Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa
File:                     fr_-yoC2HIArMFAMfGvuKN6OqOY.roa (raw, json)
Hash identifier:          EtyQ65SzUQdI8Iyk9tEHDQ179+cgOtzdU812sgoVpsk=
Subject key identifier:   7E:BF:FE:CA:80:B6:1C:80:2B:30:50:0C:7C:6B:EE:28:DE:8E:A8:E6
Certificate issuer:       /CN=0aac388b37d44768fce0eaec97de433faf72b9dc
Certificate serial:       0186FF4BDDC5A108C8749D10FB790E951BBC
Authority key identifier: 0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa
Signing time:             Mon 20 Mar 2023 13:53:27 +0000
ROA not before:           Mon 20 Mar 2023 13:53:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209828
IP address blocks:        194.69.162.0/24 maxlen: 24
                          2a0c:ae81::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ff:4b:dd:c5:a1:08:c8:74:9d:10:fb:79:0e:95:1b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aac388b37d44768fce0eaec97de433faf72b9dc
        Validity
            Not Before: Mar 20 13:53:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ebffeca80b61c802b30500c7c6bee28de8ea8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:66:86:b4:dc:79:f9:52:af:2b:92:98:6f:
                    99:ee:09:2d:cf:32:d6:ba:a3:b1:28:45:80:02:61:
                    82:42:be:82:5d:96:9e:f2:b6:d7:42:bb:3b:d5:36:
                    de:24:82:e3:95:00:1c:be:a5:96:df:b4:b8:85:6c:
                    2c:f7:fc:35:4b:90:a1:9f:f3:12:97:bb:7b:6f:35:
                    51:1a:2d:b4:e0:0c:1d:b3:06:95:22:e5:0e:82:b0:
                    94:1a:10:b0:f3:6d:14:ab:dc:41:59:20:a8:85:e5:
                    56:a4:7a:ca:2a:cc:b0:67:66:7f:07:fc:28:df:98:
                    39:bd:65:6c:77:68:01:98:5e:eb:6f:2a:27:8e:6b:
                    21:8c:42:e6:60:a5:f3:d6:5e:d7:2e:38:ae:ea:22:
                    09:85:ee:e8:fa:96:75:4d:51:c7:72:51:d4:30:c7:
                    d5:96:5b:a4:24:17:60:9a:9c:e6:a8:83:2b:9f:2f:
                    e1:d0:c5:25:d1:a2:ac:13:e2:8e:2a:70:a0:8c:d7:
                    87:81:72:a6:20:8d:88:c8:41:fb:ae:e2:f6:40:09:
                    05:bb:17:35:9a:11:81:5d:17:c6:e2:69:67:66:ab:
                    59:8a:5a:3a:a8:e0:19:c6:ec:b6:c2:bc:44:3f:1f:
                    7c:5e:5e:09:79:53:a0:2d:d7:9b:b3:fd:7d:bf:61:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:FE:CA:80:B6:1C:80:2B:30:50:0C:7C:6B:EE:28:DE:8E:A8:E6
            X509v3 Authority Key Identifier:
                keyid:0A:AC:38:8B:37:D4:47:68:FC:E0:EA:EC:97:DE:43:3F:AF:72:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cqw4izfUR2j84Orsl95DP69yudw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/fr_-yoC2HIArMFAMfGvuKN6OqOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/656ca9-bbbc-49b7-aacc-24aa4cee6b2c/1/Cqw4izfUR2j84Orsl95DP69yudw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.162.0/24
                IPv6:
                  2a0c:ae81::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:18:b8:f6:8b:b3:57:94:3b:ed:29:e1:e9:21:cc:dc:62:
         05:f9:4a:44:46:87:ea:73:3b:01:87:ab:54:0d:8f:b6:e5:a9:
         f1:b8:05:dd:2e:24:c5:df:be:fa:b0:ec:3f:62:74:72:15:aa:
         d7:a8:3d:61:03:f0:6d:24:99:50:50:b3:51:26:32:e3:5e:7e:
         c1:b2:1f:0f:90:e2:50:2b:a1:12:19:39:06:1a:df:fb:1a:9c:
         02:cc:5f:47:e8:55:59:92:6f:60:8e:84:17:28:ac:c5:f9:eb:
         55:21:7a:11:95:2d:95:28:3d:d7:2e:55:4b:49:c8:90:3d:15:
         a3:e6:e6:9a:25:d7:2d:db:05:fc:4d:7d:fa:22:dc:7b:cb:d3:
         73:f1:88:73:db:d6:57:51:2f:e7:b0:2a:0b:7c:c7:94:6c:52:
         30:63:4d:05:ac:ae:0b:0d:4c:c3:69:09:d9:18:d6:58:d2:c7:
         cf:2a:77:12:30:14:7b:8f:ab:fb:50:ac:80:ff:79:8e:3d:d2:
         bd:75:74:7e:94:b2:1a:30:0e:55:ef:79:05:a2:42:d0:e0:ce:
         5f:a3:6d:1d:0f:32:5b:b2:0d:48:38:59:60:b3:1b:a8:1f:fe:
         02:58:26:e2:d5:d8:f5:29:79:8f:80:a5:43:7c:63:32:38:8e:
         42:9c:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----