Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa
File:                     33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa (raw, json)
Hash identifier:          PKugPtGf+/Cc/Zj79mbqaOqn7TDkdPEFlkvcKzoH8aI=
Subject key identifier:   DF:75:B2:0C:14:3D:64:EE:7C:B4:CA:10:B4:F7:01:6B:67:11:08:E6
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01856ED4D8488D9990B38BC330C1EC8D1747
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa
Signing time:             Sun 01 Jan 2023 19:35:20 +0000
ROA not before:           Sun 01 Jan 2023 19:35:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398343
IP address blocks:        185.110.62.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:d8:48:8d:99:90:b3:8b:c3:30:c1:ec:8d:17:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jan  1 19:35:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df75b20c143d64ee7cb4ca10b4f7016b671108e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:c3:77:bc:44:81:68:dd:6d:6a:9d:87:44:
                    81:09:ab:99:22:7b:63:dc:a8:83:3c:28:ca:78:70:
                    b2:25:39:a7:23:0a:7b:0d:44:6c:f5:f8:91:34:6a:
                    0e:58:93:48:27:e2:72:2b:0f:88:f0:6d:8c:5d:98:
                    6a:94:f9:e8:76:9c:09:ea:70:25:bc:52:29:c8:fd:
                    d5:d4:7f:1c:2e:c0:c7:5d:f7:84:88:1d:70:89:99:
                    e4:31:4e:14:88:40:e3:20:b3:b3:8c:34:13:ab:ba:
                    cd:1a:a7:da:4e:70:97:05:55:53:ea:d9:8d:67:de:
                    b1:5e:e0:2e:20:e8:64:34:c4:c4:3b:27:f8:b4:ea:
                    3b:4b:6b:50:45:ee:ce:65:9b:77:64:23:b7:ab:d4:
                    eb:46:0f:6f:79:92:7a:bd:69:d6:b6:56:48:4f:06:
                    78:a7:62:0d:01:d2:df:24:bb:b6:a4:a1:6b:e6:4d:
                    3c:34:50:8e:ae:ab:09:2d:d4:d6:51:44:88:55:ca:
                    d0:dd:bf:a2:a4:b6:06:0f:5a:ff:9f:52:62:f5:38:
                    0b:d8:52:c2:f3:ed:db:68:b8:a9:83:a5:e5:78:b1:
                    99:89:c9:0a:6a:2f:65:93:d4:fd:74:10:cb:40:e3:
                    81:37:5f:b2:6f:3f:f9:39:79:fa:8c:25:d3:59:03:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:B2:0C:14:3D:64:EE:7C:B4:CA:10:B4:F7:01:6B:67:11:08:E6
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/33WyDBQ9ZO58tMoQtPcBa2cRCOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:d8:17:6f:65:e3:c2:0f:28:0e:e5:08:8b:3c:a3:07:bb:
         cd:07:5f:13:c5:c3:5a:08:2b:59:8f:8c:dd:b3:5b:b9:0b:97:
         d4:70:0a:65:d0:50:43:4d:a4:2b:e1:7f:17:81:0b:60:c1:78:
         bf:ff:5c:0b:73:98:39:81:e6:e5:f6:c5:dc:dc:42:b7:8a:d7:
         fd:d0:e8:d8:81:b3:69:61:e8:fb:12:89:88:86:74:22:bb:1f:
         ad:0c:ee:4a:a7:97:08:1b:37:d4:ec:52:84:dc:4d:8e:d6:bf:
         09:90:b2:0b:03:0f:bb:d9:9f:1b:4d:80:d5:f2:76:b6:5f:17:
         df:64:e8:14:fa:0c:d8:5d:7e:5e:55:98:10:5c:2d:ce:03:6b:
         16:a8:f3:4c:1c:fc:03:86:95:b9:87:ff:d2:cd:38:f4:b7:8c:
         40:d1:0f:0f:8f:91:46:98:c3:f3:43:14:9f:ee:92:92:9d:16:
         2b:1f:9a:ce:16:7c:ae:38:f1:2a:ff:58:1e:e5:82:d9:d2:41:
         c8:e6:05:c3:8e:be:ce:cd:cd:ad:a6:fd:49:70:12:09:21:bc:
         9c:33:6a:09:df:98:0f:00:f7:78:b4:02:68:ed:a5:01:f4:23:
         4a:a1:81:fb:35:59:64:b9:83:65:5b:6f:3b:cb:dc:a9:7f:b8:
         26:e4:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----