Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/5OdX4USdnLHBA1RFeppYB3aW_iE.roa
File:                     5OdX4USdnLHBA1RFeppYB3aW_iE.roa (raw, json)
Hash identifier:          C1N3DPlY0MmoNucX1UnhH3zW0LEvNwwmU+h9xRghIf8=
Subject key identifier:   E4:E7:57:E1:44:9D:9C:B1:C1:03:54:45:7A:9A:58:07:76:96:FE:21
Certificate issuer:       /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial:       018570C2E2D8C8C03FFE1A0050798FF644AA
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/5OdX4USdnLHBA1RFeppYB3aW_iE.roa
Signing time:             Mon 02 Jan 2023 04:34:58 +0000
ROA not before:           Mon 02 Jan 2023 04:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199354
IP address blocks:        185.19.228.0/22 maxlen: 22
                          2a03:ffc0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:c2:e2:d8:c8:c0:3f:fe:1a:00:50:79:8f:f6:44:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
        Validity
            Not Before: Jan  2 04:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4e757e1449d9cb1c10354457a9a58077696fe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:89:fd:51:4b:82:21:30:cd:29:fd:5a:20:
                    9d:ed:56:44:38:5b:15:b3:5b:e3:95:da:4d:d7:f8:
                    f2:e8:30:c4:4c:39:bb:b1:8f:fe:c5:eb:f5:fb:6f:
                    69:28:94:9c:c6:d1:ab:dd:b5:92:0f:24:0b:de:79:
                    0d:6e:8f:4f:26:17:96:3d:d5:a2:d5:8f:04:53:db:
                    f3:95:9e:a0:43:54:29:79:ff:4f:67:06:86:e2:0e:
                    2b:b5:ff:ac:9b:af:da:f9:8f:6b:72:f5:bc:0a:dd:
                    84:c5:e1:09:2d:69:16:05:17:9b:3e:db:aa:f4:2a:
                    7c:a8:dc:0c:78:8c:3c:08:2e:e6:91:55:bf:a3:18:
                    ab:cf:8d:a8:9f:3c:a4:a4:68:1f:a4:f9:cf:41:0d:
                    58:ed:6d:e4:53:cb:8e:f6:a0:07:4e:09:74:8a:b7:
                    dd:9e:8d:92:95:17:6c:c7:f1:bf:79:e8:9c:f8:70:
                    88:e6:e9:66:e6:31:ef:c4:85:2a:86:2e:79:c7:da:
                    e4:c4:26:85:bd:61:c4:51:1d:66:35:68:d7:bf:b6:
                    58:88:4c:cf:38:4f:c1:c4:2f:c3:20:95:86:25:1a:
                    30:66:c2:d5:ab:41:68:7c:f9:3a:82:e4:5f:1f:f8:
                    87:82:5e:23:aa:44:e8:af:35:ec:90:6e:d0:41:02:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:57:E1:44:9D:9C:B1:C1:03:54:45:7A:9A:58:07:76:96:FE:21
            X509v3 Authority Key Identifier:
                keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/5OdX4USdnLHBA1RFeppYB3aW_iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.228.0/22
                IPv6:
                  2a03:ffc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:60:f8:b8:b2:83:2d:55:3b:34:6b:d4:eb:fc:dc:18:c6:
         4a:b2:fc:c7:be:32:16:a8:0d:f6:cd:9a:74:31:50:c8:39:b3:
         a5:4c:11:1e:61:8c:38:bd:76:04:9e:d3:2b:b4:7f:9d:ad:66:
         41:55:93:5e:7e:ca:6d:2f:96:6f:88:5e:a5:60:6e:24:dd:63:
         4d:02:0c:24:1e:d1:f3:22:76:ae:07:68:ec:3a:3e:e5:56:a9:
         94:bd:94:88:b8:fe:51:fd:64:a9:98:5b:03:8e:7f:31:48:e7:
         fd:0d:db:a7:60:2c:4a:02:90:25:d1:99:fd:28:e1:d1:bb:d0:
         a0:88:a8:7b:48:9c:9b:9d:e7:98:f1:ae:35:58:0d:84:50:51:
         77:92:d5:42:8e:72:a5:7b:be:7f:57:d6:fd:df:e2:93:45:71:
         57:91:74:b1:07:e1:ab:8c:0b:ba:db:3a:f4:51:68:e2:c8:2a:
         db:f0:b0:a8:49:93:3a:76:31:82:63:53:e8:dc:86:36:04:44:
         21:fd:ff:c6:9b:11:08:1d:9c:a2:8a:13:83:99:17:3b:71:cd:
         fc:ab:13:42:54:2f:cd:49:b1:f8:35:4c:60:16:43:9f:59:38:
         9e:bf:15:6f:95:f5:3b:00:db:84:26:5a:62:e7:91:4f:85:51:
         31:86:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----