Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/liZbpNU6MbGSU9t43o7d9xs4WwU.roa
File:                     liZbpNU6MbGSU9t43o7d9xs4WwU.roa (raw, json)
Hash identifier:          EzAZmy+tTepHGlOPS3YWjWuocAxWI3DOTludiXK6nl8=
Subject key identifier:   96:26:5B:A4:D5:3A:31:B1:92:53:DB:78:DE:8E:DD:F7:1B:38:5B:05
Certificate issuer:       /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial:       01856F021D467DE1D148A25000162E459EB3
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/liZbpNU6MbGSU9t43o7d9xs4WwU.roa
Signing time:             Sun 01 Jan 2023 20:24:47 +0000
ROA not before:           Sun 01 Jan 2023 20:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197690
IP address blocks:        185.197.36.0/22 maxlen: 22
                          2a0a:75c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:1d:46:7d:e1:d1:48:a2:50:00:16:2e:45:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
        Validity
            Not Before: Jan  1 20:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96265ba4d53a31b19253db78de8eddf71b385b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:16:30:ac:45:f9:f1:e5:a2:48:f4:a2:7d:
                    34:59:74:41:35:2d:6d:14:67:09:25:b5:bb:e7:3a:
                    44:9b:d4:80:0f:54:e3:43:1a:5e:4d:6e:bd:32:1b:
                    f4:73:14:69:c7:9b:93:8c:d2:07:8c:ce:14:51:2d:
                    96:d0:76:63:db:83:d1:e7:a2:2a:cc:72:3a:8d:0f:
                    7e:10:48:82:9a:9f:bf:f9:6c:27:3e:42:fe:78:43:
                    e8:86:57:23:0c:ee:8b:2b:4b:16:a6:07:f4:f8:3d:
                    89:ca:71:e7:4b:df:bc:1a:7d:ce:f6:4f:be:a9:fc:
                    f0:a6:5c:a4:db:fa:dd:1d:c0:d9:4e:63:09:60:45:
                    cf:b1:d4:6c:10:f2:76:0b:85:5b:70:b6:5b:5b:c2:
                    51:ce:55:20:86:62:5f:07:2d:9e:73:69:b8:7b:ec:
                    ff:e7:2a:d9:5f:06:c1:e6:5b:9f:e8:e4:06:c2:08:
                    30:17:13:94:d3:36:ae:57:21:ec:bd:e2:97:ea:16:
                    f0:42:0b:f3:5a:fa:6c:38:15:d1:3e:d1:89:fa:fb:
                    c9:29:4b:51:5e:07:30:0f:a2:a2:f3:83:df:f7:70:
                    87:50:5b:59:b2:ce:1d:3c:1f:37:22:dc:6b:46:70:
                    1b:f5:43:69:7b:ce:15:9e:1d:c8:cb:1f:46:53:92:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:5B:A4:D5:3A:31:B1:92:53:DB:78:DE:8E:DD:F7:1B:38:5B:05
            X509v3 Authority Key Identifier:
                keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/liZbpNU6MbGSU9t43o7d9xs4WwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.36.0/22
                IPv6:
                  2a0a:75c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:33:bb:af:de:47:a3:1f:4e:6f:c5:0b:e7:c6:55:dc:06:
         53:84:5d:7a:7c:91:34:c2:50:b3:68:57:e2:73:81:7d:7b:4f:
         d7:00:a6:f0:ed:87:e6:b5:83:29:71:53:33:94:5b:22:1d:c0:
         14:cc:57:e4:70:d7:b9:d3:34:25:ad:31:7b:78:1f:46:82:c7:
         5f:a5:77:18:5b:4f:ff:ad:ca:b1:6b:5c:40:78:80:d1:f0:eb:
         76:b6:bd:2e:d8:fe:56:21:69:73:70:f4:06:35:a9:e0:f7:81:
         0d:86:5e:2c:a6:39:b7:43:09:7d:b3:1d:2f:f2:44:02:41:5b:
         54:71:b0:ec:dc:d1:07:4b:ec:ed:58:8b:1d:35:31:11:b3:8a:
         6f:cb:4d:27:17:af:74:02:26:20:04:f8:6e:9d:0a:2c:14:b2:
         0e:43:05:54:93:59:79:4b:d8:9b:79:d8:70:98:7e:bd:8e:1b:
         e6:0e:79:2b:09:65:40:e0:22:d1:5f:4b:aa:c6:ef:31:cd:11:
         89:12:65:9a:d9:05:bf:a8:a9:6a:63:af:cc:ff:d3:c8:83:d8:
         95:dd:59:43:29:a3:01:33:0f:25:29:98:08:e8:f3:9a:d7:4f:
         da:15:99:10:13:3e:cd:11:f5:6d:2d:41:66:db:75:89:c4:83:
         3b:6e:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----