Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/h8YmVpZaZwQzHp41PbV7r_POrIw.roa
File:                     h8YmVpZaZwQzHp41PbV7r_POrIw.roa (raw, json)
Hash identifier:          lhQS9QfV43BdTfWudj3MaluyKXR/3ghNgIGeTF/MLI8=
Subject key identifier:   87:C6:26:56:96:5A:67:04:33:1E:9E:35:3D:B5:7B:AF:F3:CE:AC:8C
Certificate issuer:       /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial:       0185B99BB80D94397D50FDB6642957C3DBCC
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/h8YmVpZaZwQzHp41PbV7r_POrIw.roa
Signing time:             Mon 16 Jan 2023 08:04:28 +0000
ROA not before:           Mon 16 Jan 2023 08:04:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48882
IP address blocks:        91.224.113.0/24 maxlen: 24
                          2001:678:2b4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b9:9b:b8:0d:94:39:7d:50:fd:b6:64:29:57:c3:db:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
        Validity
            Not Before: Jan 16 08:04:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87c62656965a6704331e9e353db57baff3ceac8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:ed:5b:cd:eb:34:25:77:40:09:00:cb:24:
                    bf:56:2a:40:3c:5f:fc:98:68:35:8a:aa:15:9c:19:
                    7f:be:60:11:f0:d3:4b:c2:14:96:14:ca:66:d0:2a:
                    07:08:d4:23:0f:65:df:fe:f6:47:33:aa:37:4e:69:
                    47:4a:eb:f3:99:0e:01:50:50:9d:52:99:a6:69:8d:
                    66:63:2b:d3:90:8c:71:c4:03:a9:c6:97:91:da:b1:
                    c5:13:d4:7d:d2:e0:f1:22:66:b3:b1:57:f1:11:e3:
                    17:fe:56:3f:63:22:fd:18:c9:50:ca:51:7f:5e:ac:
                    e0:44:a3:d4:37:7f:28:ce:3c:33:b1:fb:02:dc:41:
                    65:21:dd:4d:f7:15:52:6c:eb:52:c5:91:70:41:8f:
                    73:32:ef:7e:34:57:f5:09:5c:ca:07:de:35:55:ed:
                    eb:a6:1e:a6:37:2a:cd:01:04:e3:da:af:54:a9:31:
                    ed:ff:8c:ef:a1:66:44:f2:c2:94:86:8b:51:9b:2d:
                    23:20:b2:4e:40:6c:ed:4e:af:4c:b6:94:b8:b9:92:
                    0d:22:96:28:f6:8e:78:c1:8c:f9:67:22:1e:2d:9e:
                    c2:90:49:3c:4b:f3:7e:0b:df:2e:8a:79:1c:7f:74:
                    7b:cf:41:a3:5d:d9:86:35:05:f5:3b:1c:98:68:56:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:26:56:96:5A:67:04:33:1E:9E:35:3D:B5:7B:AF:F3:CE:AC:8C
            X509v3 Authority Key Identifier:
                keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/h8YmVpZaZwQzHp41PbV7r_POrIw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.113.0/24
                IPv6:
                  2001:678:2b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:e9:13:1b:fd:10:1f:72:57:d5:44:9e:1b:38:80:cb:a2:
         91:be:29:47:e7:7f:3e:00:09:24:bd:66:b7:9c:0d:cb:25:1a:
         2b:13:04:b4:1d:e4:db:24:4b:14:d7:e5:8c:98:33:0d:c0:47:
         cc:bf:7e:2b:8b:c1:8f:5c:62:d0:a4:e9:15:3c:a5:1b:cc:d1:
         2d:01:fe:cb:8e:79:50:3e:6e:e6:47:fc:d7:ca:bd:c2:69:eb:
         96:53:a0:52:52:82:b5:cc:17:0e:0d:31:f3:dc:e4:cb:3f:9d:
         84:31:30:83:e0:63:58:92:22:9a:20:dd:92:4c:3a:6f:e9:6a:
         92:3f:f8:75:77:c2:3b:da:0c:7d:28:e6:63:0a:c5:23:f0:84:
         35:64:58:95:17:8c:77:ef:71:3d:60:8d:15:90:d6:17:81:7c:
         50:23:db:7a:b2:36:c4:2b:cf:fc:e9:69:2b:3a:51:e8:0b:59:
         eb:e3:13:e0:31:e9:cb:f3:0c:28:a1:a3:48:0b:15:04:ea:ea:
         67:8d:38:d2:73:66:f0:51:66:f5:73:79:57:e6:8b:23:cd:3e:
         db:34:2d:12:65:6a:03:cf:55:94:04:38:50:ff:34:87:4b:d7:
         a5:94:5a:78:bb:50:4e:0e:9b:76:c3:b0:f9:34:9d:e4:41:bc:
         30:fe:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----