Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/be_hzwRcbKNE_CPCBmz3Y9IPcPk.roa
File:                     be_hzwRcbKNE_CPCBmz3Y9IPcPk.roa (raw, json)
Hash identifier:          nkOn/GLWlAk15qamZR7vgyCg5sI3mX3QYcmoMJlVwFw=
Subject key identifier:   6D:EF:E1:CF:04:5C:6C:A3:44:FC:23:C2:06:6C:F7:63:D2:0F:70:F9
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       018571D7CB17535AFEE42B3E7770E67AF502
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/be_hzwRcbKNE_CPCBmz3Y9IPcPk.roa
Signing time:             Mon 02 Jan 2023 09:37:25 +0000
ROA not before:           Mon 02 Jan 2023 09:37:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49681
IP address blocks:        185.117.80.0/24 maxlen: 24
                          2a05:5e40:f00f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:cb:17:53:5a:fe:e4:2b:3e:77:70:e6:7a:f5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Jan  2 09:37:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6defe1cf045c6ca344fc23c2066cf763d20f70f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:94:8d:1b:b9:fd:6f:83:25:28:87:bc:e7:
                    95:b4:f6:6b:11:7b:d9:9d:04:b6:d9:8a:af:d4:53:
                    80:2e:fd:fa:ff:fc:78:61:76:e3:a5:92:eb:46:05:
                    15:30:f2:21:c3:98:e5:2b:d0:aa:c1:2f:03:38:0e:
                    5b:81:c4:62:a4:9f:cd:2b:6c:d7:6a:74:c8:5a:0d:
                    d3:cf:27:ea:3c:28:c0:95:0f:68:6f:a3:3b:90:4f:
                    de:52:45:46:9f:6e:0b:60:b0:71:7b:08:c5:ac:29:
                    04:ed:d1:fa:92:bd:e8:bb:8b:89:6d:06:14:94:05:
                    d5:32:c3:11:c0:67:cf:11:69:68:70:5e:8c:37:92:
                    72:9f:59:17:14:b7:59:71:6f:e2:ff:21:67:43:85:
                    5b:92:37:a4:a5:47:4a:87:b2:a3:64:0d:82:d8:1d:
                    c4:90:47:94:26:cb:36:61:a2:1e:6e:25:67:3b:5e:
                    93:e9:b5:f1:44:fd:9c:bf:b4:db:30:8d:fe:17:73:
                    95:32:fb:9c:d9:fc:69:47:19:fa:fd:7c:e7:6d:73:
                    81:d6:bb:b5:db:35:c1:c5:0b:f6:6a:06:6a:a6:22:
                    32:f0:da:5e:15:1c:64:2b:50:df:33:48:35:7e:4a:
                    37:83:f8:71:ba:4c:97:c7:e2:a5:8c:1d:25:b0:4a:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:E1:CF:04:5C:6C:A3:44:FC:23:C2:06:6C:F7:63:D2:0F:70:F9
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/be_hzwRcbKNE_CPCBmz3Y9IPcPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.80.0/24
                IPv6:
                  2a05:5e40:f00f::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:42:8a:3b:d2:17:c5:72:e6:a1:26:71:e0:ff:a7:93:d4:
         2e:03:e5:eb:16:96:9a:90:26:bd:8a:f7:8b:c4:38:8c:8f:6e:
         c7:1f:ae:14:81:8e:6c:e8:c4:e8:2d:4d:9f:42:04:35:9a:7e:
         36:33:7a:e6:65:1d:92:27:fc:c8:33:53:11:95:43:2c:c0:b5:
         30:2a:f8:ad:cf:4d:2f:10:72:56:38:47:7a:5a:de:0c:a7:25:
         2f:27:d0:bb:ce:33:d9:62:70:08:f8:35:45:bb:89:85:8e:f5:
         93:38:dd:62:f4:da:d8:fb:d5:82:f3:61:ed:75:02:f7:e0:26:
         70:53:8c:1e:36:bc:97:4f:e3:6b:74:86:47:0e:2c:2e:43:85:
         8c:92:da:29:6a:f8:d5:02:3b:13:6c:a5:e2:ea:87:ef:69:35:
         3d:af:29:27:7e:0b:86:99:92:d8:b6:2b:23:0f:2c:70:92:24:
         5b:1d:ff:8d:dc:58:e6:88:cb:d9:d7:33:4b:a1:c0:8d:eb:c9:
         d0:0a:6b:35:a1:85:ee:47:80:df:80:a5:42:05:43:53:3c:46:
         f4:d2:9a:0e:45:a0:e0:86:42:20:af:1e:df:af:fd:bd:fa:59:
         84:9f:df:c4:0b:e0:cf:1b:5e:1c:9a:7e:e6:15:1f:9d:93:f3:
         c0:7d:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----