Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/jqmTMXtGFtoB5Ty1KOxmIUC6S7c.roa
File:                     jqmTMXtGFtoB5Ty1KOxmIUC6S7c.roa (raw, json)
Hash identifier:          H+gXygTVS6yNuqm7dnv23ff65t+58bKL/4EE5ywYkMg=
Subject key identifier:   8E:A9:93:31:7B:46:16:DA:01:E5:3C:B5:28:EC:66:21:40:BA:4B:B7
Certificate issuer:       /CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Certificate serial:       01856FDDCCF2D920141EC18CBFBA58F3EDD8
Authority key identifier: DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/jqmTMXtGFtoB5Ty1KOxmIUC6S7c.roa
Signing time:             Mon 02 Jan 2023 00:24:44 +0000
ROA not before:           Mon 02 Jan 2023 00:24:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207616
IP address blocks:        185.190.26.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:dd:cc:f2:d9:20:14:1e:c1:8c:bf:ba:58:f3:ed:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e9afc93183338022c7d8f186af71973aef5ba
        Validity
            Not Before: Jan  2 00:24:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ea993317b4616da01e53cb528ec662140ba4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:71:6b:5f:b8:2c:7a:f3:60:8a:5b:c4:64:
                    54:a1:ef:d0:52:70:26:8a:04:18:d3:03:10:ef:7d:
                    32:fe:b1:c7:cd:f1:68:70:00:24:20:1b:43:0e:16:
                    2e:a9:e8:39:f1:0a:a5:cc:a1:7f:4b:5d:d3:88:fb:
                    2b:b8:fe:cc:ab:c2:8f:47:86:47:72:9e:ca:c3:35:
                    cf:72:51:b4:ed:7b:fd:8e:9e:6c:03:87:1f:0d:f1:
                    7d:f7:43:01:45:74:91:06:cb:55:b8:a2:53:5e:2e:
                    0e:75:89:e4:6f:fe:63:86:a2:dd:53:3d:ef:0b:32:
                    63:b0:e8:a8:40:1c:d1:4e:2e:b2:b5:fb:92:94:5d:
                    38:e1:75:dc:29:7d:87:09:8c:fb:e9:e3:5a:69:c4:
                    96:61:74:2f:57:83:75:12:57:2c:e4:96:2d:6c:d4:
                    6a:40:76:6a:8c:b3:e2:df:00:1f:83:54:43:12:25:
                    c2:d5:cf:6a:ac:c3:4b:5b:3d:00:7d:5f:71:87:25:
                    c5:51:8d:b9:2f:86:e5:4d:8a:cf:58:c2:32:96:53:
                    fb:21:ad:53:a1:41:3d:38:c3:69:8b:a7:82:9c:20:
                    a2:28:8a:11:5e:f7:b9:6b:a6:a0:a9:1f:cb:23:f1:
                    81:80:e9:45:39:90:34:f8:ca:1e:93:9f:7c:26:f6:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:93:31:7B:46:16:DA:01:E5:3C:B5:28:EC:66:21:40:BA:4B:B7
            X509v3 Authority Key Identifier:
                keyid:DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/jqmTMXtGFtoB5Ty1KOxmIUC6S7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:52:c6:69:55:1c:e1:9b:a1:03:31:0e:cb:e9:1f:42:34:d3:
         bd:57:7c:b7:87:ed:4c:c1:99:84:f0:94:8e:03:ce:f2:ca:6e:
         05:6e:9e:58:d6:de:29:15:32:8f:b4:9a:48:5f:07:ad:f0:97:
         dd:db:e5:bf:4d:69:93:e7:0c:83:80:e6:fe:b0:93:96:d4:64:
         9d:bf:84:9f:1c:12:19:71:41:c6:d6:65:25:b7:86:b9:18:92:
         87:3c:65:04:09:dd:43:81:b3:8c:6f:09:ab:1f:2b:bb:72:10:
         a9:5e:b8:b8:31:c4:d4:74:f8:11:78:28:46:fd:3e:2a:30:b8:
         f3:6c:a5:e1:0d:02:71:5d:91:5b:9c:92:91:7c:57:2f:89:50:
         8f:20:fc:95:6c:5f:6c:93:61:e4:b5:35:8b:0f:2a:82:ea:01:
         a0:a4:ba:68:ed:f9:70:71:c4:a2:28:56:be:f4:0a:92:dd:90:
         dd:f5:72:26:70:3d:eb:84:48:34:86:ea:a0:70:23:b2:8d:8b:
         ce:3c:df:77:b9:77:6d:bc:33:6e:63:3e:eb:b7:eb:c6:ac:75:
         9f:2f:71:f9:b0:5c:a6:66:7e:49:90:1d:35:16:79:9b:d2:2d:
         10:e8:6e:30:31:90:cf:7f:c1:19:88:0a:4b:f4:28:61:6c:54:
         69:32:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----