Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/rEH0UH-ALIOatrw1o4L4o9MFDLI.roa
File:                     rEH0UH-ALIOatrw1o4L4o9MFDLI.roa (raw, json)
Hash identifier:          u5GSqj73GSTn/S2Dl0MJvEsAhJJof+/ge9Y1gGg3iGs=
Subject key identifier:   AC:41:F4:50:7F:80:2C:83:9A:B6:BC:35:A3:82:F8:A3:D3:05:0C:B2
Certificate issuer:       /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
Certificate serial:       01856ED4CA3218A766C46CDEE6CABA777115
Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/rEH0UH-ALIOatrw1o4L4o9MFDLI.roa
Signing time:             Sun 01 Jan 2023 19:35:17 +0000
ROA not before:           Sun 01 Jan 2023 19:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47127
IP address blocks:        91.209.191.0/24 maxlen: 24
                          2001:67c:2b3c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:ca:32:18:a7:66:c4:6c:de:e6:ca:ba:77:71:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f
        Validity
            Not Before: Jan  1 19:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac41f4507f802c839ab6bc35a382f8a3d3050cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:cc:33:2f:d1:55:82:83:4c:57:e3:3b:e7:
                    6a:5d:45:e5:8e:fb:f0:b4:0d:1d:9d:2f:81:88:52:
                    d8:91:1a:07:73:92:a4:2e:53:7d:7b:33:1b:bd:89:
                    6a:7d:03:ca:68:8c:2a:08:c1:2d:43:4d:a4:1b:c6:
                    f4:5b:1f:5a:76:ac:e1:55:f4:35:25:45:32:e4:87:
                    db:84:ac:7d:a1:7b:9c:eb:73:fc:ad:16:d7:d2:12:
                    c3:8e:63:34:d3:af:31:d2:23:1b:e7:23:95:88:cd:
                    6d:18:35:83:bd:03:7e:fc:77:17:63:8e:44:67:7f:
                    2c:b8:5b:b8:1d:db:3d:e2:fd:b1:cd:af:74:d2:e3:
                    38:0b:e3:2a:ec:a0:6f:28:c4:00:f2:57:3f:f0:0c:
                    8f:6b:64:ac:6a:8f:c6:b5:92:3e:2d:ad:14:d9:0b:
                    c9:a0:1e:d6:b6:a4:c4:70:ac:63:4f:29:c2:8e:ae:
                    af:30:a0:df:21:d6:e4:73:36:ad:07:71:ac:8e:dc:
                    2d:34:45:3e:81:39:d6:c5:b8:4a:7b:6d:37:09:eb:
                    7e:3b:7d:e8:53:34:9e:c7:44:05:cf:ed:de:bd:03:
                    be:50:7e:75:5d:ae:c9:df:c2:07:b7:79:33:b0:43:
                    9f:69:ce:d2:05:db:ff:84:c0:bf:83:44:5e:c6:2e:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:F4:50:7F:80:2C:83:9A:B6:BC:35:A3:82:F8:A3:D3:05:0C:B2
            X509v3 Authority Key Identifier:
                keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/rEH0UH-ALIOatrw1o4L4o9MFDLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.191.0/24
                IPv6:
                  2001:67c:2b3c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:7d:2d:79:88:fd:d2:3f:ea:b7:cd:31:78:ca:99:b7:68:
         45:71:e2:a4:9a:f5:3b:75:6f:a7:c5:1a:f5:37:05:5e:83:bf:
         29:4d:3a:49:7d:c9:6f:fb:6c:5f:54:8a:e1:4c:d6:e6:0c:6b:
         69:b0:37:8d:e2:32:4b:bb:a2:60:67:27:e1:fe:4c:0c:ec:be:
         2c:1b:3d:22:e2:b8:f5:15:21:72:7e:c9:d4:46:84:02:79:a2:
         2e:95:46:ec:d2:5a:9c:b2:42:ca:58:e1:dd:61:58:d4:0b:b9:
         e0:38:29:63:1e:4d:8b:ed:95:04:67:5b:a4:32:95:6c:cf:7d:
         65:ee:e1:83:aa:51:77:4b:cb:e8:c4:7b:d4:d3:cc:06:92:5a:
         5d:12:5e:e1:b8:82:f3:8c:d3:31:1b:fb:ff:ae:ea:a0:80:ea:
         1f:4f:01:3a:73:45:7d:e8:a8:7c:f3:e3:f8:8e:0d:70:35:61:
         e1:e6:ff:be:8f:3b:9d:3e:22:34:e5:b4:36:cd:da:39:ee:67:
         2b:18:ee:0e:68:d8:49:57:05:73:e2:34:e1:af:3f:97:58:9b:
         2b:cc:be:0b:ad:f0:dd:97:b8:37:3f:a1:9f:44:5a:77:37:f3:
         86:94:94:41:03:33:74:95:6c:e0:25:a6:3a:bc:1f:13:db:27:
         d3:63:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----