Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa
File:                     Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa (raw, json)
Hash identifier:          WRcbhUM6kRZudL5oUYF1i2XOADuJiuPm59y3XZsUUbU=
Subject key identifier:   39:FE:E0:50:F2:21:2D:C1:7C:BB:9B:E0:35:C6:3A:C5:7A:E7:4E:41
Certificate issuer:       /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial:       0185BE3859A0BEDD8B6E514897B4B26314C7
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa
Signing time:             Tue 17 Jan 2023 05:34:02 +0000
ROA not before:           Tue 17 Jan 2023 05:34:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49392
IP address blocks:        46.32.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:be:38:59:a0:be:dd:8b:6e:51:48:97:b4:b2:63:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
        Validity
            Not Before: Jan 17 05:34:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39fee050f2212dc17cbb9be035c63ac57ae74e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:ac:de:f1:35:1f:32:ab:cc:19:3c:e3:63:
                    50:3a:a7:c2:f0:49:41:65:f4:29:b3:55:84:2c:01:
                    c0:20:d2:a4:0e:9e:1d:3e:db:e5:66:7e:43:83:c0:
                    48:2e:cc:af:24:c9:89:6b:d1:b2:64:0e:74:05:2b:
                    61:bb:df:5f:94:fa:b9:d4:06:dd:2b:fe:34:8e:af:
                    4c:28:21:4d:5a:4f:41:d5:f3:a1:77:cc:23:4d:de:
                    08:b8:f0:dd:26:35:b3:95:ff:1c:9c:bb:86:8c:c4:
                    9f:b1:72:28:bd:82:f7:f0:eb:17:07:96:f9:a1:d3:
                    52:84:05:f4:40:f9:04:a3:7a:a7:60:0f:5d:8f:55:
                    72:5c:28:57:68:98:2a:67:c9:49:44:d3:1c:f8:97:
                    ab:b5:75:f6:89:33:e6:d8:57:61:fa:dd:a2:8c:f5:
                    89:22:22:61:33:a9:b3:c7:c8:b7:08:51:db:ee:23:
                    23:92:5b:2c:57:0d:8c:ea:54:5c:43:3d:d6:dc:31:
                    28:55:d9:ee:02:43:22:bb:a6:4e:98:26:77:df:02:
                    79:73:b9:e2:89:80:50:c5:e3:b5:0c:2d:ed:f6:bd:
                    dd:74:46:b4:73:83:59:73:9b:2c:eb:c1:03:97:32:
                    01:92:68:b3:d8:69:e6:8a:b0:21:eb:75:34:58:0b:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FE:E0:50:F2:21:2D:C1:7C:BB:9B:E0:35:C6:3A:C5:7A:E7:4E:41
            X509v3 Authority Key Identifier:
                keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.32.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:f8:09:b5:af:77:66:16:6d:cb:4b:f6:fc:4b:5c:8d:78:
         9f:2f:70:47:cf:9e:93:1b:3b:26:7c:03:6c:d3:88:a8:a4:46:
         0e:e0:de:8f:5d:59:4d:3f:b9:b4:36:ad:20:05:92:6f:c9:c5:
         77:33:23:d3:40:cb:8a:8f:e2:6a:1c:66:2e:c7:ea:47:a3:09:
         c5:4c:03:44:e9:9c:7f:98:2d:01:e1:27:aa:d3:a2:81:8a:98:
         d7:37:2b:df:e0:30:48:d3:db:4f:05:e4:11:b0:4f:a5:99:1e:
         45:26:80:c9:1a:b4:8c:89:4a:78:97:5f:0d:f7:10:af:6b:4f:
         75:2c:b3:43:da:73:18:9c:f9:9f:4a:1f:06:67:03:76:2d:ca:
         4b:f9:72:83:96:2b:a6:65:46:13:c9:d8:1f:f5:7b:fe:fb:13:
         72:8e:a4:ad:f5:8c:ea:b8:b7:f2:3f:65:46:b2:0e:11:78:0d:
         6c:a9:7e:a3:89:34:6c:a6:e6:df:37:df:0d:e3:50:78:5c:05:
         24:f8:1d:75:23:e7:d6:67:3b:4f:54:90:81:cc:d3:8a:25:09:
         fd:02:55:a6:99:7e:b5:dc:bb:43:23:61:da:89:64:2f:cf:d0:
         d8:ba:49:2c:ca:40:6a:57:03:2b:0a:98:e4:01:be:fa:f5:5f:
         71:ea:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----