Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KITudE-H8fJEKrGRbPa7Gvzqo1I.roa
File:                     KITudE-H8fJEKrGRbPa7Gvzqo1I.roa (raw, json)
Hash identifier:          +jfAZzpkefqVLfbugzsiQCNRAFVEkt7/0S69QaHIZRQ=
Subject key identifier:   28:84:EE:74:4F:87:F1:F2:44:2A:B1:91:6C:F6:BB:1A:FC:EA:A3:52
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       018674315C8603DE60C579FDD4F6E1CBB6E7
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KITudE-H8fJEKrGRbPa7Gvzqo1I.roa
Signing time:             Tue 21 Feb 2023 13:37:17 +0000
ROA not before:           Tue 21 Feb 2023 13:37:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        91.234.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:31:5c:86:03:de:60:c5:79:fd:d4:f6:e1:cb:b6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Feb 21 13:37:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2884ee744f87f1f2442ab1916cf6bb1afceaa352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:77:cb:6d:e5:c7:f9:9d:10:e0:31:39:50:
                    01:ab:b8:2f:da:0e:35:9e:c7:0a:68:14:29:45:58:
                    cc:2c:07:88:31:a1:dc:88:31:94:61:43:86:3c:db:
                    1f:0b:fe:89:19:36:dc:1d:c9:d6:ac:10:05:f5:41:
                    19:8b:3c:34:f0:88:82:bf:48:4c:b6:88:62:69:2c:
                    a4:f2:b4:a3:2a:38:b0:11:ac:95:ac:81:43:79:fb:
                    61:52:aa:14:a3:7d:c5:45:47:d8:1a:f0:f2:5b:24:
                    c7:bb:9d:6f:07:b2:ae:a7:72:65:28:de:4a:57:77:
                    0e:70:e8:c0:9b:6d:13:4c:d3:08:1b:50:31:3e:0f:
                    15:6c:00:ab:cf:e9:00:14:2e:be:11:a0:c7:e4:3c:
                    95:66:da:a6:0d:ce:90:e4:ef:59:fd:d9:63:98:15:
                    c0:34:ae:7a:f3:eb:dd:2a:ab:44:e8:fa:ed:e7:c5:
                    18:39:b6:bf:0d:05:1f:f5:8c:81:c5:a4:7d:49:1d:
                    96:cc:8c:ba:ff:78:bb:f1:b8:90:5d:02:3e:44:8e:
                    aa:22:72:d1:54:60:f3:35:09:74:81:3e:08:2a:ac:
                    b0:9f:18:e0:2e:a9:5c:3e:7f:0b:d9:1d:f4:e8:11:
                    32:5b:8e:f5:7c:6e:42:ce:ad:00:66:fd:3d:02:0b:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:EE:74:4F:87:F1:F2:44:2A:B1:91:6C:F6:BB:1A:FC:EA:A3:52
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/KITudE-H8fJEKrGRbPa7Gvzqo1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:17:58:ed:02:d5:c5:cd:5a:b2:5d:2d:b9:8c:e1:42:28:
         82:a0:c6:89:ec:c3:d6:1a:61:4a:6e:3d:22:ae:48:69:02:dd:
         38:a1:1f:34:00:a5:04:0b:5c:9f:40:c0:25:37:96:46:a5:07:
         2b:f3:9e:11:c1:ec:b4:70:1c:e0:e2:0a:ab:5c:aa:ee:79:56:
         90:ad:18:48:fd:ba:41:0d:ac:5a:90:87:c7:73:71:41:f3:50:
         9a:d6:30:b3:59:83:ec:aa:b0:79:6a:20:f4:95:42:75:b4:f2:
         47:e9:b0:a4:50:cf:57:2a:e4:aa:ca:3c:66:e1:1a:b3:59:6c:
         3b:c2:31:a0:1a:3c:69:98:d8:74:c7:f9:66:3f:19:42:04:67:
         69:ad:f3:c1:65:54:d7:d9:a0:df:5a:e6:ec:d4:9a:8e:a7:a5:
         73:bf:95:b6:bb:42:25:a4:29:e5:d0:47:bf:4f:ef:89:2e:2b:
         2c:f8:7b:73:36:2f:b8:4b:10:4b:ee:8c:37:81:41:6c:97:d8:
         fb:fa:89:71:4a:05:14:9f:14:dc:ea:6a:28:3b:84:c8:78:32:
         01:51:f3:fc:bf:52:ad:fb:2e:3d:c0:6d:aa:49:8f:01:08:ea:
         74:14:43:86:fc:a0:1c:85:8b:7a:22:19:b9:3a:e1:7d:5c:18:
         80:ba:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----