Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/RUdiLdJY88GXWsoOLvRiSFndZjs.roa
File:                     RUdiLdJY88GXWsoOLvRiSFndZjs.roa (raw, json)
Hash identifier:          whOVYdsVNUAFDVMcFf7KenyyHKNdmZ2ZRjCY8myUSnI=
Subject key identifier:   45:47:62:2D:D2:58:F3:C1:97:5A:CA:0E:2E:F4:62:48:59:DD:66:3B
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       0185728CA0F9C9C522B8F5F7C93BAF2C85D5
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/RUdiLdJY88GXWsoOLvRiSFndZjs.roa
Signing time:             Mon 02 Jan 2023 12:54:56 +0000
ROA not before:           Mon 02 Jan 2023 12:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57081
IP address blocks:        185.132.112.0/22 maxlen: 22
                          2a06:e180::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:a0:f9:c9:c5:22:b8:f5:f7:c9:3b:af:2c:85:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Jan  2 12:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4547622dd258f3c1975aca0e2ef4624859dd663b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:cf:88:b0:5e:a9:58:04:8a:93:36:39:7c:
                    6f:ae:4c:18:a4:77:52:1b:8f:e8:db:a4:71:42:c1:
                    6a:6b:f0:d0:66:ce:2a:b7:d8:50:1f:f6:6e:24:dd:
                    1a:66:44:d4:5b:12:56:6d:73:8a:f9:59:89:dc:a6:
                    d0:05:21:eb:a5:3b:8a:d3:18:96:1c:34:c5:c5:21:
                    52:c2:75:ba:b9:3f:4b:53:72:df:fa:37:01:96:c7:
                    e3:e9:82:ce:bc:7c:74:f7:80:8d:79:d3:19:7f:69:
                    62:c9:05:9d:04:3d:92:2e:05:8b:20:9e:6e:f9:b4:
                    75:f1:4c:bc:90:d6:3a:aa:76:b3:89:2e:4f:eb:51:
                    56:44:12:17:1b:e4:5c:13:12:ee:54:09:fd:9f:64:
                    56:3f:b2:5b:9e:31:ce:85:ac:6c:73:14:c3:be:f5:
                    48:7b:eb:cf:9c:ae:5b:52:d1:9d:08:74:9a:e1:56:
                    43:af:8e:a7:20:02:50:90:44:a3:8b:6e:62:d7:4a:
                    8b:8d:0a:8f:53:86:0d:14:cc:f7:84:88:11:10:61:
                    27:46:fe:9b:c1:74:0e:fb:19:3f:cd:a9:aa:81:8c:
                    e2:c7:7b:8d:0c:97:7a:35:45:53:c6:79:9d:fc:49:
                    23:75:b0:f6:f0:f9:de:ea:34:3a:1e:0a:09:98:86:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:62:2D:D2:58:F3:C1:97:5A:CA:0E:2E:F4:62:48:59:DD:66:3B
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/RUdiLdJY88GXWsoOLvRiSFndZjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.112.0/22
                IPv6:
                  2a06:e180::/29

    Signature Algorithm: sha256WithRSAEncryption
         ba:77:b9:d8:cb:38:b3:ca:a1:9e:f9:9b:6f:7d:ec:57:ae:53:
         a3:9b:d2:c1:cc:42:d0:0f:90:29:b8:01:3c:80:94:93:8d:b5:
         19:f0:df:07:e6:19:33:e5:34:21:df:84:d2:3b:13:81:ed:f5:
         dc:75:06:6f:f3:3f:ba:1d:e2:9b:0f:da:5c:37:fe:33:c6:13:
         33:14:8b:e0:5f:b7:45:e5:27:59:62:93:6a:bd:95:c2:d1:b7:
         02:45:54:3e:09:b5:6e:55:ef:e4:20:0c:60:2c:41:d9:24:92:
         59:3f:0a:d0:a5:6e:d4:cc:92:7f:49:a3:2f:35:ff:b4:27:48:
         18:37:18:23:2b:ee:9a:82:27:8b:22:c9:39:34:1e:72:52:a6:
         69:64:1b:f8:6e:a5:2d:ff:3b:e6:93:13:58:ce:61:30:81:ea:
         ca:fe:87:5c:ab:95:2c:ff:47:b3:b0:80:cf:b5:16:8f:6c:6e:
         9d:49:e4:1c:98:66:ad:dc:a8:3d:c0:fe:70:71:17:aa:f3:69:
         ab:44:ff:8f:90:50:91:9d:3b:60:3c:4a:b1:3f:f8:a7:4a:3e:
         60:4f:e2:97:f9:d6:64:3e:44:c6:09:40:7a:db:b3:50:dd:c4:
         91:5d:65:7c:5d:6a:20:bc:dd:75:94:9b:09:16:dc:14:7f:a9:
         19:66:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----