Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/Mlst78gH5G1v15JzsbW_sO-6kN4.roa
File:                     Mlst78gH5G1v15JzsbW_sO-6kN4.roa (raw, json)
Hash identifier:          S8F0jUmZSqWBY77jaV/ssi5e55v32m3UUHV+PIMUAGo=
Subject key identifier:   32:5B:2D:EF:C8:07:E4:6D:6F:D7:92:73:B1:B5:BF:B0:EF:BA:90:DE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       01856DCABFA8FA7CDD71A61A6FF61EB77DE2
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/Mlst78gH5G1v15JzsbW_sO-6kN4.roa
Signing time:             Sun 01 Jan 2023 14:44:41 +0000
ROA not before:           Sun 01 Jan 2023 14:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198722
IP address blocks:        212.18.110.0/24 maxlen: 24
                          2a12:8400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:bf:a8:fa:7c:dd:71:a6:1a:6f:f6:1e:b7:7d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Jan  1 14:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=325b2defc807e46d6fd79273b1b5bfb0efba90de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:52:d1:da:53:ee:4c:5f:9c:75:f5:13:22:
                    09:28:a9:a0:6a:56:df:aa:9b:dd:1d:47:2a:f6:25:
                    c6:ce:ae:1a:6d:e4:5e:39:1f:3c:de:ee:0b:3c:59:
                    e5:7f:a6:c6:5c:0e:69:de:8e:38:ea:e0:50:ce:aa:
                    69:0b:ac:5a:33:f8:32:21:d2:5d:53:5f:67:ac:cc:
                    b4:ba:40:8e:0e:eb:bf:ab:7b:0a:8e:89:db:25:1b:
                    da:a1:a7:f9:ac:3e:3b:5b:cf:47:83:06:d4:e1:a5:
                    03:ff:85:0d:43:63:13:cf:e0:d3:56:98:16:b1:bd:
                    ac:ba:47:c9:a7:35:6c:5a:46:bc:12:f0:7c:e8:a3:
                    c4:95:ad:fb:6e:86:cd:89:0c:5b:f5:62:d6:c8:50:
                    59:37:4f:d1:8e:93:8a:83:eb:80:9f:0f:d7:a3:68:
                    a6:1f:68:02:19:7c:99:08:87:97:90:1d:9c:0d:e3:
                    10:a4:ee:5a:44:e3:81:be:41:e0:7d:9d:29:f2:34:
                    00:4a:78:7f:8a:57:76:50:ef:80:f8:12:4d:30:ed:
                    d5:fc:b3:c3:e1:6d:6d:03:ae:bc:1f:13:bd:40:01:
                    7e:2a:b5:b4:9c:5c:19:e4:b7:b5:79:d5:81:ef:3c:
                    92:9a:6a:e9:4c:ea:9e:c1:f3:63:32:7a:0c:c3:2e:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:2D:EF:C8:07:E4:6D:6F:D7:92:73:B1:B5:BF:B0:EF:BA:90:DE
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/Mlst78gH5G1v15JzsbW_sO-6kN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.110.0/24
                IPv6:
                  2a12:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:82:cf:e4:e1:58:dd:34:bb:10:af:d5:68:5e:5b:7a:66:
         4b:f0:60:e5:b4:6b:a2:83:f6:ac:e4:5f:05:64:16:5a:71:1f:
         04:39:67:f1:65:54:44:6d:42:15:e4:23:23:62:8f:4e:da:c2:
         9f:0c:0e:fb:4e:c9:5c:8a:d6:2d:f8:06:ee:e1:d1:62:67:30:
         89:f9:d5:bf:a3:96:3e:05:6b:e8:70:c3:cf:dc:45:16:d8:b0:
         ec:a8:a1:d9:41:e1:69:52:2d:f4:cf:f2:c4:c4:a5:4c:71:ab:
         92:25:8c:5c:d4:f0:1e:33:15:c8:13:07:42:ae:48:cf:06:b9:
         6c:d7:10:6f:49:d8:8d:a8:39:dc:23:fd:fb:a4:77:64:37:cd:
         52:79:0a:4a:ba:21:e0:2b:97:29:8e:5a:f6:0f:e8:89:4f:bf:
         61:5e:eb:b9:62:ba:8b:aa:ba:39:2c:d7:47:5f:01:de:4b:28:
         40:96:61:70:39:2a:12:16:5f:50:b6:d6:b9:42:c5:b6:60:fd:
         c9:cb:c6:3e:eb:31:6f:31:4a:39:e0:d7:78:f4:f2:30:de:fb:
         35:b6:d0:08:c2:9c:03:1f:56:ae:ac:a0:e6:04:3a:35:50:a2:
         97:df:7b:b2:63:d7:92:43:7b:f2:3e:92:8f:19:23:a4:b6:59:
         59:7d:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----