Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa
File:                     v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa (raw, json)
Hash identifier:          HcltRNjfbcPudPD0W2HdYEq1R62GoJ+pd7YD1rRMdBk=
Subject key identifier:   BF:65:2C:8E:F2:67:FD:DC:CE:F0:1F:DD:DC:C6:4A:6C:5D:D0:D4:24
Certificate issuer:       /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial:       0188598984724F2F4A0E799EAA655A4BE157
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa
Signing time:             Fri 26 May 2023 19:29:24 +0000
ROA not before:           Fri 26 May 2023 19:29:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206530
IP address blocks:        185.180.146.0/24 maxlen: 24
                          2a13:ab80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:59:89:84:72:4f:2f:4a:0e:79:9e:aa:65:5a:4b:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
        Validity
            Not Before: May 26 19:29:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf652c8ef267fddccef01fdddcc64a6c5dd0d424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:f4:7a:ee:97:05:38:7c:06:ed:6a:b6:bb:
                    7d:52:82:6e:26:1f:84:bf:dc:17:cb:89:e9:cf:2e:
                    4e:e4:ff:9c:f3:d8:6e:d8:d3:38:f2:86:05:9c:5d:
                    d4:96:25:1b:e2:ad:b0:91:dc:a9:46:0a:c6:8a:04:
                    e6:4a:84:ab:e6:b6:2b:10:71:f3:c7:02:eb:3f:01:
                    76:21:dd:25:e3:ad:5c:27:4e:ef:f8:98:ba:12:da:
                    5e:68:4c:5a:82:bd:73:6d:df:85:36:c3:07:b4:2d:
                    cc:d5:7a:d8:9e:dd:a6:03:98:09:eb:f5:31:26:01:
                    e4:cb:17:ec:eb:f2:20:9f:9f:8a:35:6e:46:2b:3f:
                    0a:27:c0:81:2f:16:f9:ad:5c:8a:a2:1c:f5:0c:0e:
                    25:f7:88:1f:b7:8c:c7:d4:ab:6d:d3:5e:6a:9a:ad:
                    c3:97:0e:62:9a:9c:10:2e:f4:c6:29:34:a2:e4:95:
                    d8:80:eb:36:2a:a0:78:b2:a3:5c:29:09:ff:85:11:
                    bd:27:7b:87:f1:82:1c:1c:3f:0f:05:71:06:b6:85:
                    89:bd:a5:11:96:76:d9:eb:0a:e5:a8:d1:ab:6a:84:
                    d8:58:9e:bf:0d:6b:b8:74:6f:bc:bf:2f:e2:87:60:
                    8c:92:a0:3e:ff:a8:6c:c5:95:43:25:6d:8c:0d:f2:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:65:2C:8E:F2:67:FD:DC:CE:F0:1F:DD:DC:C6:4A:6C:5D:D0:D4:24
            X509v3 Authority Key Identifier:
                keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/v2UsjvJn_dzO8B_d3MZKbF3Q1CQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.146.0/24
                IPv6:
                  2a13:ab80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:d8:8d:31:bf:19:53:e4:35:e2:23:a3:b7:1c:40:69:ec:
         dd:a9:05:94:a9:2c:4c:db:d0:62:3d:09:ff:31:3c:b5:3a:c6:
         14:83:6d:84:9a:9c:e7:5f:0b:8c:b0:5b:fb:77:e0:c8:e6:49:
         79:0b:a0:39:7d:53:42:c1:91:a0:59:70:5b:02:2b:af:61:ef:
         c0:d5:3f:51:69:e9:11:7b:ab:68:0e:2e:ea:db:bb:97:69:7e:
         2d:d9:12:f1:7e:08:b2:4e:1a:f4:07:7c:54:78:13:3c:e8:9d:
         af:b5:bd:7a:ee:91:e3:c7:e0:c3:de:4d:a3:68:69:fd:9b:e4:
         12:81:eb:8e:c3:93:45:b1:ae:56:dd:b1:83:e9:dd:4f:8e:cd:
         55:27:c2:cd:4b:cd:c7:34:0b:92:1f:df:be:5f:f7:65:e0:48:
         ac:93:a9:3c:06:a6:bf:fd:80:a3:1c:9b:9e:33:3b:e6:6f:b6:
         25:f1:27:5a:bf:d8:e6:af:d0:68:03:ca:36:37:2d:68:b1:50:
         d0:83:54:3a:90:aa:2e:4a:b2:57:fb:e8:26:fc:3e:ee:23:ae:
         c5:b8:35:95:aa:a5:f3:95:be:f4:b8:0e:59:1e:92:90:f2:6b:
         c3:08:e4:97:16:c1:54:e7:c0:91:b2:e3:86:30:ec:eb:b5:a0:
         9e:9c:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----