Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/fGG7a4vPW36QPIgRtnhK0XIdJPc.roa
File:                     fGG7a4vPW36QPIgRtnhK0XIdJPc.roa (raw, json)
Hash identifier:          bCHS+Xg5d52RqryqN2T19qSkK6+nmy++lMuMX3tqXYg=
Subject key identifier:   7C:61:BB:6B:8B:CF:5B:7E:90:3C:88:11:B6:78:4A:D1:72:1D:24:F7
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       0185BAD0C2FC570F04714B201E7446196A04
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/fGG7a4vPW36QPIgRtnhK0XIdJPc.roa
Signing time:             Mon 16 Jan 2023 13:42:01 +0000
ROA not before:           Mon 16 Jan 2023 13:42:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198947
IP address blocks:        185.22.180.0/22 maxlen: 22
                          139.45.248.0/21 maxlen: 21
                          2a00:65e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ba:d0:c2:fc:57:0f:04:71:4b:20:1e:74:46:19:6a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jan 16 13:42:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c61bb6b8bcf5b7e903c8811b6784ad1721d24f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:d3:3a:ac:b8:52:79:3b:92:bd:d1:2a:a3:
                    50:04:ca:2f:17:0a:1a:8f:a8:36:1c:c8:0a:91:1c:
                    04:cb:c6:57:a1:6f:d1:65:05:4e:d0:c9:a2:9c:ac:
                    22:58:d8:76:35:60:27:d4:a7:7f:4c:6f:47:b1:fa:
                    0f:17:a1:33:93:86:9f:37:6a:01:bb:b4:8c:81:c4:
                    67:9c:74:b5:52:55:74:c1:7d:cf:dd:5f:de:d6:17:
                    97:0a:9a:b5:c6:2b:26:f2:c2:33:54:81:b9:e4:68:
                    bf:68:ef:cb:58:d6:7c:e8:49:ca:72:03:b0:25:bd:
                    2a:71:56:70:9b:64:40:19:04:c6:cf:cc:2b:64:05:
                    34:d4:e9:50:7d:9e:35:3b:0e:a3:05:7e:01:fd:22:
                    5e:bf:db:f0:f2:e3:db:98:69:3d:c6:09:6e:e1:bd:
                    84:76:4b:bd:a4:58:4f:7f:d7:5b:5f:8b:85:bd:94:
                    c8:0c:69:b4:da:87:7d:26:89:3d:f5:50:ca:3c:e9:
                    94:9c:55:a7:93:80:1e:37:70:e8:73:ce:8a:8c:09:
                    77:d1:26:e7:ab:ce:51:d5:23:a7:ce:da:3c:79:9b:
                    a3:60:05:ae:7e:82:b1:8a:5d:0d:98:41:e0:9f:27:
                    87:1e:33:38:a8:53:93:94:a7:48:09:f1:0b:7c:19:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:61:BB:6B:8B:CF:5B:7E:90:3C:88:11:B6:78:4A:D1:72:1D:24:F7
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/fGG7a4vPW36QPIgRtnhK0XIdJPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.45.248.0/21
                  185.22.180.0/22
                IPv6:
                  2a00:65e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:c7:ea:2f:fa:cb:dd:8a:64:cd:e6:fb:da:d8:f2:e0:5c:
         70:77:92:75:4c:25:82:51:6a:46:50:b9:4e:a1:f1:0c:d7:72:
         b0:93:46:17:8c:b8:89:41:db:a1:74:1d:fe:f7:6f:9b:bf:79:
         d0:61:bc:6d:4f:3b:c6:3c:35:d0:ef:49:ae:31:f9:c2:88:48:
         b7:6a:07:2b:ed:3d:05:89:05:54:25:71:49:aa:21:3f:65:ee:
         64:bd:41:c7:18:75:c2:8d:ce:e9:01:e0:80:c9:dd:6d:6b:e1:
         21:7e:8c:cb:b4:fe:07:33:18:13:12:8a:f3:0a:bf:21:7c:80:
         57:85:45:9b:e4:b8:df:b4:a1:af:3a:6f:e7:dd:d3:9d:0c:86:
         42:71:e7:71:47:cd:20:9d:7c:ef:6c:81:7a:cf:ba:aa:c8:bc:
         94:b3:75:19:91:c5:17:16:9f:8e:e2:cf:86:20:ca:7c:dc:86:
         3c:ab:82:17:2d:30:b4:cd:e7:20:34:bd:b6:22:d5:42:63:ab:
         91:4a:69:6e:71:64:4c:7f:7a:6b:b7:00:71:5e:68:0b:ee:0d:
         e9:58:86:c3:88:a3:50:79:16:c1:e9:01:f1:1c:a1:2e:17:b3:
         32:8e:28:ea:2e:e3:4f:be:d4:c9:89:48:71:65:21:36:62:c8:
         73:74:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----