Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/gsY60bz7rl8Ykff1u8cjAGa_3N0.roa
File:                     gsY60bz7rl8Ykff1u8cjAGa_3N0.roa (raw, json)
Hash identifier:          ths9CXUF9MhuLWbzw6hHpBzJo8WZpxod7ATtgIzOoEU=
Subject key identifier:   82:C6:3A:D1:BC:FB:AE:5F:18:91:F7:F5:BB:C7:23:00:66:BF:DC:DD
Certificate issuer:       /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial:       01856D9D16DD1B5B272F0836B90D52C9A241
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/gsY60bz7rl8Ykff1u8cjAGa_3N0.roa
Signing time:             Sun 01 Jan 2023 13:54:49 +0000
ROA not before:           Sun 01 Jan 2023 13:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39617
IP address blocks:        194.50.88.0/24 maxlen: 24
                          2001:678:5ec::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:16:dd:1b:5b:27:2f:08:36:b9:0d:52:c9:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
        Validity
            Not Before: Jan  1 13:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82c63ad1bcfbae5f1891f7f5bbc7230066bfdcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:fc:14:46:2a:cc:a6:f7:96:62:cb:65:bb:
                    d4:08:18:84:d1:67:bd:b1:9d:09:3f:29:9d:08:00:
                    68:33:f8:cc:af:df:fe:fc:d7:8a:c8:9a:f5:c3:1e:
                    a4:2f:0e:2f:8f:61:0a:c5:76:86:c7:49:31:0a:ff:
                    3d:67:33:01:39:3d:35:98:43:f6:99:d2:7c:0a:a7:
                    4d:45:ca:51:b3:5e:21:14:c1:6b:7c:e7:92:36:d6:
                    81:0a:5e:15:72:00:d3:0b:7d:5b:0c:3a:7b:3d:b2:
                    a3:0c:02:77:9d:51:3d:d5:40:7b:03:b9:de:ba:95:
                    81:d2:b3:43:a7:c4:b1:2f:d9:ec:c5:e9:af:5c:d3:
                    10:48:db:b2:f4:72:a5:68:0f:c8:40:fe:92:f9:31:
                    2c:52:4c:35:78:2f:f4:c1:43:c1:17:1f:6b:a6:22:
                    e8:0f:fd:8a:3f:9b:8e:a4:4b:bf:e0:23:cc:42:d8:
                    b1:a7:d3:0c:a1:73:cc:70:ec:54:4a:96:ef:55:35:
                    2f:cf:77:e8:00:57:44:6c:d7:4a:ea:af:77:3b:b8:
                    ea:e3:2e:ca:04:3f:6e:26:6f:62:ae:eb:4b:6b:33:
                    37:4c:df:e0:8c:11:dc:21:00:fe:da:9a:c4:b0:42:
                    3e:45:48:24:a7:ca:da:df:fd:45:07:41:ac:cc:a9:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:3A:D1:BC:FB:AE:5F:18:91:F7:F5:BB:C7:23:00:66:BF:DC:DD
            X509v3 Authority Key Identifier:
                keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/gsY60bz7rl8Ykff1u8cjAGa_3N0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.88.0/24
                IPv6:
                  2001:678:5ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:e8:35:15:be:22:92:de:47:0f:e5:fd:ce:18:18:d3:2d:
         8b:25:34:76:c0:fd:6b:88:83:c5:f5:da:5e:c2:89:ea:f9:4b:
         44:ad:6f:ff:72:3e:00:90:ab:5c:f5:d5:16:d0:da:61:2b:fe:
         9b:38:09:73:a0:81:15:0b:2c:d9:ed:c5:3e:ee:d8:57:4c:53:
         0a:b3:62:ca:e2:7e:0c:68:ab:90:15:24:5e:e1:c3:c7:9a:26:
         90:68:e0:97:ff:90:9a:6b:7f:f6:81:59:c3:70:9b:ea:08:4a:
         53:1c:4e:76:9c:51:e1:54:b5:77:45:9f:df:05:9d:e7:33:a1:
         a0:1e:c9:91:61:b4:0c:8e:d4:12:40:c9:06:bd:de:8f:5c:69:
         3a:42:72:01:7b:b0:cd:ae:b0:4d:a6:e7:74:8b:3d:f0:fc:3e:
         57:46:68:0d:a9:e2:9a:5e:f2:9b:54:f5:71:0b:3b:a4:12:bf:
         f6:f5:57:57:65:ba:29:68:52:a6:1e:68:ed:ad:71:cd:68:10:
         d5:bb:71:4b:56:39:9b:15:6a:56:1e:fb:82:c8:c8:6b:59:36:
         8f:48:ca:e4:ad:d7:19:9d:15:d3:14:3e:27:cd:32:cd:78:61:
         33:12:98:c9:1b:07:25:01:8b:9d:62:08:85:4f:fd:59:e4:70:
         44:bf:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----