Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GVBeFuz9QCAMvXHD7qxsd1wko98.roa
File:                     GVBeFuz9QCAMvXHD7qxsd1wko98.roa (raw, json)
Hash identifier:          O4Pn1sgC491Lq1xGm35d98qdzZL440mjpRyNdrexD/s=
Subject key identifier:   19:50:5E:16:EC:FD:40:20:0C:BD:71:C3:EE:AC:6C:77:5C:24:A3:DF
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       0185ECBE59C66E7698D4B516480BF48A8621
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GVBeFuz9QCAMvXHD7qxsd1wko98.roa
Signing time:             Thu 26 Jan 2023 06:22:55 +0000
ROA not before:           Thu 26 Jan 2023 06:22:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203458
IP address blocks:        185.255.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ec:be:59:c6:6e:76:98:d4:b5:16:48:0b:f4:8a:86:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan 26 06:22:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19505e16ecfd40200cbd71c3eeac6c775c24a3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ec:bf:38:54:63:fa:3d:04:59:98:5a:f1:09:
                    3f:3b:6a:e0:0c:63:ff:ec:c9:e2:e5:51:8c:1b:17:
                    be:9a:41:68:5a:69:e2:54:9b:dc:9b:ce:a4:75:c7:
                    ea:86:9e:2a:1d:ee:dd:40:06:cd:20:8b:c7:3c:59:
                    c3:d7:ee:ca:0e:97:bc:99:f2:8a:90:83:20:aa:5d:
                    63:e2:ce:1a:c2:bc:2a:48:8e:cd:6b:53:aa:65:80:
                    cf:00:8a:1a:2c:11:6a:eb:36:38:90:97:d6:bf:ad:
                    fa:03:d4:87:ea:93:17:40:93:e7:1e:e8:8b:f8:ef:
                    fb:ed:9d:d6:08:5e:59:02:cd:e3:1d:c6:b5:42:e5:
                    cf:01:94:38:ac:b3:9d:ca:02:bf:9e:b5:8c:93:f8:
                    3c:87:fb:c2:2f:53:3a:c2:db:0f:f4:22:f5:83:7b:
                    2a:ce:7d:2b:f6:be:80:7c:8d:f0:2a:c6:73:44:16:
                    3c:38:8f:bd:f1:32:62:40:2f:06:93:7e:ab:39:e6:
                    d3:a5:35:42:5c:16:9c:18:e5:d6:b5:5e:6c:98:61:
                    07:33:65:67:28:44:60:bf:40:bc:28:5c:a8:c3:eb:
                    e6:9d:db:13:62:44:f6:51:41:df:7c:cb:38:d2:c4:
                    fa:7b:de:b0:cb:6d:1e:0e:50:58:e5:96:de:b7:b6:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:5E:16:EC:FD:40:20:0C:BD:71:C3:EE:AC:6C:77:5C:24:A3:DF
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/GVBeFuz9QCAMvXHD7qxsd1wko98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:c9:ea:61:76:0e:df:eb:fb:b6:2a:c2:48:98:53:5d:d0:
         59:b1:98:85:17:34:65:50:7b:c1:97:ec:d8:10:19:bd:92:14:
         81:9f:67:9d:b4:cc:dd:c6:c9:97:3f:aa:c6:4d:d6:20:b9:79:
         f4:4c:25:11:02:53:f7:7e:65:4e:82:aa:d9:66:f8:f7:5b:8b:
         77:a0:17:1b:3f:ca:69:f1:07:3f:ea:38:57:c1:ae:f9:fe:b9:
         34:3a:65:8a:e6:8d:cd:41:e1:98:5e:9d:da:34:12:07:7f:68:
         f6:43:a0:2c:07:f5:b2:44:75:33:95:19:02:ef:4d:ab:6d:d1:
         cb:48:f4:37:24:b7:bf:4b:0f:a7:b8:7c:a7:5c:dc:d6:6f:ed:
         35:91:6c:8b:78:d7:86:5f:7a:a0:83:8e:b7:09:93:69:65:02:
         a8:46:2f:28:77:40:99:74:3f:7c:a4:54:1e:37:d4:b1:67:68:
         6d:55:98:3e:52:57:98:35:2f:e5:92:dd:b9:4d:cf:4f:f5:35:
         11:ad:6f:58:87:c0:1c:40:40:4a:4f:9b:6f:6d:38:71:ef:c1:
         4c:ff:6b:46:c4:2c:ac:2e:67:75:a6:30:ba:06:79:8b:f0:58:
         80:dc:57:9d:60:cd:70:41:51:13:48:39:7a:31:06:04:a0:b8:
         6b:2c:0c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----