Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa
File:                     G2GrkOYg3gPLvcubpVjoYUA9HQI.roa (raw, json)
Hash identifier:          GurUZK6h1+iKmHky5r4jGQh2YeyUmXhHh2inZSKCE+U=
Subject key identifier:   1B:61:AB:90:E6:20:DE:03:CB:BD:CB:9B:A5:58:E8:61:40:3D:1D:02
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       01857127942B5F642A67F16E018EAC484501
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa
Signing time:             Mon 02 Jan 2023 06:24:57 +0000
ROA not before:           Mon 02 Jan 2023 06:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6706
IP address blocks:        83.148.0.0/18 maxlen: 18
                          62.44.0.0/19 maxlen: 19
                          195.122.192.0/19 maxlen: 19
                          195.128.192.0/19 maxlen: 19
                          88.146.0.0/17 maxlen: 17
                          212.27.192.0/19 maxlen: 19
                          195.250.128.0/19 maxlen: 19
                          194.213.224.0/19 maxlen: 19
                          213.175.32.0/19 maxlen: 19
                          62.177.64.0/18 maxlen: 18
                          212.20.96.0/19 maxlen: 19
                          2001:1508::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:94:2b:5f:64:2a:67:f1:6e:01:8e:ac:48:45:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: Jan  2 06:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b61ab90e620de03cbbdcb9ba558e861403d1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:02:f9:85:2f:22:45:62:87:e5:bd:cd:7f:
                    1f:6d:24:e4:8d:d4:81:87:48:f8:57:2f:ae:74:a6:
                    f3:c6:8d:9d:6f:3a:50:81:d2:96:f1:43:40:e9:4c:
                    d8:d2:2b:86:e4:97:ab:b2:b6:ea:9a:ca:c0:c3:aa:
                    f7:55:47:c0:6a:3c:f6:79:64:0f:c4:07:50:89:0e:
                    a8:40:4b:2c:51:c0:4c:10:5c:62:c3:70:49:81:70:
                    31:7c:66:fb:80:7c:c4:9b:80:d9:37:77:0d:af:98:
                    f2:ed:e8:32:d4:43:53:d1:51:80:ae:82:71:e0:ed:
                    ad:2f:ea:77:ff:5d:3e:2c:59:94:d2:a9:b2:01:81:
                    6e:e3:82:0f:b3:8e:6e:d8:03:9b:b2:61:79:27:be:
                    9d:fd:ff:6c:f8:bb:37:a8:13:e3:04:f4:7d:8e:5b:
                    27:e3:d6:06:00:41:80:62:6f:f3:63:42:8e:26:ac:
                    e6:b5:ae:de:d3:28:df:7e:df:52:26:c5:8e:3d:e3:
                    83:35:d5:49:fa:fa:83:53:4a:c3:30:45:a9:9d:e4:
                    82:e3:37:16:1c:03:33:f7:85:f1:f9:4f:16:f4:9b:
                    01:95:3c:08:dc:32:80:f3:b4:22:92:a4:81:d8:43:
                    b7:54:49:95:bb:0f:4e:ff:66:82:e3:f2:f9:0f:d0:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:AB:90:E6:20:DE:03:CB:BD:CB:9B:A5:58:E8:61:40:3D:1D:02
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/G2GrkOYg3gPLvcubpVjoYUA9HQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.44.0.0/19
                  62.177.64.0/18
                  83.148.0.0/18
                  88.146.0.0/17
                  194.213.224.0/19
                  195.122.192.0/19
                  195.128.192.0/19
                  195.250.128.0/19
                  212.20.96.0/19
                  212.27.192.0/19
                  213.175.32.0/19
                IPv6:
                  2001:1508::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:18:f1:ac:fd:ca:2f:07:9d:37:7d:42:88:f6:59:91:eb:50:
         9e:e0:2d:74:3c:d4:ec:55:c2:41:2c:53:b9:2b:bd:a8:e7:43:
         22:6c:93:c1:4c:f3:ac:fa:4e:5a:e1:9f:74:07:94:a0:3f:06:
         41:ea:eb:64:9c:3b:80:90:7c:71:65:39:0c:e7:9b:a7:4a:31:
         71:f6:6f:37:ac:b5:e4:9b:2c:2f:94:7b:e2:0a:03:2e:9e:45:
         72:4e:96:b0:9e:c5:46:bc:32:e8:72:fa:7a:30:55:91:1b:ce:
         fd:ad:4c:2d:75:c3:61:74:ec:8a:71:2d:f6:75:b5:af:f9:aa:
         19:cb:2e:be:b7:12:a0:9e:fa:a4:95:01:2d:74:94:1f:7f:c1:
         9f:c2:81:54:70:23:2b:20:b9:18:75:31:70:dd:92:fb:61:e1:
         41:e3:bf:84:9e:c0:2e:74:53:0a:f5:82:c4:93:5d:c8:48:95:
         6f:76:5c:69:80:04:ca:c1:66:95:fe:99:5d:62:be:33:b6:c3:
         10:22:f8:6a:23:2d:45:d2:6c:4e:6a:4f:71:48:4e:ce:0a:a8:
         c0:90:27:8e:40:75:45:84:b4:b9:00:3c:1b:ef:4c:40:18:f4:
         d3:74:c7:9f:0d:92:f6:7b:d6:b6:ca:98:bd:52:43:8e:44:f7:
         b1:bf:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----