Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/wdK98Yynv3pCU9uDXHpO2U4SDS8.roa
File:                     wdK98Yynv3pCU9uDXHpO2U4SDS8.roa (raw, json)
Hash identifier:          BfR+X3B/s/g62Mdy8QvfivptrXPVTfTrQsAgofDODqs=
Subject key identifier:   C1:D2:BD:F1:8C:A7:BF:7A:42:53:DB:83:5C:7A:4E:D9:4E:12:0D:2F
Certificate issuer:       /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial:       018571553409E7D7C526621A1D6065938129
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/wdK98Yynv3pCU9uDXHpO2U4SDS8.roa
Signing time:             Mon 02 Jan 2023 07:14:47 +0000
ROA not before:           Mon 02 Jan 2023 07:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15576
IP address blocks:        193.43.183.0/24 maxlen: 24
                          2001:67c:66c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:34:09:e7:d7:c5:26:62:1a:1d:60:65:93:81:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
        Validity
            Not Before: Jan  2 07:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1d2bdf18ca7bf7a4253db835c7a4ed94e120d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:f8:c0:12:dd:11:1e:39:f8:d7:52:fb:a5:
                    70:6e:f8:b2:16:2f:fe:bd:30:c2:5c:36:6f:0c:f3:
                    dd:4a:58:7b:8b:b4:ef:08:88:0a:d8:2f:1a:06:33:
                    aa:6e:56:eb:b1:79:f6:1f:91:ef:f7:2f:4f:af:73:
                    45:d4:7b:b0:64:66:6a:63:8c:27:60:27:73:77:4a:
                    b7:77:d0:b8:48:e7:13:c9:b5:13:3d:34:51:d8:f5:
                    bc:55:5f:2f:fe:20:34:74:1f:1c:2f:a9:91:d8:8d:
                    40:2d:4b:d0:ee:e5:e4:19:14:95:f6:76:0b:49:a2:
                    93:ef:fe:7e:82:f3:d8:ec:21:6e:d3:81:25:59:f5:
                    f4:dc:88:ff:c8:8a:13:91:57:da:9a:c4:bc:d6:24:
                    3c:44:77:f4:a7:18:6c:35:ee:8f:e1:76:b1:fa:7d:
                    ce:5f:71:ff:39:be:cc:5a:9b:73:a9:12:12:d5:0f:
                    c0:41:07:4e:89:9c:2a:08:ba:25:64:78:c5:36:cd:
                    41:bb:09:f7:6e:71:97:7b:fe:4d:dd:66:2b:08:97:
                    3a:59:d8:3c:a1:de:a1:04:bf:b5:48:77:14:62:77:
                    f7:ec:15:99:01:ec:ad:83:1a:2d:24:97:79:bb:b8:
                    3f:4a:d7:89:8c:d8:d9:bf:69:59:e1:b1:0e:85:2c:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D2:BD:F1:8C:A7:BF:7A:42:53:DB:83:5C:7A:4E:D9:4E:12:0D:2F
            X509v3 Authority Key Identifier:
                keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/wdK98Yynv3pCU9uDXHpO2U4SDS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.183.0/24
                IPv6:
                  2001:67c:66c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:f0:29:b9:a3:a4:de:57:5f:08:70:e7:76:19:4d:3d:69:
         4d:e2:e9:a7:1b:bd:c7:d9:9e:b1:ee:37:d8:00:0f:48:6a:0b:
         3b:12:bb:db:c0:e7:7a:1f:66:fb:59:fb:e7:c9:36:c0:29:12:
         96:0e:5b:ca:40:c0:76:d5:01:e8:c2:77:77:29:fb:1c:2b:ba:
         80:44:b7:d2:e3:54:a7:54:26:ff:2e:aa:f2:49:6a:3d:5b:6d:
         5b:6e:a7:66:9f:ce:46:21:43:d6:96:4a:ad:0b:cb:2e:35:0d:
         83:67:02:38:5c:c0:c8:26:33:ea:3a:bb:5f:60:c2:5e:e2:f6:
         50:84:9d:c3:c6:c6:3b:f3:d6:01:5b:99:6c:29:2d:d1:a6:26:
         8f:73:c3:d2:8d:40:f9:68:06:1f:68:a9:bc:1f:3e:d5:27:ec:
         24:e1:0e:2c:1f:79:a9:d5:16:4c:71:9f:8f:4a:f9:82:04:8a:
         fd:ce:fe:86:01:bf:07:cd:c8:76:5a:76:02:05:1d:f5:18:70:
         33:17:63:95:d7:7d:ad:b4:b6:be:52:9f:68:47:7b:19:f0:22:
         c6:07:b9:b5:4c:6a:3c:5c:7d:98:46:a4:aa:d3:15:78:c8:ee:
         0e:78:38:70:be:51:2c:4a:4f:80:9d:11:5e:ad:29:ea:19:df:
         80:fa:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----