Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa
File:                     w0U3ADR6Gpb7xce7o3fTYoyodtI.roa (raw, json)
Hash identifier:          sbYdtangQW5/QLVGVHwM3Fv2xGFcGw5MZiRQkIQc6UI=
Subject key identifier:   C3:45:37:00:34:7A:1A:96:FB:C5:C7:BB:A3:77:D3:62:8C:A8:76:D2
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       01856C1389B1C7DB6867AB728CA70DB9BD12
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa
Signing time:             Sun 01 Jan 2023 06:44:57 +0000
ROA not before:           Sun 01 Jan 2023 06:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42541
IP address blocks:        194.62.216.0/23 maxlen: 23
                          2a0c:fec0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:89:b1:c7:db:68:67:ab:72:8c:a7:0d:b9:bd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Jan  1 06:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3453700347a1a96fbc5c7bba377d3628ca876d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:06:d7:ce:0a:4b:84:8c:c3:4b:6c:aa:37:
                    81:b8:0a:9f:94:bd:f5:f9:02:18:cf:37:ec:de:72:
                    87:a6:fc:a6:31:52:c5:a9:f8:5f:33:5b:07:0d:15:
                    ca:e0:1f:8a:5d:bd:bc:66:bb:dc:59:be:fa:58:e8:
                    a0:d8:a8:6d:e2:1c:f1:91:41:5a:25:d0:cc:92:37:
                    07:35:5c:65:03:0f:2b:8e:80:37:72:92:7c:ba:08:
                    f3:db:89:a8:a1:8f:b2:ee:e1:37:8e:e0:4c:24:f3:
                    42:04:7f:ab:19:89:9d:fb:e8:af:8b:9c:ba:4d:03:
                    a5:f8:90:61:7f:29:3e:94:f5:f8:48:bc:8c:e0:20:
                    fb:16:04:98:12:a5:e1:47:a9:60:fc:18:c3:a9:9f:
                    d7:19:d7:ea:6d:f1:63:5b:15:cf:d3:50:f4:d2:63:
                    a5:6b:37:03:d4:21:1a:13:ed:3e:15:44:57:6a:5a:
                    93:3d:7b:0e:06:a4:9a:e2:a5:bc:0b:ca:a1:28:2b:
                    35:90:d7:64:6e:65:65:f7:90:84:0e:b7:9b:88:41:
                    f3:48:46:74:f4:80:3a:ac:e2:88:b5:4e:63:aa:ca:
                    6f:50:71:cd:54:0f:5c:ec:1e:9e:6b:3d:61:3f:0a:
                    e9:12:bd:e4:fb:de:37:32:eb:07:eb:77:a0:2e:f9:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:45:37:00:34:7A:1A:96:FB:C5:C7:BB:A3:77:D3:62:8C:A8:76:D2
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/w0U3ADR6Gpb7xce7o3fTYoyodtI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.216.0/23
                IPv6:
                  2a0c:fec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:ad:85:64:bc:6b:17:0d:f6:b7:a7:fc:8e:21:ca:8f:62:
         2d:2c:0b:71:95:d3:8d:0c:14:28:6c:ec:05:38:72:b1:5e:07:
         00:50:46:77:d3:15:a9:b0:e4:d6:16:f8:1f:14:ac:67:9c:45:
         89:cf:be:5d:83:58:1e:d4:e7:d0:2b:c4:5a:c2:be:0b:0e:95:
         a2:89:13:01:73:14:e0:e4:f9:7c:91:26:b3:5e:4d:86:3e:08:
         f7:b0:72:cd:0b:78:bd:28:66:45:99:9b:5c:4e:cd:9f:12:96:
         31:f4:54:cd:d2:0d:83:c8:1f:e9:c5:b7:67:44:aa:0e:11:68:
         eb:c3:6d:04:e0:d2:32:4f:20:63:84:78:83:ed:0c:32:68:a1:
         5a:67:b9:e6:b8:4f:b9:ce:ef:bb:5a:f1:7b:30:c1:58:21:09:
         58:d2:7b:8a:6b:83:69:3b:30:a7:b7:31:82:83:23:22:b0:ad:
         4c:62:18:e2:c6:eb:0c:fa:20:2e:63:cf:94:06:61:4e:c6:21:
         ab:f9:68:08:22:ba:5b:bb:92:17:e0:dd:e3:0f:0c:0b:e1:0a:
         4a:5a:e0:d6:40:ca:a5:f7:bf:de:22:c5:a7:c2:59:bc:f5:ab:
         94:e0:f1:ed:46:6f:7b:a6:5e:6c:d0:11:5b:e9:c4:79:16:d1:
         61:07:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----