Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qMcOcNJVAN0nH97BDTGmJYzskBo.roa
File:                     qMcOcNJVAN0nH97BDTGmJYzskBo.roa (raw, json)
Hash identifier:          Tnx/JlkAGP//a7sV6xDUXi48MPClnv/U+eM4on63sfw=
Subject key identifier:   A8:C7:0E:70:D2:55:00:DD:27:1F:DE:C1:0D:31:A6:25:8C:EC:90:1A
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBB56946D993C46F4250605650A390
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qMcOcNJVAN0nH97BDTGmJYzskBo.roa
Signing time:             Mon 02 Jan 2023 05:37:02 +0000
ROA not before:           Mon 02 Jan 2023 05:37:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12586
IP address blocks:        178.251.228.102/32 maxlen: 32
                          5.1.81.142/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:b5:69:46:d9:93:c4:6f:42:50:60:56:50:a3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8c70e70d25500dd271fdec10d31a6258cec901a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:37:89:b6:a0:34:61:2f:87:69:46:70:5d:
                    18:0e:af:b0:76:19:63:4a:47:ed:09:3c:c9:f3:59:
                    e5:80:21:e4:c9:ed:38:b7:49:2f:d0:10:89:0a:e7:
                    27:14:7e:b9:cc:9b:e2:a8:c2:25:04:3c:e3:a8:19:
                    bf:41:6a:4e:4c:d4:6b:cf:d0:56:39:a3:df:96:3f:
                    f8:84:04:b3:2c:93:9f:0f:96:0d:79:08:48:e0:50:
                    4d:d9:ca:7a:89:ba:9f:e7:95:9f:64:71:0c:c1:07:
                    0b:96:4a:fa:66:e1:47:63:63:f2:bf:1e:f1:63:5a:
                    13:c2:ee:a9:57:ba:00:49:88:e0:82:40:76:80:b1:
                    5d:50:ca:e2:8f:67:35:96:31:f0:6d:ce:2c:68:92:
                    7e:45:f5:20:e1:81:29:b2:b1:bc:ec:08:8c:f7:44:
                    17:87:84:71:30:00:cb:d5:5a:a3:93:62:f3:8e:b7:
                    f8:41:28:04:bc:aa:bd:90:7a:95:2f:55:c1:01:56:
                    83:3d:88:5b:fd:46:e0:a8:6d:67:24:26:e6:d4:bf:
                    e8:24:ab:20:b7:d9:37:89:90:2f:d8:a8:83:57:96:
                    91:80:18:a0:35:ba:81:d2:60:b5:47:d2:98:3f:58:
                    00:f7:ea:09:df:bf:8b:39:6b:50:d7:01:b0:e8:7f:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:0E:70:D2:55:00:DD:27:1F:DE:C1:0D:31:A6:25:8C:EC:90:1A
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/qMcOcNJVAN0nH97BDTGmJYzskBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.81.142/32
                  178.251.228.102/32

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:f8:8e:45:11:37:d1:ff:af:ed:78:df:92:99:32:6a:6b:
         8b:3b:28:a1:a0:e5:b1:c0:f3:62:0d:31:c9:ff:4b:c3:f3:ed:
         93:a0:b3:e3:e7:fb:64:c0:1d:96:58:06:fa:c2:fd:03:89:af:
         6b:fe:59:4d:b5:31:86:0f:33:b6:83:6d:b0:e0:e9:aa:45:70:
         74:ee:85:a6:e2:61:3f:01:26:81:74:59:0a:17:34:a7:15:c0:
         95:06:14:1a:97:68:cf:85:4a:9e:0d:42:9d:5e:4c:17:0b:2e:
         8c:a7:41:9b:78:e5:c7:f1:e2:52:bc:84:37:0d:d2:b5:c5:51:
         9d:56:b4:a8:df:33:30:48:52:a6:62:b4:60:b5:a3:ae:b3:f9:
         8f:b5:2e:5f:c0:e1:03:a6:ec:bc:3e:34:b6:ec:ad:74:75:4e:
         a5:5c:4b:2c:33:5b:4e:9f:1e:d0:3e:d2:7c:75:d6:0f:8c:df:
         2a:d0:8c:b9:21:30:89:2a:2d:7f:a5:17:42:4d:5d:12:38:83:
         bb:45:d5:f1:42:76:42:87:94:6b:a3:3c:2d:80:aa:3a:c6:d8:
         3a:cf:d8:ee:69:c8:fe:dd:f4:ab:ef:53:1b:93:5c:57:6f:69:
         96:81:8b:a3:fa:2f:26:3e:e1:96:18:ec:e1:96:45:14:2c:77:
         09:fc:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----