Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/OT0Ls1-rUidnAtTUeqPpH5xAGs4.roa
File:                     OT0Ls1-rUidnAtTUeqPpH5xAGs4.roa (raw, json)
Hash identifier:          HbXF/8eti5uxl5mSR7xwZ2vxxUt2rBwHtu8odAZcTtY=
Subject key identifier:   39:3D:0B:B3:5F:AB:52:27:67:02:D4:D4:7A:A3:E9:1F:9C:40:1A:CE
Certificate issuer:       /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial:       018571FA2F83CF498DDBE793855EC8EEABF7
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/OT0Ls1-rUidnAtTUeqPpH5xAGs4.roa
Signing time:             Mon 02 Jan 2023 10:14:59 +0000
ROA not before:           Mon 02 Jan 2023 10:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61984
IP address blocks:        185.51.176.0/22 maxlen: 22
                          2a01:b0e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:fa:2f:83:cf:49:8d:db:e7:93:85:5e:c8:ee:ab:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
        Validity
            Not Before: Jan  2 10:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=393d0bb35fab52276702d4d47aa3e91f9c401ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:5a:af:c7:2c:43:8f:b3:54:21:f7:ae:1d:
                    2e:87:b4:d4:21:b6:89:b2:86:b5:ce:5b:0d:7c:87:
                    33:11:f5:2d:34:69:30:d5:3e:12:9c:58:b8:f8:69:
                    94:41:60:aa:2d:71:04:ff:00:41:02:63:68:ff:42:
                    ce:48:fd:68:d7:50:ca:57:2d:32:00:ce:e7:03:15:
                    ba:c8:fa:c5:04:97:25:01:cb:64:f3:de:f5:27:4b:
                    c3:70:14:03:ca:03:37:63:8d:cd:55:a3:80:12:10:
                    ad:48:b5:ef:0c:3f:10:4b:2e:18:71:b6:af:25:b5:
                    ab:4b:b9:eb:79:5a:03:84:05:f4:1d:dc:a1:50:19:
                    c7:33:ce:f3:69:0c:8c:12:02:50:7d:2e:3a:08:4a:
                    06:e3:c8:a1:af:a2:ff:18:e4:26:4c:18:14:89:31:
                    90:88:57:73:51:a9:e0:38:10:c4:44:26:2e:87:f7:
                    35:4e:c3:23:f0:e5:fb:96:97:8a:31:4e:a0:16:52:
                    fa:03:02:e0:e2:aa:83:e8:1d:a6:f2:97:e8:d1:c9:
                    9e:de:6e:1d:38:eb:01:d2:46:74:5f:37:66:29:20:
                    d3:4a:c8:14:8d:cf:c3:d2:80:84:df:af:a1:9b:0d:
                    f8:9e:f8:ff:89:1f:ed:f5:fc:5b:82:b0:8b:68:3d:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:0B:B3:5F:AB:52:27:67:02:D4:D4:7A:A3:E9:1F:9C:40:1A:CE
            X509v3 Authority Key Identifier:
                keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/OT0Ls1-rUidnAtTUeqPpH5xAGs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.176.0/22
                IPv6:
                  2a01:b0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:a5:ad:3c:50:5c:98:e5:9d:dd:d9:6f:32:b5:02:bf:2e:
         b4:29:43:f4:53:1f:1e:76:43:7c:74:a8:94:ec:73:d7:20:71:
         f5:4c:78:a0:f8:9d:f0:46:b5:76:2b:34:e6:7b:1f:c2:33:98:
         73:c7:dd:88:62:5f:39:81:1c:a4:5b:3a:ce:5f:d4:d0:4a:72:
         e2:b6:31:e3:00:2a:5e:14:2b:6e:34:e8:50:a7:cd:76:90:62:
         e7:2c:00:ed:bf:77:08:f1:4c:00:05:19:a4:f0:a6:ea:d9:82:
         51:5c:a1:ba:9d:12:b5:f2:c5:c1:6e:6b:44:05:5b:01:10:a8:
         2f:ee:56:0b:e3:3d:ce:6e:8d:76:0a:22:71:d1:c1:94:ef:91:
         27:f1:e9:3f:f9:fd:d9:dc:c7:11:67:9a:52:f0:e6:a7:4a:1b:
         fc:8c:a6:a3:92:5f:d8:15:d8:a2:68:63:dc:99:c2:d8:da:6d:
         20:ed:04:c4:bb:4c:ea:6c:b9:f8:ed:60:a5:23:ac:d7:90:cd:
         69:26:99:1a:0f:a0:a5:96:fd:02:ca:da:07:6a:41:7f:0a:11:
         91:f1:74:15:72:03:6f:62:47:0a:d7:a6:b4:f3:23:0f:4b:28:
         3c:6a:71:57:ca:c5:93:91:1d:5f:a8:f2:c9:ad:95:e6:cc:ff:
         62:83:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----