Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZMLVjEd4NKBWmVatQg7mn_k2oM.roa
File:                     SZMLVjEd4NKBWmVatQg7mn_k2oM.roa (raw, json)
Hash identifier:          toyOApmHttw9t3ctLzw5B8pFQmyy8elmeHCPRkwbW0M=
Subject key identifier:   49:93:0B:56:31:1D:E0:D2:81:5A:65:5A:B5:08:3B:9A:7F:E4:DA:83
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C540ADC65E5935DC84002977925BC71
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZMLVjEd4NKBWmVatQg7mn_k2oM.roa
Signing time:             Sun 01 Jan 2023 07:55:25 +0000
ROA not before:           Sun 01 Jan 2023 07:55:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202365
IP address blocks:        185.255.155.0/24 maxlen: 24
                          2a0c:da04::/48 maxlen: 48
                          2a0c:da04::/38 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:54:0a:dc:65:e5:93:5d:c8:40:02:97:79:25:bc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49930b56311de0d2815a655ab5083b9a7fe4da83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:b8:19:28:f1:3c:c4:14:4d:2f:d6:c9:e8:
                    5a:8b:86:4e:a9:86:2e:17:be:b4:6a:6a:22:77:18:
                    eb:94:81:9e:1a:ee:d8:21:c9:d9:40:32:98:ca:ec:
                    8c:a5:f3:46:2a:f6:58:f1:98:c2:82:51:72:f2:ed:
                    09:14:c2:a6:1c:3c:02:ff:3a:07:72:31:0c:63:2c:
                    b3:ea:e2:b7:7d:b1:7b:c6:88:0d:d4:da:ae:9d:49:
                    02:ec:50:0e:d5:2a:d0:f2:d0:dc:88:dc:05:82:96:
                    0d:c9:08:b8:b8:7b:da:49:1f:75:56:76:0d:fd:96:
                    be:9a:a4:4b:bf:4e:6a:b3:18:d1:a2:72:63:30:65:
                    5e:13:76:78:e3:00:7e:9f:3e:be:e6:27:3c:b2:12:
                    4d:dd:e1:d9:dc:24:e0:98:c5:5a:6f:af:b4:72:92:
                    36:60:11:05:97:ac:9f:6e:24:1f:21:19:bc:cb:b9:
                    e1:43:0e:32:83:45:6f:80:16:97:b4:71:e5:24:30:
                    c9:4f:d1:a4:7f:43:f1:ee:54:6e:f3:9b:24:71:92:
                    66:44:63:bd:ea:40:a9:32:22:5b:bf:97:49:64:c9:
                    65:5c:60:b3:c6:51:c4:c0:97:9e:3d:37:55:46:e3:
                    26:30:03:28:a0:d3:fa:4b:bc:46:fc:e0:5c:38:85:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:0B:56:31:1D:E0:D2:81:5A:65:5A:B5:08:3B:9A:7F:E4:DA:83
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SZMLVjEd4NKBWmVatQg7mn_k2oM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.155.0/24
                IPv6:
                  2a0c:da04::/38

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:7b:38:79:20:6a:0d:2f:e2:22:7e:2b:73:76:da:e1:2a:
         7c:a9:6c:4e:51:77:06:45:aa:5c:7c:cd:00:86:8a:9b:67:3b:
         3f:1a:3d:33:6e:67:9e:0d:e0:8d:36:fc:76:e8:c1:96:28:fb:
         77:2b:6f:cf:43:68:7b:0d:dd:98:ab:fb:5f:80:08:f1:37:e4:
         99:42:0e:72:14:75:03:f0:90:4a:02:64:82:ab:58:f4:e1:38:
         9a:5f:45:06:ce:8b:8e:c6:14:c7:11:0b:f4:16:24:5b:f4:e5:
         09:70:2c:fa:8c:e9:61:da:2f:dc:71:5b:eb:0a:5e:5c:16:30:
         3c:46:a7:b4:56:79:ab:fb:6a:d5:aa:06:6d:ea:5b:6b:24:0a:
         4d:3c:c3:bd:cb:98:9e:d8:3b:fc:45:ca:31:42:dd:2a:73:56:
         83:20:e0:b4:9a:bb:83:74:ef:d9:40:c9:b1:f7:47:10:2d:5b:
         a7:3f:4c:a4:98:ea:02:95:e1:81:a0:80:16:aa:33:58:98:b5:
         ab:33:a1:47:77:c8:1a:7d:a3:af:3e:6e:1d:30:93:cb:32:9f:
         7c:aa:04:7e:8d:c2:71:ff:2d:67:51:fd:fc:8d:47:47:ec:76:
         d5:6d:61:68:8c:42:e3:d1:3d:70:05:9d:69:aa:75:d1:07:fc:
         f4:83:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----