Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/0Ff_T2z4R_Gb_Ie7wXBOyWVQ4A0.roa
File:                     0Ff_T2z4R_Gb_Ie7wXBOyWVQ4A0.roa (raw, json)
Hash identifier:          bo33eqIKXhbQrAzaUnERRapPDtWKxE3oeH56qOAAq+w=
Subject key identifier:   D0:57:FF:4F:6C:F8:47:F1:9B:FC:87:BB:C1:70:4E:C9:65:50:E0:0D
Certificate issuer:       /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial:       0185722814B7C30FEB09CC2127D2DFD65047
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/0Ff_T2z4R_Gb_Ie7wXBOyWVQ4A0.roa
Signing time:             Mon 02 Jan 2023 11:05:07 +0000
ROA not before:           Mon 02 Jan 2023 11:05:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205452
IP address blocks:        185.218.40.0/22 maxlen: 24
                          2a0b:d2c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:28:14:b7:c3:0f:eb:09:cc:21:27:d2:df:d6:50:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
        Validity
            Not Before: Jan  2 11:05:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d057ff4f6cf847f19bfc87bbc1704ec96550e00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:8b:d7:95:d5:05:8a:f9:d6:11:f2:b1:59:
                    b3:ac:d6:f6:58:63:b8:db:cf:f8:21:1f:60:6a:0f:
                    fb:08:8e:8c:bd:88:90:bc:88:35:2c:d1:ef:fc:7e:
                    91:ce:63:89:be:a4:64:d4:63:1f:59:f6:0e:5a:dd:
                    b3:ac:55:c0:4e:90:cc:47:b0:4e:09:d2:8e:af:20:
                    51:e4:c5:d4:67:5f:72:fa:e7:4b:7f:23:d4:db:e9:
                    95:b4:be:22:1f:ce:6d:9c:ac:0c:d5:42:97:38:9c:
                    51:c5:be:46:ea:18:c9:90:da:2e:3f:58:e5:b5:de:
                    4a:8e:5b:28:ad:6d:ee:23:11:ac:df:ff:33:45:8f:
                    0f:bf:dc:77:c4:1d:39:fd:f7:7b:c8:cc:22:5e:56:
                    78:66:7d:a8:f0:da:b5:c5:1e:e8:e8:45:8a:b5:e4:
                    71:ca:4c:ee:4e:f1:8f:4f:1d:ce:b1:ba:18:cd:57:
                    c8:35:ea:21:f9:36:50:18:fa:93:80:37:f0:b6:fe:
                    37:44:ab:63:d6:56:e4:b1:31:28:dc:54:95:ea:6e:
                    8b:0e:c0:f3:63:c3:7a:59:1f:3c:7b:93:99:86:e9:
                    7e:02:ab:0e:51:04:a2:ba:af:cd:aa:3b:a2:ab:1e:
                    89:f8:b7:35:7d:eb:23:d0:eb:97:30:f4:e5:aa:97:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:57:FF:4F:6C:F8:47:F1:9B:FC:87:BB:C1:70:4E:C9:65:50:E0:0D
            X509v3 Authority Key Identifier:
                keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/0Ff_T2z4R_Gb_Ie7wXBOyWVQ4A0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.40.0/22
                IPv6:
                  2a0b:d2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:d1:60:a9:41:dc:3c:22:55:22:a9:42:6f:ac:e0:f5:a0:
         a4:28:84:41:86:61:c2:68:6a:ca:23:40:f9:ec:84:32:b4:82:
         2a:e8:3e:75:0b:f4:5a:fc:f3:6e:7f:7e:53:74:0d:be:88:9c:
         6f:4a:df:f9:18:7b:15:43:70:6f:f7:a1:c2:58:2d:0d:df:ff:
         65:d2:c3:7b:a4:0b:b5:a6:10:b6:29:a4:0b:39:9b:96:52:7f:
         8c:cc:e1:1d:9a:cb:cd:cc:ee:58:2f:44:60:c6:4c:1b:a6:75:
         85:2e:85:6f:b3:42:58:44:b4:3a:dc:14:17:95:a3:1c:92:47:
         8f:bc:cc:94:27:56:7b:c7:d0:a8:45:aa:b2:c7:3b:6e:41:6f:
         fc:be:a4:d1:02:81:3d:b6:90:7c:d3:2c:24:e7:fe:b3:b5:e3:
         e4:71:b8:50:0f:22:2a:71:e2:aa:16:c3:a0:65:a3:87:6f:55:
         d4:c0:69:77:62:a4:52:e5:a4:c1:79:43:9b:b3:f8:2f:60:c4:
         68:e5:73:2b:55:95:7a:b4:24:0b:09:4c:7a:74:42:59:c6:bd:
         74:2d:27:eb:33:81:38:7a:cc:2e:38:85:93:1b:18:49:2b:bb:
         38:f6:7f:c2:8c:a8:b5:cc:eb:6f:58:0a:56:83:13:e5:dc:4f:
         1e:fc:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----