Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa
File:                     JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa (raw, json)
Hash identifier:          YBd/weMQT6R58DrUVlIvINZ/IkR0XTAnkyWgLUmaZM8=
Subject key identifier:   27:06:E4:A5:26:97:AB:96:E3:07:5A:10:0E:19:D5:EC:54:ED:FD:8F
Certificate issuer:       /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial:       01856EC228EFA43CD49BBE570AB9D04A9855
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa
Signing time:             Sun 01 Jan 2023 19:14:56 +0000
ROA not before:           Sun 01 Jan 2023 19:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49754
IP address blocks:        195.130.194.0/24 maxlen: 24
                          2001:67c:247c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:c2:28:ef:a4:3c:d4:9b:be:57:0a:b9:d0:4a:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
        Validity
            Not Before: Jan  1 19:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2706e4a52697ab96e3075a100e19d5ec54edfd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:c1:97:75:0f:f5:05:c8:3c:e6:a4:fb:a3:
                    7c:ec:ba:21:82:30:10:33:b9:63:65:53:f7:1d:11:
                    18:8f:5e:b6:61:db:99:e0:48:c8:23:29:d4:ae:b8:
                    26:2c:da:9d:ba:e9:73:61:0d:bd:f8:a3:6c:c1:c0:
                    10:4c:f6:bf:44:af:d6:5d:6b:cb:54:a8:3a:33:75:
                    d1:d2:e7:a1:04:1b:36:d9:0d:71:86:6c:6a:40:1f:
                    ba:cf:4d:ee:a1:5a:fb:9b:bf:6a:d2:79:72:ea:a9:
                    d4:3d:ba:14:5c:a9:8b:08:f8:20:45:74:5b:f9:bf:
                    00:9c:ca:c2:5e:f9:37:8d:7b:32:cc:36:73:a1:4e:
                    88:42:e8:14:b0:f9:c2:78:b8:70:cd:61:38:2f:4a:
                    46:be:e4:2a:eb:74:6e:28:0d:f2:eb:df:2c:19:82:
                    52:f3:89:57:8f:50:8c:8f:62:0e:d9:78:85:6a:5f:
                    15:c4:f7:cf:8f:98:4f:73:23:76:99:01:2d:db:e2:
                    f0:70:7e:38:d6:5b:cf:98:bb:d0:24:d0:34:dd:c3:
                    b4:b3:7f:ab:17:af:35:39:90:78:c4:52:23:c6:3b:
                    df:ed:d4:eb:0a:43:22:f6:ab:06:74:c7:29:ce:98:
                    a4:1a:dd:73:82:f8:e0:11:ed:07:ce:a7:e3:08:7a:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:E4:A5:26:97:AB:96:E3:07:5A:10:0E:19:D5:EC:54:ED:FD:8F
            X509v3 Authority Key Identifier:
                keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.130.194.0/24
                IPv6:
                  2001:67c:247c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:3d:f8:44:06:0e:f4:23:8b:46:87:a8:95:e9:40:84:16:
         aa:4c:c7:ae:02:4e:4d:1f:81:40:72:02:a5:cf:9e:6d:7c:eb:
         a9:e0:5e:9c:f1:6b:54:ac:46:0b:11:74:48:15:25:f9:2b:95:
         44:3f:c4:5c:1b:0f:c8:41:0c:c2:25:e0:fa:12:89:8c:5b:d1:
         5e:7b:94:bb:76:25:34:2b:26:c0:7b:19:ce:ae:9c:7c:3b:1b:
         88:4a:24:d4:cb:02:00:00:2e:fb:cc:c5:b1:49:b3:59:2c:8e:
         07:c4:68:93:40:12:38:4d:d8:94:55:38:47:73:a9:81:f9:96:
         9a:73:37:58:5b:62:dc:52:1d:64:95:be:cd:3a:9e:90:93:a2:
         97:92:57:e5:3f:7a:44:fd:4a:dd:89:7b:84:19:78:45:f4:a4:
         bf:54:03:a9:fa:4c:c8:67:48:03:3a:45:3f:f5:04:6c:5e:03:
         1d:c0:07:a9:09:31:eb:3b:f3:bd:13:b6:7e:d4:d4:1f:44:47:
         8f:f8:c0:dc:8d:66:34:8f:ce:e0:1c:18:b8:44:ae:a8:18:51:
         9f:7f:f7:c1:ed:26:f4:0a:45:9c:17:6d:4a:ea:76:8d:40:9b:
         72:a1:d8:4d:e9:32:33:19:0f:45:e3:21:34:79:56:49:46:11:
         0b:4b:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----