Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa
File:                     xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa (raw, json)
Hash identifier:          Hkm6WHwRdTSoB7TcHCYv7BVtxpaKdYgTRcxJjgGeF78=
Subject key identifier:   C4:49:A8:8E:81:B3:46:15:16:00:2D:48:27:E5:4E:EC:89:9B:3B:E0
Certificate issuer:       /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial:       0187757F442AEEEF9C6955B0E4D2739C38BD
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa
Signing time:             Wed 12 Apr 2023 12:44:47 +0000
ROA not before:           Wed 12 Apr 2023 12:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.127.166.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:75:7f:44:2a:ee:ef:9c:69:55:b0:e4:d2:73:9c:38:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Validity
            Not Before: Apr 12 12:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c449a88e81b3461516002d4827e54eec899b3be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:64:16:d5:53:e3:29:80:b1:0a:dc:7c:bc:
                    99:12:49:77:c8:02:27:b0:29:06:2f:ef:a0:c9:12:
                    4e:9e:10:c8:4d:b6:a1:4d:5d:a3:f5:53:47:e5:ac:
                    56:93:51:16:00:12:6a:e4:38:ad:6f:2f:fb:4d:87:
                    f2:8a:bf:89:d6:f7:51:db:6b:6a:05:20:28:94:d6:
                    c4:b3:d6:48:f4:f6:ab:8d:71:2a:9a:5b:95:d8:af:
                    be:18:b5:11:fa:46:4c:ab:66:41:50:9b:ec:e3:74:
                    3b:85:f9:ce:9c:f2:b7:4b:44:35:74:ae:4c:eb:b0:
                    35:c0:ab:b6:41:b5:6b:15:cd:58:96:40:a4:da:8d:
                    af:76:24:0a:a0:1b:08:60:5f:ce:b3:f3:9f:fd:de:
                    8e:f1:76:1e:3d:c8:9f:e8:85:fb:0b:25:a3:2b:64:
                    0e:2f:5e:f0:5c:1f:08:0b:4b:74:ae:f9:87:86:86:
                    dd:c4:51:d5:0e:20:a5:22:10:33:e5:68:4c:ae:bf:
                    7c:b6:19:d0:a0:69:56:f2:fc:c3:f7:a1:ad:2b:6f:
                    bf:66:3a:33:f8:11:da:30:a0:37:f0:38:df:f1:ff:
                    b2:25:21:ce:4e:32:6e:e4:4c:c7:09:20:f7:53:47:
                    eb:d6:c6:b3:9d:22:13:f8:5c:ed:5e:3c:96:cf:a3:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:A8:8E:81:B3:46:15:16:00:2D:48:27:E5:4E:EC:89:9B:3B:E0
            X509v3 Authority Key Identifier:
                keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/xEmojoGzRhUWAC1IJ-VO7ImbO-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:15:85:fe:b8:19:a6:cf:d4:10:4d:c7:4d:8b:cb:2c:c7:58:
         58:47:11:d1:03:12:3c:0c:fa:79:ce:44:6b:f6:ad:40:1a:95:
         9e:c2:8a:ee:ba:d4:34:a6:98:18:fd:99:1e:c5:04:9f:9d:3b:
         50:a3:56:c6:76:d8:43:69:4d:8c:2c:de:c8:a7:94:2b:3b:f2:
         cd:63:38:c6:88:9e:35:cb:21:70:37:df:5f:1b:ec:a4:9b:16:
         2a:8d:63:f8:39:54:b1:6c:f9:06:a4:ce:e3:99:06:2a:ab:42:
         80:81:ac:77:de:84:fd:b4:ff:17:1b:88:a3:ae:97:3a:dc:36:
         2f:f4:a0:53:ad:7a:c3:b4:03:2e:eb:83:a6:b8:17:6d:9c:c6:
         ab:d8:31:98:14:cf:12:1e:88:ea:5c:42:9a:82:d5:a5:9e:a6:
         b2:c1:7e:59:a6:26:dc:4f:65:01:1c:a5:b5:a2:70:ac:f3:3c:
         ba:c9:bc:e3:2b:37:95:ec:16:df:6d:29:e4:26:73:83:32:63:
         92:29:f2:42:df:c4:a7:e0:a2:17:51:50:8f:ce:a3:d5:a5:71:
         b8:bc:20:24:ca:e1:fc:de:4f:99:ce:4a:cd:d9:64:90:e1:8b:
         0a:08:75:45:78:d7:c5:ed:ff:e2:ed:d1:dc:c3:a4:ff:c2:56:
         46:5c:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----