Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/oQFn-OdhYToAHhy4_aOpB2V95IA.roa
File:                     oQFn-OdhYToAHhy4_aOpB2V95IA.roa (raw, json)
Hash identifier:          ETd2iJL6HBGM49Llj42sMIXthFwKmI8dWdt1zWXn/fs=
Subject key identifier:   A1:01:67:F8:E7:61:61:3A:00:1E:1C:B8:FD:A3:A9:07:65:7D:E4:80
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       01856EEFEF8B8B01664CA57C1AC2458F58E2
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/oQFn-OdhYToAHhy4_aOpB2V95IA.roa
Signing time:             Sun 01 Jan 2023 20:04:56 +0000
ROA not before:           Sun 01 Jan 2023 20:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200086
IP address blocks:        185.37.155.0/24 maxlen: 24
                          2a04:71c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:ef:8b:8b:01:66:4c:a5:7c:1a:c2:45:8f:58:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: Jan  1 20:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a10167f8e761613a001e1cb8fda3a907657de480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:55:fd:6d:95:61:95:86:85:c9:91:11:96:
                    c9:40:fd:8d:02:59:0c:4a:d7:0f:11:6a:21:0b:61:
                    df:95:c3:bf:87:db:d0:f4:06:0f:7a:16:46:08:0a:
                    98:cb:0b:51:2b:2c:80:fd:c6:44:81:a5:14:ce:32:
                    90:29:ec:9b:c8:8b:54:89:d8:3e:e3:f1:2a:e8:a3:
                    07:54:c3:8d:33:17:24:f8:dc:d0:c2:ae:54:65:b0:
                    ba:63:24:da:bc:00:2a:0b:0b:1e:f9:9f:4a:35:39:
                    e1:a2:20:41:1a:ec:8b:54:42:66:11:b7:d9:68:fc:
                    37:3e:cf:ee:08:0d:af:8d:fb:b4:20:ab:19:c4:67:
                    66:fb:56:16:6b:f7:2b:b1:30:0a:29:75:f9:68:ec:
                    4c:83:24:24:6a:c3:8c:59:b5:fe:6f:31:43:72:47:
                    d4:7a:6a:12:06:23:fa:4f:20:d1:6f:5c:f6:61:88:
                    a1:2d:64:1e:69:48:c6:0d:79:99:19:d6:3b:4f:11:
                    ed:26:ba:90:28:bb:e8:7b:ec:98:7b:86:e4:cd:97:
                    33:46:0a:32:20:f2:46:36:f8:42:70:de:a5:0e:c1:
                    1a:62:d4:28:e8:f5:ae:5b:c5:70:4f:ed:82:90:4d:
                    5b:4b:24:12:4e:9d:9c:f6:a8:ce:1c:3a:78:9f:ac:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:67:F8:E7:61:61:3A:00:1E:1C:B8:FD:A3:A9:07:65:7D:E4:80
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/oQFn-OdhYToAHhy4_aOpB2V95IA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.155.0/24
                IPv6:
                  2a04:71c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:0d:24:cc:f2:a3:e8:84:7f:1e:93:1c:86:6a:53:79:50:
         08:39:b7:3d:b3:bb:d2:3c:ff:ed:15:05:26:87:9c:e1:f4:4e:
         23:cc:e5:43:18:86:51:2b:22:e4:ab:31:74:e1:ac:ee:98:7b:
         ec:fe:8d:1d:cb:3e:ec:99:9e:b3:f2:5f:8e:15:36:6d:e5:b7:
         49:05:8c:6c:52:4a:a8:9e:e3:71:82:e1:cb:4a:bf:06:43:91:
         60:5d:fb:88:3a:1c:5f:e3:d7:96:31:61:8b:a6:8d:7d:e6:4d:
         e4:82:e1:8d:43:b0:1f:16:c1:8b:20:ac:4d:2e:7a:f8:30:1d:
         1b:39:f2:47:c8:8d:20:d6:d4:bc:fb:6b:66:d5:0e:d6:6e:4a:
         dd:54:c4:9b:86:17:7e:4b:0d:28:81:6a:7e:15:b2:4e:70:79:
         7e:6f:aa:89:13:2e:68:01:04:2b:9c:70:9f:d9:77:6f:a3:49:
         db:ac:64:ea:9e:53:9c:a0:c2:a2:7e:18:a2:6d:d8:12:6a:06:
         2a:fa:5d:05:75:c9:bc:25:16:fa:e9:4f:d2:67:84:54:26:7e:
         f6:78:9c:ee:a9:b7:40:e6:ff:93:40:62:d6:36:c5:b5:b6:7a:
         ca:d8:4b:13:6c:59:8f:0f:05:af:90:8a:21:b1:0f:cd:59:1a:
         79:e2:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----