Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/iOEM-MWysasrmCVzZ22Fxu7bTss.roa
File:                     iOEM-MWysasrmCVzZ22Fxu7bTss.roa (raw, json)
Hash identifier:          cAasF9KBfeydI+XQf5OpGvfY1X4iKVZSj++yyL/9V9Q=
Subject key identifier:   88:E1:0C:F8:C5:B2:B1:AB:2B:98:25:73:67:6D:85:C6:EE:DB:4E:CB
Certificate issuer:       /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial:       0185715545E37BDA61638DF2F5CD07FA951C
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/iOEM-MWysasrmCVzZ22Fxu7bTss.roa
Signing time:             Mon 02 Jan 2023 07:14:51 +0000
ROA not before:           Mon 02 Jan 2023 07:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47767
IP address blocks:        94.124.184.0/21 maxlen: 24
                          2a03:9780::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:45:e3:7b:da:61:63:8d:f2:f5:cd:07:fa:95:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
        Validity
            Not Before: Jan  2 07:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88e10cf8c5b2b1ab2b982573676d85c6eedb4ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:f6:bc:97:16:6e:9a:ff:ba:fe:d9:94:93:
                    bb:3e:14:f7:0c:96:ec:01:ad:74:a1:57:28:92:5c:
                    c0:48:45:cc:b2:31:87:8b:94:30:dc:c0:8e:54:f7:
                    ea:48:f3:61:5b:d4:5f:15:79:9b:3c:db:f6:eb:aa:
                    92:fa:c5:fc:08:a6:56:f9:76:70:d3:87:a8:15:09:
                    58:2d:34:41:a2:00:3b:75:03:49:5f:41:aa:1a:dc:
                    e8:92:7e:a9:d9:77:ed:08:20:1d:df:3f:ea:66:45:
                    f0:d5:96:ee:8c:fd:0f:d9:89:d8:4f:f9:29:6a:b8:
                    6d:af:b9:6a:a3:e9:22:da:d5:df:45:d8:a3:f8:4a:
                    73:3a:18:37:82:ed:84:5d:4c:2a:c6:5e:85:55:22:
                    f0:51:a5:ca:a4:07:0a:ee:b6:b1:f5:65:ad:52:bb:
                    f0:7f:ae:cf:08:4d:90:63:d7:e0:98:09:bb:4d:9d:
                    e5:79:1a:1a:f7:d5:93:fb:68:b2:d9:60:ad:26:0e:
                    cc:61:d1:a7:49:7d:b0:ba:dc:ea:aa:be:be:48:9b:
                    a6:51:99:b1:85:56:94:24:09:4d:9f:9f:c4:8c:43:
                    a6:59:97:7b:e8:c6:1a:aa:53:70:5f:aa:8c:fa:65:
                    68:56:68:db:c3:d2:18:72:4b:44:11:c8:4e:c8:91:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E1:0C:F8:C5:B2:B1:AB:2B:98:25:73:67:6D:85:C6:EE:DB:4E:CB
            X509v3 Authority Key Identifier:
                keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/iOEM-MWysasrmCVzZ22Fxu7bTss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.184.0/21
                IPv6:
                  2a03:9780::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:bc:bd:71:4c:0e:68:82:1e:ed:e0:8b:a9:00:ff:50:ec:
         c1:88:03:8c:93:a2:5a:7b:d2:e6:c2:0a:bc:db:32:ed:cf:a7:
         93:ae:68:cb:a3:be:80:89:5b:68:9b:35:d0:2d:ce:61:a7:5f:
         70:83:64:39:3a:2a:29:41:74:0e:d5:85:a2:9d:2e:fb:1f:ac:
         a4:76:23:d7:db:03:61:a5:8f:08:e4:6c:6a:f0:3e:13:51:22:
         9a:0c:4e:c4:a4:83:2c:59:91:3f:21:17:f8:2e:a8:76:82:fb:
         d1:f5:6f:68:0c:30:75:1d:77:b6:75:e5:44:41:87:3f:af:cb:
         45:f4:4b:32:0d:9a:f9:70:f3:54:67:92:69:b8:aa:16:1d:c7:
         06:c2:cc:f7:f5:72:18:ba:82:10:82:9e:7d:85:7d:b8:a6:09:
         c9:6c:22:87:22:0a:a2:58:e8:ff:35:3b:85:18:b7:ae:74:54:
         53:5f:b8:f5:d2:27:53:f1:eb:1b:0a:dd:b1:01:42:d2:24:ee:
         40:1e:eb:d4:e5:e7:1b:05:cd:97:ad:d0:c0:d8:0d:e5:fd:12:
         34:8a:f5:07:61:2b:91:1e:d2:97:91:ab:47:08:2f:16:aa:58:
         4a:0d:42:2d:c1:b6:b9:1a:90:ba:c1:82:ed:48:89:ba:82:8d:
         3b:21:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----