Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/xHXuQiZDH3v4Q7gyWAQufWFdQX8.roa
File:                     xHXuQiZDH3v4Q7gyWAQufWFdQX8.roa (raw, json)
Hash identifier:          f54ng4EXbpN4sYU+2KkcWn8+uBun8bh1OxnnnYJo8w0=
Subject key identifier:   C4:75:EE:42:26:43:1F:7B:F8:43:B8:32:58:04:2E:7D:61:5D:41:7F
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       01856DD430B13BAEC972F9D9781DECBB319A
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/xHXuQiZDH3v4Q7gyWAQufWFdQX8.roa
Signing time:             Sun 01 Jan 2023 14:55:00 +0000
ROA not before:           Sun 01 Jan 2023 14:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33915
IP address blocks:        194.26.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d4:30:b1:3b:ae:c9:72:f9:d9:78:1d:ec:bb:31:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Jan  1 14:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c475ee4226431f7bf843b83258042e7d615d417f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:a2:e6:e6:fd:79:ed:a6:7c:33:75:6c:e4:
                    a3:11:ef:5c:66:16:47:43:c6:58:a0:c0:a5:a9:61:
                    97:9f:b2:83:6b:91:df:76:bc:ad:1b:04:35:be:3a:
                    79:2b:d2:b2:f3:2b:8d:85:8b:6b:14:5d:48:ef:be:
                    9c:de:a7:81:29:e9:0f:50:8d:11:f2:ad:1c:47:ed:
                    7a:5b:16:0d:d4:94:83:79:56:37:1f:98:8c:54:3a:
                    18:4f:44:fc:90:1f:eb:d2:9f:dd:6a:0b:9b:03:38:
                    dc:ea:a9:8d:47:8e:ec:f5:46:17:24:05:49:d4:b8:
                    26:f9:74:92:63:e9:45:55:c2:68:55:62:c5:f5:dd:
                    6f:7a:54:07:ab:05:2c:a0:31:c6:37:11:42:a4:e1:
                    f9:9f:fc:ae:c1:99:1b:24:8b:ec:40:77:33:ac:df:
                    38:4f:94:fa:a4:98:d1:08:a8:ad:71:1d:36:a3:f0:
                    a2:25:11:07:a3:1e:13:1b:09:49:77:9d:e0:ca:f4:
                    d9:10:e4:08:8d:0d:7b:09:cd:0a:79:72:99:22:04:
                    88:88:d8:61:0b:af:ed:5e:10:3e:c2:9d:5e:c9:20:
                    48:97:7b:e2:58:49:75:99:ef:5b:fb:67:a6:7d:1f:
                    35:42:4c:c6:8f:30:f2:3b:a2:38:1f:06:a7:a0:1f:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:EE:42:26:43:1F:7B:F8:43:B8:32:58:04:2E:7D:61:5D:41:7F
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/xHXuQiZDH3v4Q7gyWAQufWFdQX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:9d:49:1b:f5:0a:ce:b0:30:c5:1a:d4:c5:01:33:87:34:
         48:3d:27:39:3c:5a:c3:22:56:93:d3:5a:d9:12:a9:f2:78:52:
         1a:c9:36:47:fe:73:f3:57:6b:fa:7c:ed:20:e3:42:53:bf:8b:
         f4:b0:27:e8:89:20:39:4f:5e:6b:2a:c9:eb:8e:98:59:64:4c:
         56:12:52:76:7f:cd:e1:0d:ce:da:0e:bc:6d:79:ba:a3:ba:51:
         85:c8:c9:a7:c1:69:5b:d7:f9:ca:e2:26:27:20:49:ae:8c:cd:
         94:e8:d7:de:f2:d3:c8:6e:92:48:d7:94:00:37:b3:c2:97:33:
         5f:ad:11:51:0b:c2:af:b2:fe:f0:b2:be:58:b4:68:86:7c:9c:
         bd:3c:67:b2:36:59:da:ea:d1:d3:c4:72:95:9c:92:07:5d:f8:
         fc:8e:8f:7f:d4:d6:aa:2f:7b:14:93:30:79:65:2a:29:7b:58:
         ac:e5:ce:29:85:25:4e:d1:80:a1:6e:b9:be:9d:21:cd:9a:55:
         a8:9d:81:08:7d:32:5b:89:f1:d3:26:b7:b9:ca:ad:11:a4:df:
         fa:d7:24:df:6a:4f:f7:80:93:84:48:62:43:86:74:d5:8a:69:
         a6:ba:7b:f2:e7:0b:ed:5f:50:58:92:de:4f:9f:98:16:bd:2d:
         c0:a5:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----