Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa
File:                     PCCAC2R-HQveTpIfhiMe4A46AOs.roa (raw, json)
Hash identifier:          tP5qx4lQ3E54fwFDkT07RlPIvzqIF1lRpQV5qHnUFkg=
Subject key identifier:   3C:20:80:0B:64:7E:1D:0B:DE:4E:92:1F:86:23:1E:E0:0E:3A:00:EB
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       01856E2669F0E1CC3810660883B18D752BA1
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa
Signing time:             Sun 01 Jan 2023 16:24:49 +0000
ROA not before:           Sun 01 Jan 2023 16:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43685
IP address blocks:        185.183.244.0/22 maxlen: 24
                          2a0b:2280::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:69:f0:e1:cc:38:10:66:08:83:b1:8d:75:2b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Jan  1 16:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3c20800b647e1d0bde4e921f86231ee00e3a00eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:30:c7:d0:85:79:4e:52:38:6b:a7:b5:d4:
                    28:35:7c:91:e3:da:24:03:be:25:64:90:e4:72:28:
                    9d:c5:b2:f6:f3:f8:11:02:a7:15:5a:f7:39:36:f7:
                    39:27:5f:3b:d0:e7:4e:43:8d:fa:83:e9:d0:7b:87:
                    6e:67:27:bd:f6:e8:91:75:27:40:70:40:45:30:d9:
                    4d:b0:a0:75:06:6d:d3:be:be:b8:59:57:b8:b7:6f:
                    8f:5f:c2:79:c3:ed:03:13:66:7e:15:29:02:0d:09:
                    d6:5c:77:42:13:b4:f1:fc:c6:fa:39:d2:e9:04:77:
                    37:44:e6:18:a6:a0:2c:38:00:99:43:ab:b3:af:9a:
                    bf:34:b4:c5:a0:a8:d9:a9:e7:53:c0:0a:3a:9e:bb:
                    dc:40:da:57:52:0c:2a:87:d4:74:89:9e:fd:70:fc:
                    7f:2a:c6:f1:21:d4:aa:a3:b4:ea:b7:49:cc:33:63:
                    ee:65:e7:96:f3:cb:d9:11:61:11:b2:29:4f:29:af:
                    a6:6e:80:50:c9:72:b9:03:dd:78:06:40:63:36:88:
                    88:5a:5c:6f:6e:99:00:45:b7:ee:3d:1d:19:d2:d1:
                    01:be:9b:26:00:eb:d6:34:4f:c7:ee:0b:c7:b7:da:
                    4f:42:c3:37:39:46:d8:29:c0:02:93:fa:83:da:be:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:20:80:0B:64:7E:1D:0B:DE:4E:92:1F:86:23:1E:E0:0E:3A:00:EB
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/PCCAC2R-HQveTpIfhiMe4A46AOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.244.0/22
                IPv6:
                  2a0b:2280::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:af:f9:0b:16:9f:d7:e1:f3:63:b0:74:4f:42:85:27:fd:
         37:1b:ef:3a:d2:cd:e7:13:f8:e6:8a:ba:cc:80:07:1d:60:e0:
         42:50:01:f9:87:10:14:c0:50:d7:99:0e:94:08:c6:4a:50:4a:
         a3:b9:ef:cf:c7:82:15:bb:1a:8c:7e:0e:f0:30:b1:f5:1a:61:
         88:2f:79:89:93:6d:69:57:fc:d6:fc:77:5e:ab:c3:47:ae:72:
         a4:82:9d:b7:2a:63:41:d8:e2:2f:55:01:35:50:b1:4d:69:af:
         d1:de:62:08:92:fb:73:cc:4c:50:dd:a5:63:3e:8d:9e:38:a7:
         85:23:97:5b:0b:6d:99:e6:79:09:b7:9c:81:1f:3f:1e:d5:39:
         23:3c:f1:30:b4:25:5c:c2:49:7b:c9:ab:56:89:3d:43:f0:68:
         c9:96:4f:0a:a8:81:8a:f5:04:9a:74:cc:1e:6d:40:dd:36:5e:
         3b:b3:ef:78:8e:c8:2f:e4:b7:ac:e9:53:e0:47:ff:d8:18:42:
         b9:bb:95:80:37:7a:93:8f:33:a0:51:43:1d:43:15:f0:b4:73:
         3a:7a:e1:19:f1:13:f7:73:7d:d1:b1:59:2f:a6:4b:39:6b:aa:
         4e:62:99:9f:59:39:85:98:f6:e8:59:9a:0e:1b:c2:f1:49:3c:
         1b:07:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----