                    57:d6:a6:23:38:e0:54:a2:4c:b9:1c:83:d2:e3:65:
                    a0:1c:0f:a5:98:39:98:5a:3a:0c:f0:d1:77:71:b6:
                    52:7f:66:27:f5:9d:79:4a:3a:a1:62:b0:b4:be:83:
                    cc:69:25:0f:a3:5c:bf:04:ea:c9:52:5b:12:8c:2c:
                    eb:47:38:08:1f:0b:98:ac:2c:8a:9f:7d:16:26:cf:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:C3:8E:54:F4:F6:E5:21:57:BB:6F:E2:B3:B7:54:FD:FF:C9:5C
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/s07DjlT09uUhV7tv4rO3VP3_yVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.80.0/22
                IPv6:
                  2a05:8e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:67:a8:25:0f:6a:c4:64:8d:df:65:ef:7b:7b:fa:93:0e:
         f9:26:88:a2:ac:8a:bf:8f:b3:54:4d:ca:07:70:e6:96:9b:88:
         9e:e8:2b:33:9a:40:ab:23:86:91:db:66:51:08:cd:e0:b3:16:
         6f:a6:d1:84:a8:ad:7f:05:4d:4e:d2:a5:f9:59:8f:1f:aa:76:
         c0:fa:15:7e:6d:e0:20:1e:b0:cc:84:38:16:8c:3b:6d:2a:19:
         27:45:7e:af:cb:1a:8c:02:87:e5:28:3e:0e:42:54:9b:2a:f8:
         59:22:f1:80:e2:11:56:ea:87:62:9e:fd:9c:fb:94:a5:a0:1b:
         04:83:b8:8f:50:72:c1:73:2d:f5:cc:b7:41:90:f7:ab:70:28:
         0d:02:b7:7b:17:69:48:34:8e:53:d6:a5:d0:ac:50:99:9a:0e:
         21:be:77:09:2b:98:c8:91:cd:ec:15:68:c2:5e:4c:5e:56:7b:
         a1:5f:01:fe:e4:d7:c4:db:42:20:2f:71:6c:4b:c3:c0:8e:1f:
         44:8c:27:ad:0d:dc:3c:ce:cf:16:0f:79:57:48:4a:a1:22:6a:
         64:78:0e:23:18:42:24:8e:af:bb:a8:c1:56:67:f3:7b:9c:74:
         e8:24:5f:86:68:57:de:fc:db:6d:c8:0a:19:6c:6b:31:19:a1:
         8f:e8:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----