Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/0cyBhri7_w4I8lKGpDcSX0ClcDA.roa
File:                     0cyBhri7_w4I8lKGpDcSX0ClcDA.roa (raw, json)
Hash identifier:          CjWY5dqiGlWmhC0NrbNXieGTOAebVYIw41qf0ZiUtkg=
Subject key identifier:   D1:CC:81:86:B8:BB:FF:0E:08:F2:52:86:A4:37:12:5F:40:A5:70:30
Certificate issuer:       /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial:       01856DCAEA3061A7F11832E8C6E9DDEF7A3D
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/0cyBhri7_w4I8lKGpDcSX0ClcDA.roa
Signing time:             Sun 01 Jan 2023 14:44:52 +0000
ROA not before:           Sun 01 Jan 2023 14:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50304
IP address blocks:        185.247.12.0/22 maxlen: 22
                          2a0d:b680::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:ea:30:61:a7:f1:18:32:e8:c6:e9:dd:ef:7a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
        Validity
            Not Before: Jan  1 14:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1cc8186b8bbff0e08f25286a437125f40a57030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:7c:ba:24:9c:e5:8d:23:e7:22:f9:12:9c:
                    c6:6c:50:bb:31:59:6a:fd:59:2f:70:b6:8a:2c:72:
                    ff:48:af:12:68:7d:d2:60:96:9e:b2:a1:f8:92:91:
                    9d:0b:4d:a4:54:9d:d8:d6:a8:0d:1f:b3:b6:23:17:
                    65:9c:ea:b9:bc:59:bb:59:59:d7:db:fd:e8:ee:23:
                    d6:3d:8c:ad:51:90:4e:6a:70:a0:65:94:76:72:64:
                    63:51:e2:00:21:71:3c:dc:aa:3b:0f:e4:4f:cf:8e:
                    b8:cf:3c:9f:67:60:eb:e3:84:6a:57:77:71:b3:1c:
                    53:f8:e4:fe:b4:86:c2:f3:16:5b:77:92:25:e0:9d:
                    4a:43:a6:8e:b9:9d:ad:f4:f5:73:f3:78:f6:63:b0:
                    5d:7b:64:5d:9a:4a:3c:44:65:25:8d:78:f9:8f:fb:
                    f0:af:86:67:ec:dd:7d:83:b0:f0:ee:ff:ae:0e:67:
                    d4:74:73:d0:15:9e:9f:86:4f:e2:a5:0e:ea:f0:25:
                    9a:95:04:bb:39:70:3e:c4:22:10:78:34:75:2f:2a:
                    54:a5:03:fd:7d:69:86:dc:f5:30:a7:ae:be:33:e2:
                    ce:be:4c:1d:9d:c9:8e:89:d7:cc:4c:11:4d:57:5d:
                    6b:3c:b0:63:59:8c:77:9f:e1:6f:71:e2:2a:ab:7d:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:81:86:B8:BB:FF:0E:08:F2:52:86:A4:37:12:5F:40:A5:70:30
            X509v3 Authority Key Identifier:
                keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/0cyBhri7_w4I8lKGpDcSX0ClcDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.12.0/22
                IPv6:
                  2a0d:b680::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:ed:31:5d:74:65:bc:4b:cb:9b:4f:56:d9:4b:53:c0:3f:
         41:2a:98:73:e2:c6:d8:5c:cc:26:75:5f:14:de:81:b3:81:de:
         cc:3a:7f:53:4a:b1:7b:28:c7:5c:be:04:fa:c3:7a:09:2d:b7:
         3e:8f:5b:c4:5b:f0:8f:f0:36:08:7a:bd:ff:5b:37:4d:7d:96:
         ba:ac:93:44:ad:95:a7:da:5b:68:26:23:62:9f:57:bd:41:b7:
         04:6b:e7:e1:8f:88:a5:b5:05:08:91:f2:3b:b6:d7:e6:62:66:
         89:2a:63:88:45:8d:0e:22:93:18:72:46:da:04:84:05:80:e8:
         8e:8b:65:9b:c9:e3:5b:6a:9d:22:4b:18:ab:76:00:d3:9f:5b:
         67:3c:fd:f6:e1:0e:d3:6c:80:8d:cd:b6:28:7d:30:7c:af:21:
         e7:fa:d1:ef:6b:10:b5:70:ee:4c:b3:53:47:87:6b:2f:e9:ab:
         2b:e3:09:f7:29:7a:f2:49:30:46:5d:73:00:73:ce:f5:72:29:
         cb:be:bf:e4:09:5a:9b:ff:b0:09:a9:89:60:98:2c:10:d8:59:
         d8:d3:4b:96:d2:ed:ca:a5:dc:b7:8a:0d:f2:01:4d:9a:fc:72:
         0c:00:6b:79:b9:b1:1e:a1:80:db:bb:76:cf:d9:48:63:d0:cb:
         dd:de:36:bf
-----BEGIN CERTIFICATE-----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