Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-ZSeE3Mo5z0DMkTVxH4X11xVyjA.roa
File:                     1-ZSeE3Mo5z0DMkTVxH4X11xVyjA.roa (raw, json)
Hash identifier:          Tsc3JBzsOKiaG0uZVflR1hN4mizv7U8P89k1YHPTzrI=
Subject key identifier:   F9:94:9E:13:73:28:E7:3D:03:32:44:D5:C4:7E:17:D7:5C:55:CA:30
Certificate issuer:       /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial:       018570FBC1C38C6C57B59983779818D59FB1
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-ZSeE3Mo5z0DMkTVxH4X11xVyjA.roa
Signing time:             Mon 02 Jan 2023 05:37:05 +0000
ROA not before:           Mon 02 Jan 2023 05:37:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209169
IP address blocks:        2.59.44.0/22 maxlen: 24
                          2a09:f0c0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:c1:c3:8c:6c:57:b5:99:83:77:98:18:d5:9f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
        Validity
            Not Before: Jan  2 05:37:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9949e137328e73d033244d5c47e17d75c55ca30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:9e:f6:93:6a:09:8f:14:e1:6e:8d:29:85:
                    79:76:55:ab:65:7f:51:2f:56:bf:4f:52:b7:8b:a6:
                    ea:f7:48:10:dd:dd:fb:35:42:67:5a:0e:b9:dc:3c:
                    8e:f5:72:e2:a4:a4:ca:fc:21:96:d8:80:95:43:f9:
                    01:71:9f:ee:d1:4b:84:6b:cb:7b:5e:f2:b0:4f:86:
                    45:1c:a3:8f:eb:18:f5:34:06:ca:d9:d8:5c:4e:28:
                    b6:5a:ce:0a:35:ab:0e:a2:64:76:2d:68:30:7d:64:
                    4f:cf:45:3b:a4:80:33:fa:38:37:ba:20:da:89:2f:
                    69:fa:9e:f8:1d:00:be:78:ee:99:8c:88:ed:21:5e:
                    94:a3:0f:fb:e2:73:c4:f2:1d:ba:15:be:96:2f:22:
                    b4:72:7a:29:e0:4b:ca:d0:e9:e3:28:52:05:46:79:
                    71:fc:b9:26:8b:0d:7c:82:0b:45:3b:54:4d:54:71:
                    3a:d8:ee:4f:27:83:60:a0:d3:ea:f9:da:ce:1b:12:
                    67:ae:dd:ae:4d:0d:b7:e1:60:9a:f7:fc:98:88:97:
                    fb:af:ba:37:df:75:f4:ea:c8:c9:98:5c:b5:3a:f2:
                    1c:60:e6:d8:a3:6e:d3:7d:8c:7d:b2:82:92:b8:fa:
                    48:6b:e9:d7:3e:06:e0:c3:31:3a:fe:0c:b5:cc:a1:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:9E:13:73:28:E7:3D:03:32:44:D5:C4:7E:17:D7:5C:55:CA:30
            X509v3 Authority Key Identifier:
                keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/1-ZSeE3Mo5z0DMkTVxH4X11xVyjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.44.0/22
                IPv6:
                  2a09:f0c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:00:49:34:77:35:c1:2a:44:07:24:97:ed:44:ce:ee:91:
         30:1a:48:61:fc:df:c5:5b:fa:eb:21:76:96:38:4a:aa:08:e3:
         03:49:d7:54:e7:e9:bb:04:fd:eb:74:8b:d9:07:3a:0f:69:ac:
         41:a5:4f:75:e3:d8:50:60:83:e5:87:9b:5d:88:10:19:df:da:
         5e:65:e0:7c:15:d1:f8:18:a7:56:c0:a8:4a:eb:bf:1b:a4:5c:
         05:b8:cc:1c:87:50:9d:2c:44:75:36:b4:e2:fc:58:77:57:e6:
         8a:e5:b5:45:35:59:d7:9c:7b:b5:2b:1a:b7:bf:e0:6b:0d:92:
         50:1d:77:32:04:76:b9:ba:00:24:c7:cd:70:04:55:91:a8:48:
         cb:a8:52:ce:dc:96:6a:65:b2:78:53:6b:a2:8c:65:f2:3b:92:
         5d:df:ae:44:fa:91:9f:4e:f6:bf:4b:58:43:06:bc:9d:7b:67:
         67:16:32:8d:88:59:03:03:1d:a3:de:de:f8:49:6f:c8:1a:2f:
         13:00:d9:4e:9f:c4:2c:1d:8d:ed:0c:ba:86:7a:e9:4e:eb:ed:
         eb:1d:04:b1:f6:f6:1a:1d:20:f5:26:77:1b:74:e4:53:e6:75:
         f6:9d:bb:06:41:d2:6f:90:9f:9e:82:55:a1:96:03:5c:37:b3:
         d1:9e:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----