Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/yA5j6uyMT3MDMY8WWGmn1gFnqPQ.roa
File:                     yA5j6uyMT3MDMY8WWGmn1gFnqPQ.roa (raw, json)
Hash identifier:          UUq76oTjx7Jt0y4t6BfuHHuWhCNgXb7Q07PFiJ50y4Q=
Subject key identifier:   C8:0E:63:EA:EC:8C:4F:73:03:31:8F:16:58:69:A7:D6:01:67:A8:F4
Certificate issuer:       /CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Certificate serial:       01857246EEBC3DC9452892A63192D9C0243B
Authority key identifier: EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/yA5j6uyMT3MDMY8WWGmn1gFnqPQ.roa
Signing time:             Mon 02 Jan 2023 11:38:49 +0000
ROA not before:           Mon 02 Jan 2023 11:38:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13054
IP address blocks:        213.164.64.0/19 maxlen: 19
                          2a03:3500::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:ee:bc:3d:c9:45:28:92:a6:31:92:d9:c0:24:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
        Validity
            Not Before: Jan  2 11:38:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c80e63eaec8c4f7303318f165869a7d60167a8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:89:14:0f:3e:85:12:7e:d0:27:32:db:ed:
                    d0:fe:e1:bb:97:31:38:af:4d:11:db:88:a3:3e:ac:
                    5c:fb:09:42:7b:b0:23:8d:8f:a0:93:53:d0:d2:fd:
                    ec:ac:59:d8:1e:9e:6b:af:13:ba:b3:a3:2e:8f:1e:
                    53:93:ee:76:d6:76:d0:62:87:0a:25:28:6d:b2:c5:
                    4e:93:b7:6b:4c:bd:10:1e:ff:34:86:5a:f5:72:45:
                    c7:b0:b6:81:fd:1c:3e:2c:6e:03:5e:ba:9a:b2:56:
                    2f:be:35:d2:c7:28:fc:26:1a:eb:62:99:c6:e4:16:
                    9d:95:14:0b:f4:f1:c7:3e:a5:3e:35:4b:a6:6e:19:
                    03:38:de:0f:13:29:ab:85:4c:a0:86:be:14:e9:29:
                    d7:7e:20:ff:d3:0e:93:3e:8e:cc:98:b1:01:81:6b:
                    6a:45:cf:d8:b4:5a:fb:4f:45:d2:3e:d1:b5:21:87:
                    fc:2d:70:da:fd:9b:ad:54:d5:43:ea:a4:27:3f:a2:
                    04:53:4b:1b:a8:2f:7f:f3:ba:44:2e:b9:ce:45:ce:
                    2f:55:b1:6b:4d:9a:9e:4f:67:d0:13:30:3b:37:b6:
                    b1:de:9c:d4:45:84:c0:aa:aa:b9:9d:bd:60:6e:2d:
                    79:86:0c:0b:e8:7f:06:18:fb:e3:df:1a:06:90:fe:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:63:EA:EC:8C:4F:73:03:31:8F:16:58:69:A7:D6:01:67:A8:F4
            X509v3 Authority Key Identifier:
                keyid:EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/yA5j6uyMT3MDMY8WWGmn1gFnqPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.164.64.0/19
                IPv6:
                  2a03:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:ea:53:a1:03:04:47:c1:31:8b:58:58:75:2b:ad:ed:31:
         b3:b6:63:e2:24:b4:ea:09:05:c5:fb:3b:c3:bb:5f:c6:74:ce:
         a9:7e:47:93:9c:f3:dd:80:40:9e:60:66:6b:c7:9d:7c:28:b4:
         1f:49:25:08:fc:99:9b:22:a4:45:e3:31:33:a2:d5:21:16:cf:
         91:06:24:a9:00:21:89:38:b5:61:a0:d3:f6:6d:43:2d:69:53:
         a2:f0:b4:59:75:a9:e8:ca:75:01:05:3a:12:82:9a:43:04:84:
         7f:b7:c9:75:38:8d:60:cc:c7:3f:d9:0f:a8:14:ac:e0:29:9a:
         ea:06:74:9f:15:f2:18:31:38:82:0e:6c:4b:b3:a8:ac:b1:c5:
         8d:14:4a:62:22:2c:c3:e0:fb:d2:48:7b:78:71:5c:9b:32:28:
         51:63:74:5e:5c:ac:67:03:2b:f7:80:ed:7b:02:48:b8:30:4b:
         fd:87:22:d3:e6:ca:52:9a:30:0f:7a:5a:ce:09:8c:af:d3:6a:
         fd:32:c6:9d:d2:38:1c:13:8a:1e:66:c5:28:3a:b1:1a:dc:5d:
         be:35:cb:18:65:d1:72:b6:e9:f8:ab:d8:78:9e:0c:29:15:e1:
         17:a3:ff:e5:1f:93:7b:e7:91:85:d0:41:54:6e:3b:77:3b:3d:
         19:2e:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----