Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/abWIslWKOzkYjLXMWdQ26hS_B5o.roa
File:                     abWIslWKOzkYjLXMWdQ26hS_B5o.roa (raw, json)
Hash identifier:          sPYRbryouvxM80wBRIRIR5Ym3UQw8p2JNCJQ8P3GSno=
Subject key identifier:   69:B5:88:B2:55:8A:3B:39:18:8C:B5:CC:59:D4:36:EA:14:BF:07:9A
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       01856E6F9F030A9731285513198D92613E8B
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/abWIslWKOzkYjLXMWdQ26hS_B5o.roa
Signing time:             Sun 01 Jan 2023 17:44:46 +0000
ROA not before:           Sun 01 Jan 2023 17:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        195.42.144.0/23 maxlen: 32
                          2001:7f8:43::/48 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:6f:9f:03:0a:97:31:28:55:13:19:8d:92:61:3e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jan  1 17:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69b588b2558a3b39188cb5cc59d436ea14bf079a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c4:27:03:e9:b3:7f:98:bc:bc:19:06:32:f4:
                    32:eb:03:c6:35:9a:84:43:de:7a:fd:b1:a1:d5:3b:
                    71:ae:fc:cb:76:b6:20:17:11:f6:61:84:99:3b:8b:
                    73:65:48:e5:c7:ec:bd:fd:06:bb:de:71:66:05:be:
                    21:4d:af:eb:5d:12:46:02:57:72:0f:a3:dd:28:7c:
                    f3:8c:69:93:ef:33:a7:af:a4:b9:22:d2:63:b7:f8:
                    12:32:e3:da:81:74:91:1e:da:b2:7e:13:f7:ab:66:
                    85:ce:47:d5:27:a1:a9:9b:9c:70:08:32:f0:06:15:
                    32:14:04:e5:27:47:2a:5f:ee:12:65:5e:08:70:ef:
                    73:ac:26:59:9c:3c:ff:f2:5c:7e:a3:d6:18:73:d8:
                    e0:f8:2f:87:46:80:ce:35:1d:66:7b:90:97:f1:e6:
                    8f:22:0f:37:af:fa:aa:da:9b:f7:8d:bd:07:58:ee:
                    d7:43:77:a6:55:24:43:c9:ae:c7:2d:ba:80:af:47:
                    50:6f:54:bf:40:9b:87:6d:51:ff:e2:90:ce:17:c7:
                    bc:48:47:b4:54:67:99:f1:71:22:c6:99:92:d2:3c:
                    44:b6:e5:47:e3:f3:39:0b:5d:24:6d:34:f4:ec:6f:
                    40:17:2f:be:98:58:b5:57:a0:2f:ce:3e:51:ff:2b:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:88:B2:55:8A:3B:39:18:8C:B5:CC:59:D4:36:EA:14:BF:07:9A
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/abWIslWKOzkYjLXMWdQ26hS_B5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.42.144.0/23
                IPv6:
                  2001:7f8:43::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:7b:0d:55:5f:41:d4:22:5b:46:a2:1d:65:59:ec:82:84:
         5a:e9:79:de:29:82:80:db:28:23:f9:82:2d:c1:00:24:3f:e3:
         39:8a:11:8a:7f:e1:16:60:61:0f:f9:3b:47:12:29:d3:51:cb:
         52:45:57:36:f1:1e:c9:d6:77:05:c6:ec:72:5d:60:3a:dc:bb:
         be:67:9a:f0:b8:21:29:ce:fd:2c:a0:9c:5f:ef:b5:05:2f:3a:
         95:d5:d0:14:67:e0:c5:2c:3b:69:2d:36:1c:91:98:c1:71:6f:
         98:08:bd:2e:55:5d:39:19:00:f9:6f:e5:92:a2:c8:80:15:c8:
         89:70:6c:8b:ba:23:02:c8:8b:cb:ff:65:8a:33:81:b5:9d:b2:
         04:6e:14:93:2e:9b:f6:79:bf:97:68:cb:d7:11:b9:ab:11:97:
         32:3f:5c:7e:64:37:71:63:f5:cd:82:42:46:ee:8e:ec:ee:cc:
         13:5e:9b:06:98:c9:8a:cd:d8:a6:a3:dd:d8:e7:19:43:3d:64:
         7d:d9:3f:30:48:ac:14:ca:c3:34:7c:9d:e4:ac:26:33:87:d4:
         30:77:ce:b6:72:ca:b1:a3:a9:ed:36:f0:d0:c9:41:5c:2a:2f:
         a5:b7:19:67:a4:4c:23:3c:60:6f:28:ec:e4:75:2e:3b:40:de:
         19:c5:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----