Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h2J-VybRAsXQBiMxphv_Hm0l12s.roa
File:                     h2J-VybRAsXQBiMxphv_Hm0l12s.roa (raw, json)
Hash identifier:          LrJmR0VYX6qCIku71Ki7nd7fdBXIcnX+Bffq/0KreTo=
Subject key identifier:   87:62:7E:57:26:D1:02:C5:D0:06:23:31:A6:1B:FF:1E:6D:25:D7:6B
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       01857169B35E1C9EDD8610B3C11297395A1D
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h2J-VybRAsXQBiMxphv_Hm0l12s.roa
Signing time:             Mon 02 Jan 2023 07:37:10 +0000
ROA not before:           Mon 02 Jan 2023 07:37:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200995
IP address blocks:        212.72.236.0/22 maxlen: 24
                          2001:7bb::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:b3:5e:1c:9e:dd:86:10:b3:c1:12:97:39:5a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Jan  2 07:37:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87627e5726d102c5d0062331a61bff1e6d25d76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:dd:d4:5a:2b:fb:d1:ef:75:8b:ae:91:b3:
                    bd:2f:6c:71:32:1c:ca:33:f9:3e:ec:3a:c4:d2:90:
                    b1:5d:46:f8:c1:81:b4:45:60:c1:ac:ee:1b:bd:b6:
                    b1:17:5c:fc:9f:df:11:54:c8:5e:d8:ca:a4:79:53:
                    80:1a:86:02:00:3a:f8:8e:13:04:80:31:88:e6:67:
                    b4:93:29:4f:f9:7c:ad:7d:e9:bf:09:f9:68:20:cb:
                    50:38:3b:9b:c8:f0:90:33:b8:8a:8e:11:b0:8e:f2:
                    a3:18:2e:69:6c:65:87:cd:4a:ac:85:e3:c5:8f:2d:
                    1f:c9:3e:58:02:26:fc:78:38:85:cd:a2:83:31:84:
                    09:eb:93:39:46:38:7a:f6:e0:38:a5:a8:8e:db:a9:
                    48:76:8c:dd:a6:fb:1c:7e:de:57:9a:ce:8c:b3:8c:
                    8b:5e:4c:46:8e:5c:12:2f:3f:26:d7:db:32:37:8f:
                    3a:c1:50:9b:2c:8b:7d:d3:6b:38:f4:e4:fe:21:00:
                    e7:01:52:3c:ea:85:96:c0:68:1a:34:fe:db:6c:34:
                    cb:50:8d:06:6f:6a:9c:13:c6:36:bb:49:c0:df:57:
                    a8:e9:99:12:3c:be:06:32:a5:33:c3:55:42:5e:9a:
                    68:4c:63:44:24:52:67:4a:e7:4d:32:91:40:4b:cf:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:62:7E:57:26:D1:02:C5:D0:06:23:31:A6:1B:FF:1E:6D:25:D7:6B
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/h2J-VybRAsXQBiMxphv_Hm0l12s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.72.236.0/22
                IPv6:
                  2001:7bb::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:84:d1:34:d9:ec:c8:bd:94:74:bd:e4:62:92:c6:22:80:cd:
         31:8c:44:0d:50:67:9e:61:95:a7:f1:c6:e7:84:27:db:ce:90:
         a4:d4:4d:ca:5e:2e:5d:ad:f0:e8:a1:69:65:88:82:11:ca:c3:
         f0:e2:80:16:25:be:f6:b1:24:ef:4e:84:79:2c:22:8e:ac:31:
         42:43:7f:96:b7:0b:a4:39:ae:53:83:c6:aa:75:d7:0b:e4:f1:
         06:88:67:13:73:fd:bb:5f:6a:6a:46:f6:03:60:cd:da:91:f0:
         d7:0e:27:bf:bb:40:97:69:b7:8f:50:c0:c2:5d:17:a0:56:70:
         f5:d1:50:a9:0b:61:a7:3d:75:58:f4:6e:ca:5b:bc:b3:73:36:
         73:f1:a3:0c:61:e5:a3:18:1f:15:13:f8:b1:2b:3d:e0:b2:fb:
         1c:70:26:5b:9b:fe:10:17:2b:38:03:61:cd:5e:a7:fb:2d:98:
         54:7f:63:3d:a3:6d:35:9b:a8:71:1a:57:fa:04:84:3e:c6:37:
         88:12:88:a7:f0:cd:3b:2d:9f:dc:f9:3d:a2:c3:55:d3:da:91:
         20:e2:ca:0d:36:88:62:f1:cb:dd:d7:e2:10:7a:f5:4d:db:92:
         ee:5d:0d:21:c7:a2:af:79:ad:c9:0f:4e:5d:5d:65:85:1e:69:
         e9:c3:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----