Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/dvsfUNnOmyihhrGrhCzQ59UNsaE.roa
File:                     dvsfUNnOmyihhrGrhCzQ59UNsaE.roa (raw, json)
Hash identifier:          vgvgVWLrXNQJ+XUlqQgp+x1c9uWR7R1QsllcVKrOOC4=
Subject key identifier:   76:FB:1F:50:D9:CE:9B:28:A1:86:B1:AB:84:2C:D0:E7:D5:0D:B1:A1
Certificate issuer:       /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial:       01856F2FFA10D4EDBD240F7A40461A223A50
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/dvsfUNnOmyihhrGrhCzQ59UNsaE.roa
Signing time:             Sun 01 Jan 2023 21:14:53 +0000
ROA not before:           Sun 01 Jan 2023 21:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35224
IP address blocks:        185.192.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:fa:10:d4:ed:bd:24:0f:7a:40:46:1a:22:3a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
        Validity
            Not Before: Jan  1 21:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76fb1f50d9ce9b28a186b1ab842cd0e7d50db1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:03:d6:2c:cd:5f:97:2c:1b:99:ee:df:f5:
                    04:46:62:7a:42:de:69:e4:db:a0:08:0b:6f:ea:97:
                    80:9e:c6:11:dd:38:61:93:5d:16:fc:a1:94:e0:51:
                    89:63:4d:3b:94:58:2c:2c:06:fc:22:17:79:e8:8a:
                    01:2c:be:65:84:53:0b:93:14:2e:56:8c:37:0b:e2:
                    3e:cb:28:de:d0:43:2c:7a:32:79:7d:c2:e3:e2:eb:
                    73:77:98:54:4a:98:5f:4a:5e:1d:af:4a:73:c0:ad:
                    eb:6f:93:ca:a8:97:2e:61:1b:20:09:d1:13:e3:a4:
                    00:6f:a7:20:f6:07:59:b5:8c:58:86:7d:44:cb:ee:
                    4f:08:28:76:b4:bf:9b:cc:ed:36:8c:09:0d:e9:43:
                    6e:ee:9e:2e:77:df:53:aa:e3:94:de:8e:38:7a:84:
                    4c:35:74:a8:75:f2:0e:4c:ed:89:7e:98:87:db:6c:
                    2d:43:d4:ee:8b:31:0c:3c:35:87:7c:b3:61:2b:de:
                    ef:be:bf:6f:7c:a5:e5:36:ab:b1:3e:e3:41:3d:57:
                    be:ca:ea:03:7a:84:47:dd:c8:ec:ad:ec:8d:a6:ea:
                    35:79:42:c0:d6:fa:7d:86:ad:0b:08:e3:f4:e5:4d:
                    75:cd:eb:fd:42:40:f3:ef:18:45:fc:6c:f5:03:d1:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:1F:50:D9:CE:9B:28:A1:86:B1:AB:84:2C:D0:E7:D5:0D:B1:A1
            X509v3 Authority Key Identifier:
                keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/dvsfUNnOmyihhrGrhCzQ59UNsaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:9a:c9:a7:2a:6e:90:89:8a:d6:3d:18:d1:77:e5:df:fa:cf:
         2e:26:dc:3a:d4:68:e6:b2:e4:7e:f6:05:f5:52:28:04:16:20:
         52:1c:9f:62:88:33:29:e4:23:6b:3c:f4:2b:9c:b0:3a:41:99:
         64:31:64:c2:87:18:35:81:90:6e:1d:9f:2a:2b:36:8a:56:f5:
         4f:55:28:63:5a:e0:b0:0b:5b:27:57:b1:d5:dc:73:d6:5d:a2:
         93:fd:80:9b:85:e3:24:1d:07:66:dd:b5:ea:9e:35:ea:c7:2a:
         76:51:92:a9:65:b6:fd:c1:12:08:0a:c8:4f:e7:aa:79:f9:59:
         57:d3:07:35:20:c2:12:40:47:79:1c:c3:0c:b6:44:c0:b8:07:
         a7:d9:36:30:c2:7e:c7:41:51:b6:4b:49:b7:62:f0:2c:3d:a8:
         1b:99:95:90:61:17:f6:08:80:7f:3a:7d:62:fa:e6:7a:f2:37:
         47:87:2d:c1:9f:86:b2:0f:dd:17:14:28:b4:4e:2e:1c:d0:b4:
         79:9d:d0:b4:54:8f:c1:e1:b0:dd:4b:4f:c6:1d:cc:2c:4f:dc:
         7e:9c:94:c9:74:a5:1d:8b:49:35:9f:df:36:73:35:d8:8c:c0:
         84:91:27:6e:02:2f:33:34:e0:b9:20:03:f9:ac:35:0b:ca:a9:
         c9:3a:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----