Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/mkyPpo51RB9PiejhTijjNSJJKAc.roa
File:                     mkyPpo51RB9PiejhTijjNSJJKAc.roa (raw, json)
Hash identifier:          1qbdGY7/W1D5OgH2MTcD35O/ieOWFg1nLt19HccCaK8=
Subject key identifier:   9A:4C:8F:A6:8E:75:44:1F:4F:89:E8:E1:4E:28:E3:35:22:49:28:07
Certificate issuer:       /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial:       018572E80F17FCD2E72292B97024FD58719A
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/mkyPpo51RB9PiejhTijjNSJJKAc.roa
Signing time:             Mon 02 Jan 2023 14:34:48 +0000
ROA not before:           Mon 02 Jan 2023 14:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16267
IP address blocks:        213.146.0.0/19 maxlen: 19
                          2a01:4960::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:0f:17:fc:d2:e7:22:92:b9:70:24:fd:58:71:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
        Validity
            Not Before: Jan  2 14:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a4c8fa68e75441f4f89e8e14e28e33522492807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:b4:37:f6:a1:3f:9e:db:66:94:1a:7b:de:
                    57:3f:05:71:ed:62:82:89:ee:b3:45:c8:b9:ac:c6:
                    b2:14:11:34:93:6b:4e:32:f6:d6:2b:67:ef:85:d0:
                    96:4c:d6:c6:4b:2b:21:47:80:46:7f:0b:3a:38:70:
                    17:01:51:09:b7:c4:ee:46:45:94:41:81:93:f2:7e:
                    e5:4e:c3:d1:27:de:47:52:04:c4:5d:31:23:0c:53:
                    1b:59:b5:4b:a8:8e:0d:a7:ff:8b:42:bb:3a:dd:4e:
                    2a:6c:3e:2a:0a:46:50:f1:5c:8f:6f:55:cb:0b:0e:
                    30:8b:2c:5d:e6:14:d2:1c:21:71:71:ce:e4:b9:ba:
                    9c:5e:71:9e:45:55:80:3e:b5:ed:59:26:04:32:36:
                    c9:49:cb:24:b4:ac:d5:31:26:12:79:7d:5b:8c:02:
                    b1:ae:e9:1e:b1:36:bf:47:0a:a4:0b:41:44:8f:20:
                    a0:a3:a6:75:67:18:44:c6:7f:48:0b:33:18:4e:36:
                    20:f3:a3:18:f2:8b:82:3d:3b:7c:3d:c3:b8:2a:34:
                    2e:cf:46:bf:a8:17:2b:be:b0:f5:11:65:bc:20:8f:
                    06:fa:3a:b9:00:04:25:67:31:c4:a7:b7:22:13:7f:
                    03:a5:6a:31:c0:5e:63:d6:2e:a3:e0:64:c1:df:1c:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:8F:A6:8E:75:44:1F:4F:89:E8:E1:4E:28:E3:35:22:49:28:07
            X509v3 Authority Key Identifier:
                keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/mkyPpo51RB9PiejhTijjNSJJKAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.146.0.0/19
                IPv6:
                  2a01:4960::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:fd:4f:c6:e7:d6:c2:5f:5e:73:e4:1c:0c:a3:97:2a:be:
         bc:b0:b4:44:f7:30:5d:22:2d:04:05:6a:69:40:8d:5b:3d:f4:
         ec:e1:67:87:76:ee:86:28:47:d7:e8:6d:84:7d:d4:22:6c:7d:
         f0:ac:83:35:00:93:48:0c:73:40:7c:22:62:ba:38:df:2e:3e:
         bf:6e:aa:a0:25:a3:e0:ac:55:42:81:4f:24:5f:10:76:b1:cc:
         2a:61:6d:f7:df:26:04:c0:4a:6a:94:16:ca:05:5b:22:1c:a8:
         44:27:6e:b3:30:51:f3:21:93:8b:e7:cf:6a:06:46:fe:85:be:
         c6:6d:86:70:dd:f0:0f:fa:7c:94:47:09:94:0f:b6:ed:46:24:
         47:b9:5c:87:1d:f3:18:2a:1c:fb:b8:8d:d3:5b:e4:60:37:57:
         6a:77:19:98:8b:03:e6:40:1c:10:10:ae:eb:1a:26:e5:cd:29:
         fe:79:ea:dd:30:62:63:4c:7b:15:11:9d:db:9a:1a:0d:ff:8a:
         ce:94:e3:ed:74:cb:3b:f6:19:5e:d5:6c:52:38:10:86:f4:0b:
         d1:9e:8a:44:43:c5:4b:88:30:22:2b:02:5d:4d:f8:6a:6a:5c:
         cf:4c:e7:ec:fa:4e:e7:f5:e4:5b:b9:50:8f:59:82:c9:8a:7e:
         8d:43:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----