Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/L2QJiQ_YlKyMofBZy5HFrVlQmy4.roa
File:                     L2QJiQ_YlKyMofBZy5HFrVlQmy4.roa (raw, json)
Hash identifier:          DxMwf1JgaqYIuDTQ8CMnABcCUb442gtbqucHy0POY5M=
Subject key identifier:   2F:64:09:89:0F:D8:94:AC:8C:A1:F0:59:CB:91:C5:AD:59:50:9B:2E
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       01856D664543C20E19E2B9D589041D5C0B29
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/L2QJiQ_YlKyMofBZy5HFrVlQmy4.roa
Signing time:             Sun 01 Jan 2023 12:54:56 +0000
ROA not before:           Sun 01 Jan 2023 12:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51906
IP address blocks:        82.197.132.0/23 maxlen: 23
                          2001:7f0:101::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:45:43:c2:0e:19:e2:b9:d5:89:04:1d:5c:0b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Jan  1 12:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f6409890fd894ac8ca1f059cb91c5ad59509b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:14:a5:1c:20:eb:52:4a:2f:e0:6e:72:c0:
                    b3:2f:b2:69:7a:c2:4a:72:30:a7:e1:d4:27:02:dd:
                    23:af:66:3d:48:f8:44:9b:40:58:91:f7:82:6c:f3:
                    f5:bf:f3:8f:9a:60:ca:5f:29:78:9c:94:cd:b0:04:
                    c8:75:62:77:89:bc:6d:21:0e:38:f0:96:de:c4:2e:
                    4f:ef:74:fb:37:8b:95:94:08:ac:3d:3b:4e:12:12:
                    6d:74:a0:32:5d:61:ed:3d:20:c2:94:ff:0b:ea:06:
                    fb:c3:00:89:b7:a4:ca:82:ee:3a:4d:57:07:c6:d8:
                    5b:2a:e3:ad:a8:0c:7f:94:99:fe:c6:c7:c6:53:54:
                    c5:b2:b6:cb:10:8b:1f:e5:7e:36:94:88:e8:ee:3c:
                    c8:04:a9:ff:7c:e2:0e:88:aa:c9:f4:0b:38:df:23:
                    56:84:35:18:8d:d9:d8:f1:57:2d:40:a7:0a:68:e8:
                    d3:86:a5:98:74:ad:26:f5:4b:5a:78:06:1b:ba:57:
                    2e:f5:e4:8b:f8:d3:ca:fa:43:a0:de:51:09:7e:9b:
                    9a:49:99:80:c0:9e:7c:c5:ce:09:93:28:d4:65:e4:
                    ce:b8:9f:d0:b4:df:72:ab:1d:9c:ba:60:b0:6f:8e:
                    c0:7e:c3:62:18:ba:29:a1:d8:0f:bd:82:dd:9c:b8:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:09:89:0F:D8:94:AC:8C:A1:F0:59:CB:91:C5:AD:59:50:9B:2E
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/L2QJiQ_YlKyMofBZy5HFrVlQmy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.197.132.0/23
                IPv6:
                  2001:7f0:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:87:84:05:14:00:8c:cf:7a:17:5f:e8:a7:58:5d:d9:a5:
         a1:8c:43:3c:cc:a5:8f:88:d1:29:2a:b0:2b:4e:cd:9a:f0:ed:
         db:53:5c:23:3f:64:e9:f0:55:d2:5c:f0:02:70:2f:ea:00:3f:
         f9:98:99:23:18:67:e0:61:cb:67:db:6c:98:4b:1c:18:ca:5d:
         62:0a:19:81:90:34:34:73:f8:b6:e9:fb:52:38:80:63:9f:87:
         a5:14:a7:3c:44:9b:b9:a0:ed:ed:53:7e:ee:7b:aa:d9:c9:92:
         fc:0a:bc:f8:68:2a:b0:d7:b8:4f:c8:91:eb:f6:88:40:77:f1:
         9c:2c:cc:88:65:96:cd:d3:2c:dd:ff:a0:ef:c7:2e:c5:39:34:
         43:86:44:61:2e:ed:75:fe:12:ae:46:4e:2a:a7:88:c8:60:9f:
         ea:a9:15:3d:ab:90:09:e6:39:7f:44:5e:3a:11:ad:2c:eb:0f:
         58:5f:2c:61:30:ca:6d:71:ac:0c:9d:15:73:c9:19:5a:0c:df:
         dc:f9:71:17:3a:fe:7e:62:1f:e2:4a:1a:4b:37:81:f7:36:3e:
         14:41:69:87:76:03:0f:60:56:4f:d9:ad:4c:14:6a:25:d8:62:
         07:33:45:be:2c:bb:90:f6:0f:07:49:ed:15:9f:ce:84:8a:15:
         9f:74:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----