Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lpzTpMJ4mMJje87uOHqmx74myy4.roa
File:                     lpzTpMJ4mMJje87uOHqmx74myy4.roa (raw, json)
Hash identifier:          +cvFkL720z04hLKrMbD0t2kCLKrYiqUxK8ghWVyScaY=
Subject key identifier:   96:9C:D3:A4:C2:78:98:C2:63:7B:CE:EE:38:7A:A6:C7:BE:26:CB:2E
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       018572712A12289A09C5B7526D688031CFAC
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lpzTpMJ4mMJje87uOHqmx74myy4.roa
Signing time:             Mon 02 Jan 2023 12:24:56 +0000
ROA not before:           Mon 02 Jan 2023 12:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211993
IP address blocks:        185.233.34.0/24 maxlen: 24
                          2a10:de80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:71:2a:12:28:9a:09:c5:b7:52:6d:68:80:31:cf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Jan  2 12:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=969cd3a4c27898c2637bceee387aa6c7be26cb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:f8:82:6a:16:32:13:00:1a:f7:24:3a:78:
                    62:0b:87:61:aa:c7:02:1a:31:2e:bb:d6:eb:a6:a3:
                    e7:11:da:b9:85:aa:3e:0e:61:d8:2a:d0:fa:be:3b:
                    7f:e5:2c:e5:d6:a1:49:6e:29:00:fe:57:ee:95:67:
                    c7:4f:df:46:f9:e3:8f:fb:f9:6c:bb:0b:b9:37:33:
                    6f:a6:9b:f4:9e:27:6b:db:9e:bd:f7:6e:9f:28:86:
                    1c:b6:da:ba:e8:e1:bc:08:01:d7:be:d5:95:aa:71:
                    47:64:2a:e7:36:5c:70:87:55:12:e9:7f:7e:30:93:
                    64:c5:d4:b7:d9:36:91:f0:76:54:09:58:9f:50:cb:
                    47:72:80:e5:44:dc:ff:b4:3d:70:9f:b7:78:ac:7f:
                    e7:bb:82:02:fe:b3:a2:58:67:35:0a:7a:61:fb:7b:
                    e2:91:76:fb:00:fa:3e:2b:48:2f:c8:02:54:18:bb:
                    bd:dc:9e:d8:11:8c:53:49:81:dd:de:11:38:76:ef:
                    d3:92:19:a2:97:2d:34:56:33:85:23:54:75:95:f3:
                    1f:87:63:ac:15:1a:95:f0:67:c2:57:b2:61:73:a6:
                    1d:5c:ed:6f:6a:61:b8:d0:27:af:09:ca:fd:73:82:
                    dc:8b:21:98:56:4b:55:1a:4a:1b:19:f8:ec:b5:c3:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:D3:A4:C2:78:98:C2:63:7B:CE:EE:38:7A:A6:C7:BE:26:CB:2E
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/lpzTpMJ4mMJje87uOHqmx74myy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.34.0/24
                IPv6:
                  2a10:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:df:1c:ef:c4:b1:a3:1a:03:14:9b:4d:c5:ef:aa:e0:02:
         2b:42:91:05:82:84:d4:f9:fa:75:10:b0:ce:e2:30:da:2d:96:
         87:cb:e6:c2:29:75:84:50:0f:c0:e6:57:11:be:a3:25:c0:ec:
         7e:f7:0c:ee:98:47:9d:a7:5c:5c:12:fe:8b:c8:21:7a:a5:9a:
         21:e1:6f:52:07:87:11:c0:2b:ee:d8:c0:ec:4f:c3:39:7f:6f:
         64:7f:31:35:03:06:bf:11:c2:87:af:37:5a:92:d0:50:bd:0d:
         5c:54:1e:36:4a:4b:44:29:7a:2a:47:0e:22:7b:2e:e5:05:a8:
         2f:29:65:60:b4:1b:7a:c2:0a:df:4e:17:85:3c:0b:90:9b:c1:
         35:2c:31:bd:3b:3f:5c:6a:72:6e:13:a8:c4:79:87:89:3c:30:
         bf:05:7e:9c:bd:42:d5:69:64:78:12:59:4b:37:19:d5:19:72:
         af:e2:42:69:ac:8f:b3:eb:46:52:1c:cd:10:ee:c4:c9:15:4c:
         f8:16:cd:ff:8f:71:83:c0:97:d4:a4:1c:c6:a1:90:6f:b9:44:
         85:49:a8:d7:bd:c8:a4:f8:25:fc:87:1d:d6:9d:6e:f9:9e:8c:
         93:29:6b:1e:2f:ad:a9:a6:a3:c7:19:b1:c8:78:c1:f5:7e:1d:
         ae:ae:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----