Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa
File:                     6sg-P39qer0CUrzA_uXSg0vszBc.roa (raw, json)
Hash identifier:          BtDMAPlh73D8tS/cVliMiK4efkj80iE1lHPVUQ2zsGw=
Subject key identifier:   EA:C8:3E:3F:7F:6A:7A:BD:02:52:BC:C0:FE:E5:D2:83:4B:EC:CC:17
Certificate issuer:       /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial:       0186B6D160C6A953504E937420A641CBDD60
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa
Signing time:             Mon 06 Mar 2023 12:07:00 +0000
ROA not before:           Mon 06 Mar 2023 12:07:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        194.62.42.0/24 maxlen: 24
                          2a11:7e06::/32 maxlen: 32
                          2a11:7e05::/32 maxlen: 32
                          2a11:7e01::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:d1:60:c6:a9:53:50:4e:93:74:20:a6:41:cb:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
        Validity
            Not Before: Mar  6 12:07:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eac83e3f7f6a7abd0252bcc0fee5d2834beccc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:cb:d9:0b:cc:7a:ab:cf:00:01:c3:77:c5:
                    c3:dd:55:bb:a1:47:f9:4d:15:28:51:51:73:77:2d:
                    82:4f:10:a7:69:d6:62:62:ad:b3:65:e4:8e:e2:15:
                    d6:84:a9:1c:70:45:db:dd:92:44:f8:cc:ef:78:03:
                    c8:a2:3d:14:7a:ec:c0:6b:1e:ea:18:15:0a:d9:6d:
                    f7:78:02:05:52:cc:d3:02:4e:06:d9:9e:7d:20:75:
                    2d:29:ef:97:95:17:52:44:3b:da:3d:43:6b:13:f1:
                    ae:89:18:b4:07:9a:6a:2c:a4:92:eb:ab:d8:f1:be:
                    1b:5a:69:20:01:74:4e:d9:6e:a3:9a:2e:a4:1c:5e:
                    be:00:85:76:5a:4c:b7:80:29:f6:f6:b0:c8:96:30:
                    af:38:97:b1:84:99:3c:7d:97:40:8c:c2:9f:09:70:
                    c6:9d:8b:e4:a7:6c:cd:9b:b1:f0:78:38:59:f1:71:
                    86:1f:4a:a3:b2:0d:0a:4f:ce:a5:3c:45:e2:42:27:
                    8b:b8:64:9a:51:fd:31:03:d7:c2:cc:fa:54:d3:a3:
                    67:cb:eb:55:a0:df:67:fe:5f:5c:0c:7b:60:8f:5f:
                    00:01:23:a7:1f:df:5f:17:e2:9e:33:1f:8b:a8:25:
                    a4:c7:49:5a:2c:1b:82:f2:da:d5:f0:bd:19:e2:a7:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:3E:3F:7F:6A:7A:BD:02:52:BC:C0:FE:E5:D2:83:4B:EC:CC:17
            X509v3 Authority Key Identifier:
                keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/6sg-P39qer0CUrzA_uXSg0vszBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.42.0/24
                IPv6:
                  2a11:7e01::/32
                  2a11:7e05::-2a11:7e06:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:ec:25:c4:c2:ba:fc:5f:7a:ec:ce:a5:28:30:f1:ae:7d:
         8f:fe:63:d3:4c:da:27:e6:59:3a:a9:4d:be:65:af:d8:70:ef:
         95:6b:58:71:9e:01:9c:e9:12:4d:cd:a1:4d:64:16:5d:39:c3:
         bc:62:f1:91:2f:b9:aa:a8:bb:01:09:ee:fc:5b:e5:c1:88:2d:
         b0:ac:b2:c3:a7:f9:19:58:77:28:cd:ed:96:a7:8d:17:21:72:
         c5:56:29:e7:ea:a2:d4:13:f9:11:63:28:89:34:3a:cf:79:3a:
         08:3e:9d:85:6e:24:75:3e:c8:d4:0a:e1:22:6d:9d:99:23:b6:
         09:3e:a7:f6:25:d6:2b:4e:e8:e3:01:0b:16:12:e7:16:96:b3:
         56:9c:90:a6:d8:4a:38:92:88:30:92:13:3e:0f:86:38:c8:f2:
         c7:bc:b7:22:3c:8f:8c:ad:43:3a:3b:e9:d2:1a:45:04:70:3d:
         6d:02:f4:e6:90:8e:b6:c9:ee:ec:0e:b9:b9:b7:d0:ac:a6:60:
         32:28:eb:cd:ea:a1:f3:7c:8a:58:41:48:11:65:ed:da:e3:0d:
         84:06:a3:96:47:d1:15:fd:90:4b:91:85:25:10:28:e2:37:db:
         b4:dd:3b:ae:05:54:34:68:45:cf:33:a8:ad:69:3c:d6:8c:fd:
         d2:c6:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----