Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa
File:                     FcS9IO29OhgqtM0XNEuq9vbRyb0.roa (raw, json)
Hash identifier:          j/57BLuIOUJVYT1WWd5L6pqtsvtG4o3bjFi2uo10eDU=
Subject key identifier:   15:C4:BD:20:ED:BD:3A:18:2A:B4:CD:17:34:4B:AA:F6:F6:D1:C9:BD
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       0185729EB86586C9E168EA4542FA1DB5C00C
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa
Signing time:             Mon 02 Jan 2023 13:14:42 +0000
ROA not before:           Mon 02 Jan 2023 13:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20769
IP address blocks:        91.208.87.0/24 maxlen: 32
                          2a04:a500::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:b8:65:86:c9:e1:68:ea:45:42:fa:1d:b5:c0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: Jan  2 13:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15c4bd20edbd3a182ab4cd17344baaf6f6d1c9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:60:c3:48:6f:bc:a0:74:07:39:c7:a4:ba:
                    08:42:b3:6b:2f:ce:13:a5:a4:7c:59:c5:da:99:39:
                    36:22:22:bd:cf:e1:e7:f0:73:21:2f:02:b7:c4:a5:
                    65:0b:88:2b:54:d1:bf:91:8b:50:f2:27:a3:7b:b5:
                    59:36:19:bc:71:d8:ca:09:1a:88:84:8c:57:f3:b4:
                    bc:c8:57:e2:10:7a:2d:0d:2a:78:00:3f:9b:29:d1:
                    86:43:3f:50:eb:db:fe:53:10:53:67:2f:e4:de:46:
                    ec:4f:bf:a4:0f:e7:64:46:ac:de:ac:6c:d0:54:69:
                    87:0e:bf:a1:b5:81:f8:25:8b:ac:f4:4e:3b:0b:6c:
                    b3:77:53:02:2d:e4:b0:9c:c4:58:95:05:d4:5e:f6:
                    a1:85:1f:ee:53:b0:48:a0:1e:94:b3:68:4f:b6:d5:
                    d9:77:f1:50:2d:b7:67:ce:b2:18:85:76:96:17:83:
                    11:58:74:24:f9:5c:50:e1:78:a2:13:db:58:0d:e3:
                    4f:3d:2e:94:84:51:55:52:e3:ee:26:86:e4:46:0d:
                    76:ea:d3:08:61:ac:a0:6c:3c:d1:bf:d7:a6:a0:b0:
                    1a:81:4d:a0:f3:49:6d:51:29:4b:99:d0:b4:8e:a1:
                    6f:ac:fe:9f:da:a5:61:96:c8:12:4f:81:16:21:83:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:BD:20:ED:BD:3A:18:2A:B4:CD:17:34:4B:AA:F6:F6:D1:C9:BD
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.87.0/24
                IPv6:
                  2a04:a500::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:b4:4f:49:a0:2d:f9:ca:e2:c9:3c:3d:e9:d4:95:ff:9b:
         cf:46:50:94:17:f8:7d:f4:c3:1e:4f:63:43:31:b8:1f:35:21:
         9e:d1:57:44:d1:e1:ac:43:77:7a:a1:30:e2:7d:9e:81:18:49:
         a8:d9:31:89:0e:a4:2d:18:9b:c5:c5:82:01:a1:6d:c3:7e:73:
         2b:f1:f5:0e:d1:55:87:e4:8d:3a:11:69:de:5d:da:53:c2:80:
         ee:55:e1:79:aa:86:4c:fe:42:7d:49:0c:81:cf:48:93:d3:2b:
         31:99:5a:bb:5f:a6:35:aa:72:ba:85:b4:4f:03:1c:cb:f0:e3:
         4e:82:49:e4:e8:fe:80:7b:0d:f3:93:78:e0:80:74:1a:51:9b:
         76:cf:44:78:26:13:6b:7a:52:4b:3c:10:0d:cf:e7:b0:46:de:
         de:3a:94:fe:6c:85:9a:3c:30:2e:1e:92:7c:29:33:4e:73:a1:
         c7:08:aa:08:2b:e0:96:2f:c0:1c:5c:b5:2e:a7:d5:98:9e:f5:
         f6:29:80:f4:ff:61:6e:12:28:3b:09:14:22:48:b4:62:dc:9a:
         5e:52:70:e3:5c:38:5a:e2:18:89:f5:71:2d:7c:f8:c7:7a:79:
         41:2d:94:41:aa:82:cd:97:fa:2f:e1:e5:8b:23:e6:96:5a:09:
         05:d5:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----