Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa
File:                     Q_bARaCK2_9aG-8XjG4FFnd96R8.roa (raw, json)
Hash identifier:          Tr9NAI+vv/xJUxcR53Nzbpu8Xv4dlXzAEjHVVykwbAg=
Subject key identifier:   43:F6:C0:45:A0:8A:DB:FF:5A:1B:EF:17:8C:6E:05:16:77:7D:E9:1F
Certificate issuer:       /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial:       01856EEFD50BBF579DDD75058D9CE6B4BA85
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa
Signing time:             Sun 01 Jan 2023 20:04:49 +0000
ROA not before:           Sun 01 Jan 2023 20:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        185.12.32.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:d5:0b:bf:57:9d:dd:75:05:8d:9c:e6:b4:ba:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
        Validity
            Not Before: Jan  1 20:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=43f6c045a08adbff5a1bef178c6e0516777de91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:09:7f:a3:0a:62:15:c6:f5:8d:77:ce:a4:
                    f9:5a:a0:f3:f1:6c:7c:66:24:36:3b:b4:66:a0:68:
                    f8:30:0f:11:e9:6f:59:8e:c5:f8:57:52:5a:1e:64:
                    f4:22:fc:d3:b9:cb:8c:82:79:66:ce:a1:c6:01:85:
                    ac:a4:2a:78:98:a0:49:df:b5:df:f9:72:ff:a3:3f:
                    1e:c4:38:60:3f:85:3a:30:a8:c3:05:65:e0:13:68:
                    69:5e:1b:99:a6:a3:6c:5e:71:52:91:2e:fc:1d:55:
                    00:da:03:af:fd:b3:18:f3:f6:e4:1a:2a:22:4e:d2:
                    af:55:d5:40:0c:ba:69:e2:12:f2:aa:59:f6:82:23:
                    75:ca:1c:e8:e1:46:e1:b2:e3:4a:b5:ab:62:94:e7:
                    75:7e:5f:fd:4b:06:22:ef:69:05:7d:2b:0c:79:7f:
                    dd:eb:8a:3e:90:e8:d7:5e:ca:3b:f9:ab:f0:a1:a7:
                    30:3a:b2:fe:c6:72:b9:08:ec:06:85:0c:71:d0:d9:
                    b1:61:17:da:54:5c:bb:af:55:40:5a:e9:38:96:0b:
                    73:7b:92:2e:c6:55:12:46:a6:8f:c3:37:cc:0e:67:
                    19:6b:fc:2e:e0:b9:32:e5:67:97:b1:bc:53:e0:e9:
                    40:20:c9:29:a0:d8:50:27:86:e8:ca:34:9c:46:71:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:C0:45:A0:8A:DB:FF:5A:1B:EF:17:8C:6E:05:16:77:7D:E9:1F
            X509v3 Authority Key Identifier:
                keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/Q_bARaCK2_9aG-8XjG4FFnd96R8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:27:05:75:91:3e:2d:67:c0:4c:6a:81:ce:ac:aa:3d:36:86:
         f2:26:49:7f:72:df:79:84:b9:d5:2f:49:59:e3:1f:63:b8:fd:
         ba:2a:e2:e2:a3:ff:13:37:b4:72:0a:5e:aa:d7:13:f1:63:ce:
         f6:75:47:80:e1:03:bd:75:4f:3b:f3:2c:b8:93:65:d2:56:2f:
         aa:70:bc:82:71:12:fb:89:da:46:ad:c5:36:aa:65:f2:76:fd:
         cd:55:00:ab:e4:54:31:ff:77:da:07:b1:36:a8:33:34:60:c7:
         55:fa:60:b5:e1:e5:40:fe:47:0e:15:82:bb:bf:f5:c2:b2:e7:
         82:9f:f8:9e:1c:b5:7f:50:95:33:ea:8c:26:61:75:32:81:0b:
         fe:a6:c1:02:a5:02:56:37:8f:42:12:f0:1b:9a:ff:f1:a7:71:
         6e:87:5f:93:bb:90:e7:90:c4:92:cc:ff:ca:87:6d:7e:20:d1:
         09:c6:27:08:97:d1:8d:d7:15:b3:2a:34:e5:d4:1e:46:9a:0f:
         2a:b8:2f:9d:aa:ae:cd:fd:62:75:c1:61:ad:83:ef:1c:bb:e2:
         d6:71:ee:86:62:7d:8e:47:93:2f:01:cc:0b:88:92:78:cc:7d:
         cf:4a:f6:70:55:d1:9d:e1:90:18:66:f7:95:6f:6a:c0:dc:36:
         65:fc:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----