Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d2KEcAgYP4941-mOSYMeWWbFKDA.roa
File:                     d2KEcAgYP4941-mOSYMeWWbFKDA.roa (raw, json)
Hash identifier:          Msp9MIzzYi94dy52UCdLAmkG/CPHbq/94xCBU64nIyk=
Subject key identifier:   77:62:84:70:08:18:3F:8F:78:D7:E9:8E:49:83:1E:59:66:C5:28:30
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0186DF9FF55540271D4E7DC25546CACC56CA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d2KEcAgYP4941-mOSYMeWWbFKDA.roa
Signing time:             Tue 14 Mar 2023 10:17:27 +0000
ROA not before:           Tue 14 Mar 2023 10:17:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138687
IP address blocks:        85.133.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:df:9f:f5:55:40:27:1d:4e:7d:c2:55:46:ca:cc:56:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Mar 14 10:17:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7762847008183f8f78d7e98e49831e5966c52830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:3f:f9:e7:79:80:c0:de:d8:1e:6a:e7:62:
                    38:96:30:46:6e:92:89:fe:99:8d:80:7e:83:dd:cb:
                    00:e7:d0:17:14:b0:62:e1:98:a3:28:48:6b:38:d9:
                    49:95:44:24:17:fc:6c:bd:a7:c2:50:28:20:38:a7:
                    02:8d:4a:d4:e9:43:7f:c9:7e:c2:0e:34:9b:0c:4a:
                    61:cb:e3:20:6e:0e:5a:72:16:c0:73:ab:42:a2:78:
                    10:c8:1b:88:b7:e6:7d:c3:76:37:dc:1c:48:95:fa:
                    13:df:7e:16:60:56:92:69:a4:7b:dc:46:10:01:e0:
                    2b:a3:ba:bc:1e:ea:4b:ef:c0:1d:90:50:fc:2a:d0:
                    ef:2b:2c:7e:e1:14:5d:71:d1:bf:09:53:aa:aa:7d:
                    33:c5:97:c9:58:54:11:63:4a:54:cc:82:4b:0d:ee:
                    62:ab:44:c2:42:6c:25:4f:37:ed:81:74:3c:1e:1a:
                    78:d1:68:ad:f4:30:3c:77:dd:68:51:54:c1:c0:fe:
                    84:2b:0f:4d:df:eb:88:3e:a1:db:1e:ef:65:6b:2b:
                    69:dc:15:ff:04:bc:cf:fe:75:ad:aa:a5:77:a3:b1:
                    19:6d:5a:58:7c:5c:60:4a:f3:7b:fd:bb:ec:29:2b:
                    16:45:49:2e:dd:2c:0a:74:9d:24:c4:4d:60:e4:02:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:62:84:70:08:18:3F:8F:78:D7:E9:8E:49:83:1E:59:66:C5:28:30
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d2KEcAgYP4941-mOSYMeWWbFKDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:83:b8:0f:22:e2:4c:c8:85:7d:e1:66:9a:8d:74:bb:95:ed:
         36:f1:87:51:be:f4:e2:6c:40:aa:42:b2:2b:25:57:85:67:70:
         1d:71:d4:41:14:0a:91:32:49:d2:fe:08:52:2a:88:0a:50:26:
         70:6b:4d:e9:2e:29:5a:d4:ba:a1:b1:3e:47:7f:98:59:09:86:
         73:31:4f:f4:8e:e6:1d:bd:71:4d:6a:59:b7:ef:2e:2a:0e:6e:
         cc:8b:62:d4:6c:6b:f7:e2:06:3d:30:6c:16:59:e6:17:24:b1:
         38:91:d3:d2:7a:4e:e5:e8:8d:17:3e:f6:92:f4:de:34:88:a8:
         a8:7c:19:6b:77:e3:97:bd:20:83:0a:96:0e:ed:bf:9d:ac:e7:
         20:f7:97:88:b4:56:6e:89:47:46:01:3f:f9:20:59:08:50:ee:
         74:f7:37:2a:9c:20:62:b7:0e:59:31:20:4c:37:89:96:ad:b6:
         05:65:f1:95:a1:e6:17:db:cb:c6:d8:c9:6c:82:bf:91:54:ad:
         8b:da:be:c3:d3:c9:86:7b:83:b4:08:b3:15:d2:36:26:b4:a3:
         a6:b5:04:74:7c:bb:14:f6:46:78:da:6e:52:5d:5f:f1:eb:c7:
         bc:4f:e9:73:af:69:58:f2:ae:52:31:b2:0c:5f:10:c1:5a:74:
         2f:75:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----