Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa
File:                     anUu4l87L8pIXcBDOLpxTXJAvNA.roa (raw, json)
Hash identifier:          pTjxzsHGjncHrqI6YaB/9EJhoAX3MNcCtCqojbsyvdo=
Subject key identifier:   6A:75:2E:E2:5F:3B:2F:CA:48:5D:C0:43:38:BA:71:4D:72:40:BC:D0
Certificate issuer:       /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial:       01856F4B72E0F2ED59E696B94BECF5BA0A37
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa
Signing time:             Sun 01 Jan 2023 21:44:53 +0000
ROA not before:           Sun 01 Jan 2023 21:44:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209842
IP address blocks:        94.154.144.0/22 maxlen: 22
                          2a09:c500::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:72:e0:f2:ed:59:e6:96:b9:4b:ec:f5:ba:0a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
        Validity
            Not Before: Jan  1 21:44:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a752ee25f3b2fca485dc04338ba714d7240bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:d3:4e:70:a9:f4:1b:1f:02:0f:bf:9a:f1:
                    a9:54:50:01:da:23:80:b8:3b:02:56:8f:f0:21:87:
                    c5:0e:14:38:70:24:5f:8e:5b:9c:c3:9d:13:3c:5d:
                    15:5d:f5:20:7c:a5:85:19:9d:52:e3:66:28:98:e5:
                    f4:e3:7b:c2:73:fd:77:36:5b:db:58:11:18:87:eb:
                    f4:4d:13:21:36:ba:73:6a:f8:bd:16:11:14:df:cd:
                    fb:b2:03:8c:a5:6e:84:74:82:25:dc:65:70:1d:be:
                    33:99:04:f4:3e:87:24:5c:15:33:85:20:ff:02:3c:
                    30:ff:c2:2b:45:57:36:cd:2d:bf:90:a4:0e:84:81:
                    06:2c:b6:d7:0e:3e:ee:97:99:0b:04:c1:3c:25:b6:
                    0b:24:e3:d9:45:c6:b3:92:56:ec:a6:75:ae:a2:9f:
                    70:8b:32:9d:05:23:f7:14:34:17:d7:fc:21:d7:4e:
                    c8:ba:a1:b7:43:47:6a:fe:da:cd:30:b3:d8:fa:2d:
                    67:16:13:bc:29:2c:fc:15:c7:6f:ed:87:5c:b5:aa:
                    b2:d6:b1:e9:74:8b:48:62:13:9f:3e:76:ee:26:7f:
                    73:7c:00:97:f4:0e:50:3f:00:3b:d2:ea:c3:3f:2e:
                    d6:2b:de:ae:34:59:ce:45:aa:44:a7:68:fe:8c:4e:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:2E:E2:5F:3B:2F:CA:48:5D:C0:43:38:BA:71:4D:72:40:BC:D0
            X509v3 Authority Key Identifier:
                keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/anUu4l87L8pIXcBDOLpxTXJAvNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.144.0/22
                IPv6:
                  2a09:c500::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:7b:be:1c:6a:11:a9:b6:69:92:ea:40:47:bc:37:c8:33:
         02:06:44:04:46:2a:3e:8c:6c:0c:a0:91:0e:8a:69:0f:d1:67:
         06:d4:4a:6d:5e:07:96:a1:41:6f:19:d5:be:a8:29:7b:af:e3:
         b6:a8:c4:0c:04:65:2a:61:4f:85:d7:e0:70:2a:21:78:05:22:
         c4:6c:f5:b9:29:53:8e:2d:d4:ff:67:69:99:94:72:1b:67:e2:
         06:44:30:c6:59:6b:bd:bb:d4:8e:dc:0d:eb:13:52:ac:8d:66:
         bf:ac:01:f0:ea:44:f7:31:f8:6f:29:bc:9c:40:ec:db:b0:7c:
         fc:ea:0c:a9:6d:6e:1c:3f:1d:5b:36:74:03:d8:8f:a9:ff:4f:
         21:ed:a6:19:3d:90:d4:1d:c0:b7:d3:f3:21:dc:ee:a7:14:4a:
         cd:f1:b6:c9:d9:01:6a:ab:09:60:fb:4f:5e:46:cb:56:25:ab:
         7d:50:bd:81:80:81:14:7b:72:cd:93:37:b7:a8:63:dc:7b:5a:
         16:dc:cb:13:ac:2b:ff:0f:80:1f:94:2a:30:47:28:63:45:16:
         4a:e3:bc:63:25:f6:0b:98:93:cf:26:87:cd:cc:3a:85:78:94:
         9a:db:fc:5b:41:ca:53:52:45:5c:ba:70:3b:92:32:2a:05:72:
         32:88:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----