Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/En7wrGKhx3Lt6K4k4aT3I2kgxwY.roa
File:                     En7wrGKhx3Lt6K4k4aT3I2kgxwY.roa (raw, json)
Hash identifier:          12xqHhkBTMdsDT0wrQt9z3LV2yAcVN/neCr0LRargC0=
Subject key identifier:   12:7E:F0:AC:62:A1:C7:72:ED:E8:AE:24:E1:A4:F7:23:69:20:C7:06
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018B4C84890687697EB75AA0195ACFE8CCB4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/En7wrGKhx3Lt6K4k4aT3I2kgxwY.roa
Signing time:             Fri 20 Oct 2023 09:57:16 +0000
ROA not before:           Fri 20 Oct 2023 09:57:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212728
IP address blocks:        185.215.215.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:84:89:06:87:69:7e:b7:5a:a0:19:5a:cf:e8:cc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Oct 20 09:57:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=127ef0ac62a1c772ede8ae24e1a4f7236920c706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:ab:0d:a4:05:73:15:9f:6d:89:09:9d:ac:
                    42:6c:c0:25:f4:34:44:2e:f7:cc:51:ea:77:f0:2e:
                    97:4e:3e:65:b9:44:ae:d6:b1:6c:50:14:6d:54:b2:
                    cc:7b:2e:21:63:5f:2c:82:7a:95:b9:92:53:af:a9:
                    a7:e1:d8:5c:aa:d3:32:78:a8:11:2e:32:d5:67:59:
                    fd:f0:0b:84:17:79:f7:29:0e:dc:45:9f:2e:f1:1c:
                    ef:1c:ce:d0:18:a8:5f:3b:5f:ad:08:8f:4c:9c:ea:
                    35:e6:27:7e:b9:87:70:24:85:d4:8d:80:40:d9:a3:
                    cc:61:c9:c9:b9:8e:3f:ea:0a:ce:3a:d6:84:f2:7d:
                    22:8f:0c:3d:7b:72:ca:5d:e9:00:18:51:48:61:e8:
                    65:f1:3b:2f:cb:f6:6e:d4:2a:e8:f4:41:6b:b1:af:
                    2f:28:5e:19:23:76:7d:16:8c:be:22:f9:91:0c:14:
                    b1:87:13:b5:22:2e:ef:ea:4d:25:d4:7e:6e:b7:0e:
                    fd:9b:68:27:cb:7a:63:5e:b1:be:76:6b:b7:38:0c:
                    38:d9:a9:ba:65:0e:6a:f1:c0:60:ab:db:f0:29:a0:
                    4a:78:b1:1a:19:4c:c7:2b:a4:12:06:9d:ad:41:9c:
                    e6:53:81:98:db:3a:48:2a:bc:e2:75:76:c4:f9:d2:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:F0:AC:62:A1:C7:72:ED:E8:AE:24:E1:A4:F7:23:69:20:C7:06
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/En7wrGKhx3Lt6K4k4aT3I2kgxwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:06:d8:04:d4:5d:d7:8b:35:1e:f9:80:aa:10:83:8e:b7:5b:
         29:93:8f:36:ef:99:d3:41:0a:c6:79:07:f8:a9:f0:14:21:40:
         3b:2b:e2:ef:b8:f0:21:d5:cf:67:20:da:24:62:68:1c:58:dc:
         aa:d3:b7:41:eb:23:88:fa:d8:55:31:f1:10:97:71:8d:97:af:
         dd:50:0f:d4:1b:7c:5b:61:dd:32:c1:50:9e:64:a0:f4:9d:00:
         9e:0f:11:45:2b:15:8c:d7:3a:74:2a:7e:59:33:54:7e:02:ff:
         88:69:55:75:55:b7:25:e3:de:91:9f:bf:f8:ff:9a:3d:af:27:
         e2:cb:0a:c4:f8:6a:2a:ad:2e:e0:7d:bd:c4:b2:ef:c4:f8:6d:
         58:2b:14:46:59:75:19:93:84:69:60:14:10:a7:35:f5:0b:c7:
         22:87:0e:b8:f6:73:cb:eb:b0:c8:07:88:68:64:93:20:50:7e:
         7d:96:fe:17:0d:92:9b:f4:cf:ba:44:30:9b:69:dd:f7:3e:2c:
         be:44:8e:35:c6:2d:51:df:44:c6:fb:d1:22:b5:49:89:bc:81:
         bc:01:58:65:3a:59:d1:51:37:88:ce:41:69:ef:d8:8e:67:d8:
         e5:f7:e8:f6:df:49:f4:5e:e5:71:c2:fd:50:46:33:e8:95:8c:
         20:e1:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----