Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/6heBM4_GVitQA4QXRmhJ7bVKCSY.roa
File:                     6heBM4_GVitQA4QXRmhJ7bVKCSY.roa (raw, json)
Hash identifier:          6lE4NLaFioRwPGy6GmIuN8e8WF1pvt7sMumWQ0yc6a0=
Subject key identifier:   EA:17:81:33:8F:C6:56:2B:50:03:84:17:46:68:49:ED:B5:4A:09:26
Certificate issuer:       /CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
Certificate serial:       018CABDE3F3FA009E592529B4C492AF1B38E
Authority key identifier: 33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/6heBM4_GVitQA4QXRmhJ7bVKCSY.roa
Signing time:             Wed 27 Dec 2023 15:21:58 +0000
ROA not before:           Wed 27 Dec 2023 15:21:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204978
IP address blocks:        92.118.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ab:de:3f:3f:a0:09:e5:92:52:9b:4c:49:2a:f1:b3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c676946369f548ce6218fe473f3da4d1a5d1a8
        Validity
            Not Before: Dec 27 15:21:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea1781338fc6562b50038417466849edb54a0926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0b:bb:27:f8:00:46:d3:ce:68:ca:db:c4:01:
                    54:bb:97:3c:97:f6:74:7d:5a:fc:0d:10:ce:e9:55:
                    e7:87:52:4f:27:b5:96:0f:8e:b4:45:ce:28:24:ce:
                    66:94:e7:d8:a0:22:a2:15:d4:92:e6:22:7e:a8:10:
                    67:74:40:8e:d5:a0:47:06:3e:7a:27:ee:b7:c0:20:
                    a9:c1:31:aa:89:d7:02:4b:cd:01:86:e4:0f:91:ce:
                    ec:02:07:0b:e2:02:66:84:ec:9c:d6:f2:28:30:99:
                    9b:4e:31:3f:7f:f9:fd:27:f2:01:3f:9d:90:a2:8e:
                    6a:98:97:16:87:6b:8c:51:09:09:84:f0:f1:5a:3d:
                    60:26:f4:f8:ed:d9:2a:a7:6d:0b:23:50:1c:34:28:
                    ea:f4:6d:ba:83:3f:d4:bd:c7:b1:c4:e7:60:ca:c4:
                    78:b8:20:8c:45:07:89:7d:6c:01:1c:fb:42:eb:bd:
                    17:5f:de:a1:8a:ab:d8:df:2c:c4:fa:35:94:c1:84:
                    c7:bb:f9:d2:d3:e2:33:1c:e8:ab:f9:b8:98:5b:39:
                    a6:31:1e:8f:97:de:4e:21:58:df:61:ed:20:e1:e1:
                    3c:64:85:58:cb:e7:3a:98:2c:6c:ec:8d:6d:5f:ee:
                    e9:13:6d:92:e9:2c:ee:8a:11:d7:c1:61:d0:ea:20:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:81:33:8F:C6:56:2B:50:03:84:17:46:68:49:ED:B5:4A:09:26
            X509v3 Authority Key Identifier:
                keyid:33:C6:76:94:63:69:F5:48:CE:62:18:FE:47:3F:3D:A4:D1:A5:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/6heBM4_GVitQA4QXRmhJ7bVKCSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bbb62-a915-41af-887f-99e65d1cca64/1/M8Z2lGNp9UjOYhj-Rz89pNGl0ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:68:01:85:5a:22:b4:41:1a:d2:f2:cd:10:8e:90:2f:29:af:
         26:5e:39:d2:de:8f:2e:12:1b:f0:3b:a1:20:7e:35:60:be:c2:
         bf:4e:44:a5:d8:fe:31:d4:d8:09:3c:32:75:34:35:4c:6c:e4:
         69:a9:ad:d8:02:bb:11:f4:64:b0:66:c3:83:c4:e1:aa:73:11:
         41:64:c3:0b:4b:37:e8:d5:0c:3e:0f:3f:10:54:8a:ed:59:5f:
         89:ab:5b:a2:87:2b:8c:f8:d0:65:74:ab:e3:b2:d1:dc:13:c9:
         d1:b3:94:a9:39:68:ae:d7:e9:25:00:51:7c:56:6a:c0:89:cd:
         91:65:e4:be:fd:49:6c:f7:49:ee:a4:9d:87:00:ac:6c:9e:66:
         e0:f1:63:89:84:ed:03:94:74:47:7d:cc:3f:01:e4:d9:fb:c0:
         35:8f:01:b1:75:34:d0:fd:cf:4e:55:df:55:06:93:80:94:a4:
         05:84:88:93:fc:1d:44:e1:1a:c2:58:41:23:64:63:fa:02:e6:
         a6:c7:76:a3:88:4b:7c:a3:59:8a:e9:4f:7a:dd:d2:91:d2:68:
         35:d5:31:6f:4c:a9:a4:02:e6:48:2d:e2:84:38:2c:96:48:ef:
         e5:84:4d:4d:15:e8:8e:ad:1c:24:7d:cd:cd:f8:01:89:88:73:
         4f:fb:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----