Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/aQXMeAeJLRB2af5dNmpfc16uGik.roa
File:                     aQXMeAeJLRB2af5dNmpfc16uGik.roa (raw, json)
Hash identifier:          mZCjENW3S0FZGNKIKDFs6P6ESki5M6eaeiBznE1eQa8=
Subject key identifier:   69:05:CC:78:07:89:2D:10:76:69:FE:5D:36:6A:5F:73:5E:AE:1A:29
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       018616963ACE92566CAA08263CD872740F33
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/aQXMeAeJLRB2af5dNmpfc16uGik.roa
Signing time:             Fri 03 Feb 2023 09:23:09 +0000
ROA not before:           Fri 03 Feb 2023 09:23:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        178.209.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:16:96:3a:ce:92:56:6c:aa:08:26:3c:d8:72:74:0f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Feb  3 09:23:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6905cc7807892d107669fe5d366a5f735eae1a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:e1:3a:68:a2:fe:56:24:dd:c6:7c:f9:28:
                    09:4c:3a:df:d8:16:e5:28:b1:53:27:dc:fd:5d:9d:
                    16:91:da:08:e6:19:3a:f5:4a:8c:55:70:3e:d3:56:
                    50:e4:95:d1:dd:bb:48:e7:4e:69:c1:ca:8a:8c:3e:
                    d6:10:aa:ce:be:7d:31:a2:f4:08:e3:bc:34:4d:1e:
                    84:fa:6b:e5:40:f5:d5:d6:bd:e8:6d:b1:7b:bd:32:
                    74:57:bc:29:66:f9:59:11:cd:11:f2:1b:6e:9e:5e:
                    0d:69:df:9b:a9:8f:0c:c2:ff:4c:24:3a:3f:e1:9e:
                    16:d6:4f:83:9e:de:47:96:4b:a7:38:85:2f:80:c0:
                    82:29:b3:27:6d:2e:ac:ed:fc:59:82:f0:53:f3:8a:
                    8b:4e:ba:56:e7:83:3d:95:0e:b3:11:72:4d:1c:0a:
                    bd:c3:bd:b3:e4:dc:fa:68:92:38:c7:74:55:b7:a0:
                    a8:ee:30:7e:0e:37:fa:d3:bd:dc:7e:38:26:db:52:
                    48:cd:3e:d6:90:95:7b:79:6b:50:fe:69:23:31:6d:
                    29:88:45:cc:52:00:f8:a2:5a:85:42:37:9a:4f:96:
                    5a:b5:ac:7b:19:45:8f:4a:cd:7f:f8:68:4d:00:7d:
                    26:a5:79:5f:07:dd:f0:2c:ef:bd:84:a8:6e:17:33:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:CC:78:07:89:2D:10:76:69:FE:5D:36:6A:5F:73:5E:AE:1A:29
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/aQXMeAeJLRB2af5dNmpfc16uGik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.209.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:21:5b:e5:36:1f:c3:09:73:6f:31:68:b9:88:2b:74:7c:02:
         ac:c6:45:6a:da:f1:1e:d7:7e:8d:5e:61:85:ba:cd:2b:6e:68:
         7c:f8:9a:a2:7b:60:d3:a1:9e:a7:aa:45:b8:a0:8e:6f:ae:83:
         8d:03:e7:b8:12:7d:13:5c:b6:43:34:57:44:dc:a5:68:f5:32:
         91:47:9b:f8:95:83:32:14:1d:0b:3c:08:99:a3:00:ba:39:89:
         ee:6d:38:c8:04:32:0a:68:43:e2:23:80:f2:ed:9c:f9:db:c2:
         49:f1:04:22:93:1f:9e:8a:82:c1:c1:61:f4:05:b3:7e:8c:0b:
         b6:31:8e:99:5d:16:b7:3b:3c:64:33:cd:b8:6b:29:6b:c0:e9:
         22:ce:35:eb:dd:b1:e2:da:48:2d:42:7a:c0:f0:8f:a4:28:9a:
         be:8a:86:65:7c:31:8b:16:5e:b9:bc:13:b4:c5:98:29:bb:33:
         4e:92:62:15:73:e4:d6:a3:60:35:59:c0:64:cd:f5:91:f9:fa:
         4e:49:15:49:13:1d:b8:bc:fa:d1:00:59:51:70:d4:6a:a0:d9:
         5f:2c:fc:a9:26:2d:2f:e7:68:7b:5b:3f:28:f4:53:f2:5e:1a:
         af:63:32:87:7b:b6:6f:75:e8:d2:b5:97:04:c7:a6:28:d5:a7:
         b9:51:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----