Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wI0JMpV5ZO9z42Z4356DqzSrUfw.roa
File:                     wI0JMpV5ZO9z42Z4356DqzSrUfw.roa (raw, json)
Hash identifier:          g4OSZn6W7kw1EMWzVD3UtP0XWuikmmF+kUHBcEHUwmE=
Subject key identifier:   C0:8D:09:32:95:79:64:EF:73:E3:66:78:DF:9E:83:AB:34:AB:51:FC
Certificate issuer:       /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial:       018570FBBFDF4A96C7A15EC2D56C6C6D90A9
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wI0JMpV5ZO9z42Z4356DqzSrUfw.roa
Signing time:             Mon 02 Jan 2023 05:37:04 +0000
ROA not before:           Mon 02 Jan 2023 05:37:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60751
IP address blocks:        185.104.216.0/22 maxlen: 24
                          185.24.232.0/22 maxlen: 24
                          2a04:2e00::/29 maxlen: 29
                          2a04:2e07::/32 maxlen: 32
                          2a04:2e00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:bf:df:4a:96:c7:a1:5e:c2:d5:6c:6c:6d:90:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
        Validity
            Not Before: Jan  2 05:37:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c08d0932957964ef73e36678df9e83ab34ab51fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:17:80:e4:25:f8:a9:fa:1e:e1:2e:32:03:
                    29:db:a5:57:2a:34:ab:31:8a:92:37:1d:10:2f:51:
                    ac:96:fe:25:2e:8f:c8:31:85:b1:2b:8d:ec:f7:f6:
                    92:66:42:8b:cd:34:a1:98:67:fa:1f:27:34:e6:b3:
                    e8:63:60:11:73:8e:7d:15:3c:bc:a7:e8:41:40:7b:
                    34:5f:ba:0f:53:3c:93:77:ef:75:e9:55:36:f8:18:
                    b6:89:ed:38:03:f4:72:eb:06:e5:53:d3:90:8a:39:
                    93:8b:75:0b:67:eb:2f:b7:77:15:55:12:3a:c8:be:
                    25:36:f4:4f:87:e6:68:b7:e5:4f:f9:2c:0a:60:a6:
                    61:05:b7:54:6d:f9:63:ab:30:c0:f8:d6:b5:b7:cd:
                    7c:bf:d4:0f:bf:b6:1e:50:e3:71:76:a6:f4:e2:cc:
                    8e:2f:ee:15:fd:c1:dc:17:16:a7:d4:12:2a:b5:b7:
                    63:d3:1a:b9:d9:83:b6:99:36:a5:23:8a:39:c9:93:
                    5c:83:40:67:c5:0e:15:bb:0d:75:6f:2a:c0:37:57:
                    87:6b:41:40:d1:4a:0f:e3:a9:c1:40:a1:e6:26:1e:
                    d6:df:b9:22:34:82:12:7a:27:a1:73:69:36:0e:85:
                    ad:e7:f7:e3:91:23:67:9f:38:80:33:07:60:81:8f:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:09:32:95:79:64:EF:73:E3:66:78:DF:9E:83:AB:34:AB:51:FC
            X509v3 Authority Key Identifier:
                keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wI0JMpV5ZO9z42Z4356DqzSrUfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.232.0/22
                  185.104.216.0/22
                IPv6:
                  2a04:2e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:20:27:e4:30:96:51:82:81:1b:f8:0a:ae:4b:f5:a1:76:11:
         34:b5:a7:e7:83:e3:49:b8:5d:7a:0a:60:28:18:11:9a:c7:24:
         ed:d8:a7:42:ee:5c:89:0d:f1:d9:4e:2c:d4:7f:db:dd:6d:2e:
         5c:11:17:ff:a8:98:0a:dc:57:cd:4c:ab:50:56:f5:93:8d:ea:
         dc:61:ad:03:e6:ce:77:99:38:0e:74:9f:4a:ca:89:9b:82:3b:
         99:78:ca:e5:f8:70:c4:36:6b:6a:bb:94:58:1f:a0:79:40:f8:
         67:b1:1e:40:67:cd:df:5f:48:73:4e:5e:4b:97:fd:3c:9e:26:
         48:89:ea:fe:98:bf:1e:71:a6:7d:9d:3f:32:38:b9:63:b4:79:
         03:29:6f:7b:95:dc:f3:7e:75:5a:de:b3:1b:20:df:73:fe:0d:
         ce:34:75:15:4e:d9:31:63:f6:af:aa:ee:3c:27:7d:c2:96:da:
         7e:67:a8:97:79:2e:85:6d:41:24:c8:98:90:c5:46:ad:5f:93:
         d3:e7:19:b1:9a:7a:f3:3b:86:33:5e:21:f0:73:36:c9:d7:00:
         3f:86:81:41:d2:2b:e8:9c:cb:8a:05:00:95:66:7d:14:d5:c0:
         82:39:45:fa:6f:bc:a1:70:62:cc:67:bc:27:79:a8:26:63:38:
         55:34:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----