Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U-1-scar2SPJeg_vYaY3sfaRspI.roa
File:                     U-1-scar2SPJeg_vYaY3sfaRspI.roa (raw, json)
Hash identifier:          9Nsg5jXqLOSb897SNqwp5QV6eyG2yest/KRJvCK2VXc=
Subject key identifier:   53:ED:7E:B1:C6:AB:D9:23:C9:7A:0F:EF:61:A6:37:B1:F6:91:B2:92
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01856C813F49863082FDE2CB3C4068C6EDA5
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U-1-scar2SPJeg_vYaY3sfaRspI.roa
Signing time:             Sun 01 Jan 2023 08:44:47 +0000
ROA not before:           Sun 01 Jan 2023 08:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197890
IP address blocks:        80.246.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:81:3f:49:86:30:82:fd:e2:cb:3c:40:68:c6:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 08:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53ed7eb1c6abd923c97a0fef61a637b1f691b292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:f5:78:56:ca:df:5a:48:f1:97:ba:39:52:
                    7a:a8:ce:ca:e1:2b:8e:cf:a9:b7:1c:6e:b0:cb:54:
                    11:e2:2a:5d:ef:d4:13:4e:a5:74:3f:c6:e7:e9:b9:
                    46:0a:dc:0f:59:d6:a7:76:de:66:b5:5f:bc:6d:bd:
                    95:a8:14:c1:af:46:01:c9:18:ca:6d:c7:7f:fc:19:
                    96:92:ef:eb:4f:00:d3:cd:12:29:82:39:af:61:01:
                    f1:ca:09:e3:b5:1d:19:7c:43:7d:75:c9:6e:95:a8:
                    3d:6a:91:f4:3e:6a:1a:f0:8d:b9:7d:42:63:43:42:
                    a5:d5:9b:f9:22:6a:61:0c:94:d8:cf:b4:d5:5d:ee:
                    c1:69:01:15:d5:93:c2:35:0e:c3:d6:16:c3:cf:91:
                    89:ca:66:14:a7:45:b0:ee:06:9f:cd:6a:c2:ce:c6:
                    bb:a7:8a:95:f0:7a:28:7b:b5:ed:82:66:86:2b:b6:
                    39:73:20:2e:4f:86:21:02:03:67:24:f3:34:20:d0:
                    e9:05:be:a1:29:14:7c:a9:91:6b:06:9f:d2:fc:ac:
                    72:cb:b7:f2:45:44:57:0b:8c:57:4c:21:65:55:dd:
                    cc:84:c7:9d:31:52:01:5e:45:9e:09:98:48:a5:95:
                    f2:56:ee:40:6f:fd:87:98:99:f0:a5:53:0d:ef:69:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:ED:7E:B1:C6:AB:D9:23:C9:7A:0F:EF:61:A6:37:B1:F6:91:B2:92
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U-1-scar2SPJeg_vYaY3sfaRspI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:dc:f9:e9:0d:d7:f5:65:5f:98:a0:f5:ba:1a:71:7d:20:
         13:52:02:f7:c5:bc:f6:cf:00:93:d1:0a:01:bd:8a:6a:3a:6d:
         47:b9:c3:f5:42:82:10:af:5e:a3:97:92:e3:19:f6:c3:28:7f:
         a7:05:cf:67:08:59:c2:25:cb:97:4f:d5:66:5b:e0:cb:a2:7b:
         8d:61:64:69:91:3a:f9:d6:96:3a:41:cd:d4:92:65:a3:b8:26:
         ba:2f:29:e7:c5:37:07:26:9a:f0:da:74:e0:0e:51:d2:63:8e:
         6d:50:b0:21:2c:97:dc:bd:ac:8f:49:e0:17:25:7f:53:60:1f:
         f2:c8:f8:5f:a0:94:31:1b:a1:10:5c:74:fd:12:6d:8b:3a:51:
         09:2d:d2:9e:3a:20:48:ed:6e:0c:c1:5a:a3:e6:7c:0f:6e:da:
         b7:48:47:9e:d7:a7:ca:c2:4b:2e:4c:5a:67:19:49:8f:24:45:
         60:52:1e:d3:35:ed:6b:6f:26:3a:b3:a0:ba:84:fc:ab:94:5f:
         82:85:90:79:61:39:7e:00:62:26:91:19:42:14:63:f2:d9:ff:
         4d:16:91:0f:e4:4e:4f:fc:2c:e6:be:5a:9f:b6:37:f0:2d:b2:
         da:29:5c:91:4e:58:75:29:d1:ba:23:4a:a8:e9:5e:43:2d:78:
         41:97:c2:7a
-----BEGIN CERTIFICATE-----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