Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/V2MCOm-RHMoxsS7AzzoVwCd4rZY.roa
File:                     V2MCOm-RHMoxsS7AzzoVwCd4rZY.roa (raw, json)
Hash identifier:          tb5WBnJRxqp6HsZNwwd1f+t7yXd291humdL1fjtmeUo=
Subject key identifier:   57:63:02:3A:6F:91:1C:CA:31:B1:2E:C0:CF:3A:15:C0:27:78:AD:96
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018B4C8488C7A6D862140332BDB2BAEA675E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/V2MCOm-RHMoxsS7AzzoVwCd4rZY.roa
Signing time:             Fri 20 Oct 2023 09:57:16 +0000
ROA not before:           Fri 20 Oct 2023 09:57:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        185.215.215.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:84:88:c7:a6:d8:62:14:03:32:bd:b2:ba:ea:67:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Oct 20 09:57:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5763023a6f911cca31b12ec0cf3a15c02778ad96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:24:eb:89:23:3a:bd:88:89:fb:ed:b2:d9:
                    f1:c2:9f:20:e1:e0:5c:1d:2d:48:14:b3:fe:07:11:
                    b5:c0:48:01:59:59:61:f6:29:9b:d4:c3:da:38:e7:
                    8b:cd:c5:7a:be:69:ab:c6:d2:f8:29:9e:41:c8:f3:
                    59:09:fb:d4:f4:b2:dd:5e:65:17:14:12:4e:46:e6:
                    a3:e9:e2:ae:e3:3d:f7:43:3a:4d:6d:19:62:1c:cd:
                    f2:53:98:06:4a:e3:b8:78:6e:2b:4c:1f:2d:78:15:
                    f8:50:14:1b:a3:7a:73:65:94:ff:b4:99:22:d9:fc:
                    10:df:e9:fe:10:4e:00:39:8d:6e:42:9f:58:fd:68:
                    3f:01:1e:0a:1e:a8:27:d7:28:19:6c:89:07:b7:3c:
                    d6:5d:9c:f7:61:dc:22:a4:46:6f:af:6a:b5:29:7c:
                    b0:5d:f4:57:0b:44:05:5a:36:cd:85:c1:f0:09:1e:
                    15:98:2d:41:f0:ab:6f:95:c9:68:09:21:9d:15:df:
                    ca:8c:4e:78:36:ff:f6:de:04:8b:5f:4d:14:ba:01:
                    42:9a:f6:56:aa:13:cd:13:0a:c9:d8:f3:be:34:25:
                    83:63:f8:c4:0d:9a:0d:ad:f3:de:b8:7b:84:4b:e1:
                    c7:93:22:c1:07:ef:41:c8:17:ec:b0:22:55:92:22:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:02:3A:6F:91:1C:CA:31:B1:2E:C0:CF:3A:15:C0:27:78:AD:96
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/V2MCOm-RHMoxsS7AzzoVwCd4rZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:70:96:df:68:93:18:09:79:df:3b:c5:53:bc:8e:4f:3d:
         21:07:3c:b6:5d:aa:4c:d4:7f:96:8e:d7:15:dc:07:cc:c5:5f:
         f6:59:35:41:8d:52:a4:85:1e:40:60:00:1e:21:7b:e9:55:f2:
         a4:64:da:69:a4:c2:a9:a1:ae:62:38:55:5f:0e:8d:db:cf:c3:
         e7:cb:7a:6c:3e:29:63:05:2a:bd:15:38:58:7b:bf:5c:66:bb:
         8b:bf:fd:ba:9d:4a:23:3a:90:60:f8:46:7d:ac:7a:15:3a:08:
         d4:6e:15:98:3b:30:73:34:f2:55:9d:47:15:18:79:49:57:91:
         fe:2e:1f:b6:33:5e:20:50:93:b3:be:9e:ed:b4:96:04:a8:fb:
         e5:68:a8:c1:9d:4a:51:7d:46:4d:ea:34:19:18:b7:bf:b7:ef:
         70:d9:55:56:b2:2d:c0:33:9b:3c:2c:ae:cd:11:e2:d6:3d:31:
         de:75:a9:fe:82:3d:13:22:ae:c2:0a:e4:2c:c2:ab:e3:9b:59:
         13:a2:ed:4e:b0:0f:81:56:84:54:bc:5e:9a:84:07:06:98:4b:
         9e:41:5b:c1:95:11:14:62:65:b5:5f:c5:94:3f:4b:95:88:46:
         c6:6b:c8:2e:5a:ac:40:94:cf:3c:05:57:63:37:1b:4d:13:33:
         3f:c6:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----