Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa
File:                     4chraKYoeLKIuRvnCgH5-jxEmCE.roa (raw, json)
Hash identifier:          cMz5UXv2shQYHMWsf1gltmefTmGAxNW68GaIZ389h5M=
Subject key identifier:   E1:C8:6B:68:A6:28:78:B2:88:B9:1B:E7:0A:01:F9:FA:3C:44:98:21
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53FCE7D3A646F00B97C5D2C7B92075
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa
Signing time:             Sun 01 Jan 2023 07:55:21 +0000
ROA not before:           Sun 01 Jan 2023 07:55:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57758
IP address blocks:        185.142.141.0/24 maxlen: 32
                          2a06:7a04::/43 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:fc:e7:d3:a6:46:f0:0b:97:c5:d2:c7:b9:20:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e1c86b68a62878b288b91be70a01f9fa3c449821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:e3:de:3e:00:7a:fa:07:b9:2b:95:f6:24:
                    a9:c3:96:a2:96:0f:d1:ee:0f:f7:df:b3:08:15:db:
                    67:0c:63:a7:e5:1e:9e:a3:e5:f9:06:38:8a:b1:32:
                    25:8d:7c:5b:75:f1:8c:d1:da:88:8f:b1:64:10:92:
                    d8:e0:56:1d:d7:59:15:4f:ec:8a:80:4a:ee:4e:ef:
                    4c:6c:ba:2e:eb:c9:da:0c:65:40:5d:a9:0e:21:d5:
                    26:bb:bc:54:67:0f:ca:c5:fa:e6:b0:6f:73:bb:43:
                    f3:80:40:d6:cb:c7:5e:f4:ba:7f:85:0b:40:99:8b:
                    35:ac:76:bc:48:4a:85:0d:43:e5:98:1a:7b:b4:00:
                    d9:3c:44:c4:c0:d9:27:b7:e9:ca:15:26:ff:92:bc:
                    01:40:5b:64:0d:b5:78:0a:21:b4:12:b3:ef:f7:d3:
                    bd:f2:79:f3:97:74:9a:7d:62:d9:86:80:40:df:d2:
                    39:70:3f:71:5e:92:fb:d5:9d:70:5d:7c:32:c0:65:
                    dd:32:09:04:25:c1:6e:ab:8d:30:a4:ae:61:27:68:
                    d1:58:70:0d:ea:bb:08:45:0c:1d:54:ad:c3:4b:28:
                    2f:21:4d:98:ce:42:b8:7a:df:e2:40:c8:08:60:78:
                    40:ed:66:1f:ed:54:c7:31:4e:76:5f:38:46:39:a7:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C8:6B:68:A6:28:78:B2:88:B9:1B:E7:0A:01:F9:FA:3C:44:98:21
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4chraKYoeLKIuRvnCgH5-jxEmCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.141.0/24
                IPv6:
                  2a06:7a04::/43

    Signature Algorithm: sha256WithRSAEncryption
         9c:b1:61:27:c0:a1:9e:64:07:6a:44:1b:a8:07:af:72:01:88:
         f2:10:0b:e0:cc:bc:e7:23:01:1e:b5:0d:86:dc:28:d7:a1:44:
         66:60:af:9b:84:d7:35:e8:1d:38:37:0c:69:76:2d:dc:a0:86:
         f8:59:82:2b:96:f9:2e:aa:07:53:69:b4:74:a1:34:4b:c0:ae:
         04:4b:a9:50:58:8c:f9:4f:99:13:5f:91:9b:71:b9:bc:bf:0e:
         94:f7:bc:f6:06:d9:b4:f2:70:bd:f4:f5:1d:2d:89:5e:10:d1:
         5a:c8:8b:5b:39:8a:03:bd:14:ad:ad:b7:97:13:69:9b:02:c7:
         de:e7:12:c5:d4:10:67:32:91:2f:fd:dd:f3:aa:f3:dc:c8:ca:
         7f:82:c1:d1:96:a1:2e:70:fb:01:ab:ed:6c:22:24:a8:3a:f5:
         e8:bc:bc:e4:33:cf:7f:43:79:c0:45:e5:5e:25:d6:38:56:8a:
         da:f0:a9:e6:2b:d8:82:d6:e5:4c:61:6c:02:8c:5e:90:e1:3c:
         c7:7e:19:60:4d:72:ed:e9:15:8c:ef:04:19:fd:39:cc:92:6e:
         7f:ab:27:c1:16:e9:e8:42:f3:54:f6:ef:ba:c2:03:aa:78:1a:
         be:64:f8:3c:21:f7:e7:e8:2e:bf:8e:72:ab:1a:6e:78:c7:55:
         9d:cb:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----