Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa
File:                     7M2UH2T33BsC76VJDKAoocBPPkE.roa (raw, json)
Hash identifier:          lFAS/4+k0DjLv9HYu0sfRsLmVd+Ezudi1ePiEUIZ200=
Subject key identifier:   EC:CD:94:1F:64:F7:DC:1B:02:EF:A5:49:0C:A0:28:A1:C0:4F:3E:41
Certificate issuer:       /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial:       01856E142AB2EA8435EA38DD89CC607C0438
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa
Signing time:             Sun 01 Jan 2023 16:04:53 +0000
ROA not before:           Sun 01 Jan 2023 16:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213206
IP address blocks:        91.239.145.0/24 maxlen: 24
                          2a07:e0c0:1::/48 maxlen: 48
                          2a07:e0c0:4::/48 maxlen: 48
                          2a07:e0c0:2::/48 maxlen: 48
                          2a07:e0c0::/30 maxlen: 30
                          2a07:e0c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:14:2a:b2:ea:84:35:ea:38:dd:89:cc:60:7c:04:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
        Validity
            Not Before: Jan  1 16:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eccd941f64f7dc1b02efa5490ca028a1c04f3e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:df:70:5c:00:ff:69:cf:ed:ee:0f:5d:2d:
                    34:6a:55:91:cf:a5:d6:33:c7:43:e0:d5:9c:de:76:
                    b1:86:98:19:d1:d2:d6:94:27:35:e7:2d:fc:d1:76:
                    3f:35:47:0e:79:31:85:5f:3e:de:c1:ae:39:89:32:
                    0b:a5:8d:8c:07:ef:25:94:23:6a:be:b1:07:73:d7:
                    e0:20:5d:26:bf:99:3a:02:ae:06:6a:6a:de:80:a5:
                    73:a6:62:78:23:ef:c2:d0:86:f7:79:46:7f:5d:ef:
                    d2:4e:81:1c:c7:24:c9:2d:2e:7f:bf:5e:23:cf:e1:
                    ff:e5:a5:c1:e9:5b:3b:df:5d:94:7e:d5:ae:47:d9:
                    33:03:a0:df:86:bf:98:29:e6:dc:af:fc:5f:95:58:
                    07:79:2f:1b:de:0b:3e:c3:10:d5:48:93:b1:dd:98:
                    b7:d1:17:3a:2a:79:7c:31:9e:89:9f:35:19:0a:78:
                    a9:7e:73:27:a6:a5:1e:ae:c1:e5:49:7f:da:61:e2:
                    b0:4d:c1:d1:0a:d7:30:92:75:fd:a5:16:ed:b5:5f:
                    54:7f:50:23:87:1e:39:b5:d8:1e:99:e3:c1:29:1a:
                    d8:2f:eb:cc:cd:a2:9c:d6:e2:07:70:72:31:a2:12:
                    06:ff:af:a3:41:fe:c1:91:2f:9f:0b:dc:19:ba:41:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:94:1F:64:F7:DC:1B:02:EF:A5:49:0C:A0:28:A1:C0:4F:3E:41
            X509v3 Authority Key Identifier:
                keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/7M2UH2T33BsC76VJDKAoocBPPkE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.145.0/24
                IPv6:
                  2a07:e0c0::/30

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:d1:95:0c:e6:7f:8c:60:d9:0e:bf:32:ef:91:e3:01:e9:
         cb:7a:bd:50:71:40:58:c5:cd:0c:94:6e:7c:df:5d:cd:6f:34:
         73:2c:08:3c:23:ac:c5:bd:67:c8:39:5d:de:75:e5:3c:e6:12:
         d9:da:99:fa:05:ef:d4:1a:78:47:c0:af:b6:f5:5b:3c:68:1e:
         83:b6:9d:5d:19:f6:12:2f:ac:5a:1f:20:cc:39:de:31:48:31:
         71:fd:fb:98:d8:f2:ff:ef:4c:bc:58:33:b0:9b:00:72:98:cc:
         3b:b5:e1:b8:33:0d:c3:60:07:bc:df:c5:08:9b:40:bb:89:cc:
         f0:68:58:7f:29:31:16:82:a3:97:0d:2d:cc:e4:bc:e7:43:5e:
         e7:0f:26:85:99:02:da:f5:55:e2:2f:99:87:f4:4d:4d:f6:c0:
         30:ce:6e:70:0e:ab:fd:fb:0d:4a:0b:ac:17:ba:55:0b:11:c1:
         e3:ec:b0:eb:f0:03:e1:4d:c7:24:0d:3b:62:e4:44:aa:70:8c:
         58:c2:7c:fd:ca:41:5c:e9:4a:08:d3:cd:9a:5f:df:d3:3c:6d:
         73:fe:5f:30:24:86:9b:b8:ab:cc:80:e1:dc:67:56:8c:6f:91:
         20:50:55:f5:54:ab:15:43:9a:91:c9:c8:8c:14:5b:b0:08:c0:
         6a:b2:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----