Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/SUt-CxQ_h3LCcUl7K7xmqssjd2A.roa
File:                     SUt-CxQ_h3LCcUl7K7xmqssjd2A.roa (raw, json)
Hash identifier:          16sXTdrQbMvQugenLh5r4RlMA0Co4pGkGifo25zivqg=
Subject key identifier:   49:4B:7E:0B:14:3F:87:72:C2:71:49:7B:2B:BC:66:AA:CB:23:77:60
Certificate issuer:       /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial:       018571B9E64D39BFFAE01A85EA9E75347FD9
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/SUt-CxQ_h3LCcUl7K7xmqssjd2A.roa
Signing time:             Mon 02 Jan 2023 09:04:46 +0000
ROA not before:           Mon 02 Jan 2023 09:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62254
IP address blocks:        91.233.141.0/24 maxlen: 24
                          2a0e:e180::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b9:e6:4d:39:bf:fa:e0:1a:85:ea:9e:75:34:7f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Validity
            Not Before: Jan  2 09:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=494b7e0b143f8772c271497b2bbc66aacb237760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:36:48:9b:e4:74:f5:c0:53:6d:54:ae:07:
                    f4:64:67:fe:de:59:b2:a4:ad:31:40:78:81:5e:d5:
                    47:43:57:94:bd:34:9b:75:66:d3:41:29:e9:95:7e:
                    c0:3f:40:49:47:85:df:31:da:0a:fa:72:b6:f6:96:
                    64:3f:75:b9:ff:5c:58:6d:40:98:37:74:52:6d:b4:
                    f5:80:43:18:6c:0b:96:6d:cd:56:73:f4:8c:cd:a5:
                    5b:cd:4d:e9:23:ab:68:5c:6a:8e:81:ea:e6:86:2b:
                    a0:5f:4d:09:c0:72:c6:23:a4:f7:46:59:e0:e2:a3:
                    97:8f:09:a5:95:65:0c:9e:64:a7:a7:df:67:c9:bc:
                    5a:8b:06:6e:bf:25:c4:92:c8:10:0b:5a:b9:05:49:
                    c8:b3:81:56:13:67:e9:25:f1:65:20:fc:b6:d9:89:
                    d8:66:26:80:d3:87:9f:6a:87:1b:d6:da:bd:f1:c4:
                    4c:d2:07:ef:ad:bb:d5:b7:7a:ed:fc:fb:66:bd:e9:
                    8a:2a:93:26:cb:a5:64:51:8e:88:ee:ce:68:f0:9c:
                    39:49:c1:03:98:4e:2c:e4:d2:29:60:86:30:76:b1:
                    45:e4:a8:da:93:ee:17:94:28:2d:75:8a:bc:2a:69:
                    23:16:5c:49:28:0f:4b:17:37:50:ca:e6:d1:89:e9:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:7E:0B:14:3F:87:72:C2:71:49:7B:2B:BC:66:AA:CB:23:77:60
            X509v3 Authority Key Identifier:
                keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/SUt-CxQ_h3LCcUl7K7xmqssjd2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.141.0/24
                IPv6:
                  2a0e:e180::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:8e:31:9a:ae:85:5a:88:6d:0b:4c:a2:eb:36:ca:4f:0d:
         90:e5:e6:f7:66:61:2c:fe:f6:b0:f2:0d:4e:6a:a1:5c:56:61:
         18:46:28:87:cc:d2:d7:81:fb:86:63:d8:82:22:58:53:3a:27:
         d9:16:98:79:c9:f0:02:de:d1:2e:b0:42:2f:9d:be:eb:be:8d:
         a3:6e:bf:1b:64:1e:24:ef:aa:14:56:ce:93:96:75:ff:68:80:
         07:6c:f1:41:a0:81:e5:78:f3:81:52:d9:b7:41:bc:28:60:64:
         d9:74:67:f4:69:da:5b:e8:53:d5:ff:f5:d7:4c:93:ce:8a:13:
         bd:2c:97:34:18:d6:3c:23:fe:6f:c8:29:3d:ce:e5:40:7a:f0:
         35:d2:77:ec:2d:b5:38:66:da:47:57:78:90:8f:58:4b:35:0c:
         d5:4e:ca:9e:44:8e:63:4e:4b:8f:86:ac:07:61:87:c8:38:63:
         94:34:04:94:b1:16:25:39:3e:19:d5:00:bb:72:50:8e:34:1d:
         dc:3d:8b:4a:99:69:5a:7f:0a:29:75:da:e4:c6:5d:f3:29:73:
         f4:2f:fe:fa:c7:b1:44:e6:71:bf:e9:b5:4c:63:2d:6a:85:94:
         e8:29:f6:4b:e3:e4:b2:88:e3:b8:20:61:61:40:17:69:01:f1:
         b8:14:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----