Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/SC5ayyhFUSuxNWF288cfGstXWyc.roa
File:                     SC5ayyhFUSuxNWF288cfGstXWyc.roa (raw, json)
Hash identifier:          fZEGbZoJoohrXpjTAHHeTs9osnNsb7tQ5bZUhyBfXRA=
Subject key identifier:   48:2E:5A:CB:28:45:51:2B:B1:35:61:76:F3:C7:1F:1A:CB:57:5B:27
Certificate issuer:       /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial:       018B8A20535641D25B771CA5FBD776143A51
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/SC5ayyhFUSuxNWF288cfGstXWyc.roa
Signing time:             Wed 01 Nov 2023 09:04:16 +0000
ROA not before:           Wed 01 Nov 2023 09:04:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205385
IP address blocks:        185.220.48.0/22 maxlen: 24
                          2a0b:eec0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8a:20:53:56:41:d2:5b:77:1c:a5:fb:d7:76:14:3a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
        Validity
            Not Before: Nov  1 09:04:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=482e5acb2845512bb1356176f3c71f1acb575b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:67:12:35:f8:f4:82:98:54:69:3c:ba:d6:
                    57:1d:63:24:fe:51:0b:79:ab:05:50:0b:69:21:4b:
                    9a:aa:5c:19:d6:25:a5:71:8e:ae:96:d5:d4:56:34:
                    74:06:75:bf:22:2d:64:33:da:de:8c:5b:57:10:f5:
                    77:f6:db:60:83:59:43:09:69:d1:4d:37:5e:77:b3:
                    9a:4d:d1:89:e7:97:96:e1:0d:44:5f:99:84:53:be:
                    15:cb:7c:79:02:b5:00:4c:d8:38:ff:05:a8:e2:52:
                    50:cc:0e:b8:ad:0d:11:66:9b:a3:51:4c:bd:a0:24:
                    a9:74:cc:6c:1d:1d:9a:7c:66:18:61:ca:be:b3:31:
                    af:be:97:a8:ba:06:ab:c3:93:41:a1:7f:b5:b0:ad:
                    ba:d2:2f:c9:37:c3:0f:dc:19:18:68:df:7b:f2:c0:
                    16:d1:d2:36:55:19:2a:b0:60:ec:24:0c:08:9b:8f:
                    d4:f4:51:79:95:31:00:21:54:22:6e:41:8a:c9:eb:
                    19:a4:72:23:1e:59:c4:55:81:48:44:fc:38:9b:41:
                    f3:d3:42:18:2d:77:b1:4a:24:d4:38:75:3e:cf:6d:
                    ea:91:ec:54:35:68:bf:b4:cc:b3:5a:08:34:5a:50:
                    9a:4d:2a:38:a7:36:fb:f7:45:ef:08:72:fe:c5:7c:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2E:5A:CB:28:45:51:2B:B1:35:61:76:F3:C7:1F:1A:CB:57:5B:27
            X509v3 Authority Key Identifier:
                keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/SC5ayyhFUSuxNWF288cfGstXWyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.48.0/22
                IPv6:
                  2a0b:eec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:40:8e:39:a3:da:19:2b:80:7e:ed:7f:9d:89:77:c6:dd:5d:
         67:a1:be:3c:1f:17:69:58:7b:9b:46:d4:b7:e8:bb:60:f6:99:
         d2:b0:8d:32:72:70:22:aa:12:7c:5e:46:e4:3c:ed:f7:46:24:
         d7:d9:c9:4f:da:6b:3e:4a:d5:5a:7e:9f:f5:3a:5f:4a:c1:0b:
         0b:f7:ee:46:85:37:21:24:8f:e7:e4:c7:21:f1:db:65:d3:4c:
         cb:2e:0e:61:6a:70:e5:9f:67:26:0d:2c:f4:5a:42:a6:f9:84:
         fe:3a:9b:f0:05:fb:0f:2c:a6:00:a5:8f:17:d7:9e:67:85:b7:
         26:b5:57:d1:67:38:56:d6:8a:df:85:64:f7:e2:55:49:fc:3c:
         51:20:63:3b:5f:a7:c5:61:38:0b:6d:89:80:71:1a:32:5c:80:
         b1:6f:83:ec:7a:de:1a:ee:d8:18:c9:05:ba:ca:2a:9e:1e:b5:
         80:2f:88:f9:ec:c2:1f:4a:bb:49:fc:32:f6:cc:d2:90:98:bc:
         34:a8:4c:65:b6:95:6f:5c:5a:ad:17:ad:3c:61:51:0e:c9:c0:
         6e:69:7b:57:0f:d4:41:d5:32:99:54:91:c9:59:d7:01:bf:e5:
         8e:ee:21:56:5a:42:19:bc:ed:c1:68:64:3b:94:c1:89:86:3e:
         c0:ef:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----