Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/Gg2KehRLKrSQ6tJKifTdJTF3-CA.roa
File:                     Gg2KehRLKrSQ6tJKifTdJTF3-CA.roa (raw, json)
Hash identifier:          bTKK45eAkb7AyhUl019KaCghOdBnSLSsbjmssr+HTnU=
Subject key identifier:   1A:0D:8A:7A:14:4B:2A:B4:90:EA:D2:4A:89:F4:DD:25:31:77:F8:20
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       018570D5267AA3992B7C2BC02A3E6E4E68AC
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/Gg2KehRLKrSQ6tJKifTdJTF3-CA.roa
Signing time:             Mon 02 Jan 2023 04:54:55 +0000
ROA not before:           Mon 02 Jan 2023 04:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1299
IP address blocks:        85.198.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:26:7a:a3:99:2b:7c:2b:c0:2a:3e:6e:4e:68:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Jan  2 04:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a0d8a7a144b2ab490ead24a89f4dd253177f820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:17:64:83:06:1c:98:54:c1:dc:1f:c8:3a:
                    00:fc:c8:d9:b0:57:29:84:ad:ab:c1:b9:5d:84:21:
                    b8:8a:63:89:a3:fe:a6:f8:00:93:57:f1:9e:07:25:
                    e8:eb:f1:85:26:34:2d:4e:fe:7d:c2:4a:80:8f:ce:
                    bb:c6:99:96:ce:9e:40:11:1b:b4:9a:73:42:91:e3:
                    83:f8:ae:b7:8b:73:19:2b:da:ba:2f:7a:38:ad:91:
                    25:3b:7f:cf:a0:b4:07:10:67:fd:90:42:2a:bd:aa:
                    8d:fa:0f:af:6e:04:4c:b8:c0:60:a9:c0:8e:89:10:
                    97:30:c8:1c:80:50:c7:bc:66:13:74:e7:cf:6e:2c:
                    8e:26:20:49:99:be:24:79:33:92:f5:a5:b3:44:43:
                    e5:42:16:a7:37:0f:44:1e:89:7d:ca:88:97:a5:c8:
                    c4:3c:10:d4:6b:5d:0a:65:3f:47:1b:b3:55:2d:4e:
                    e6:dc:08:13:fd:0c:3f:ca:35:5c:0f:8a:46:9e:34:
                    ba:79:98:e2:aa:50:01:a9:b1:d2:75:d7:04:5c:e2:
                    bb:75:06:3d:bd:8d:f9:d7:82:4b:c2:b1:c3:f1:01:
                    78:3b:49:0e:a5:3b:50:3f:de:c3:5e:70:2b:99:de:
                    ec:6d:b0:82:27:45:33:4d:ec:ad:c2:09:d4:84:c7:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:8A:7A:14:4B:2A:B4:90:EA:D2:4A:89:F4:DD:25:31:77:F8:20
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/Gg2KehRLKrSQ6tJKifTdJTF3-CA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.198.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:43:5c:dc:65:ad:47:94:8a:53:4a:22:d1:e8:47:4d:da:
         54:3a:3e:c4:cd:5e:36:45:ec:cd:01:6a:2e:16:8c:39:d7:c0:
         cb:f7:85:7e:f9:a9:27:59:1e:6b:65:20:ff:6d:1b:06:33:b5:
         93:53:fb:5d:e9:d2:59:8a:e9:17:88:5a:0d:bf:c5:d0:ad:62:
         78:c7:22:83:49:70:94:fd:f7:a7:ad:8a:12:f9:e3:9e:6c:30:
         ce:d0:24:e9:29:64:ce:bf:c3:07:24:a6:99:09:1e:15:35:c9:
         e0:72:f8:4b:b7:ed:16:29:09:10:65:f1:73:9a:30:dc:8f:43:
         a1:e9:bf:4d:fd:2e:bc:d4:07:7c:1b:cb:ca:20:9b:d5:1e:1d:
         dc:26:41:ea:81:b5:0e:76:9d:24:19:61:00:99:33:cc:9a:42:
         f6:00:12:bb:dc:a4:d6:0d:2d:87:ae:da:57:1b:df:29:b1:97:
         8a:57:71:e8:b4:0f:6e:d2:dd:37:03:61:d7:95:d4:5c:bc:3d:
         e9:1d:14:4f:35:6d:b5:77:7f:53:f2:8c:9c:e0:13:a3:4c:04:
         de:f0:99:e2:b8:b0:c7:2c:f9:4f:4f:d5:12:84:64:9a:2f:ce:
         31:5c:75:25:07:3b:02:22:6f:67:c9:35:6f:ce:57:ce:07:c0:
         9e:75:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----