Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hcjicSPKPe6FPd8asOHlTAX_X-0.roa
File:                     hcjicSPKPe6FPd8asOHlTAX_X-0.roa (raw, json)
Hash identifier:          zY8i45vd4hM+DN98Es49WU+IZ9LM/T07D/nmqPuFTg8=
Subject key identifier:   85:C8:E2:71:23:CA:3D:EE:85:3D:DF:1A:B0:E1:E5:4C:05:FF:5F:ED
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01856B532654B534283D754DE09562856411
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hcjicSPKPe6FPd8asOHlTAX_X-0.roa
Signing time:             Sun 01 Jan 2023 03:14:49 +0000
ROA not before:           Sun 01 Jan 2023 03:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        87.246.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:53:26:54:b5:34:28:3d:75:4d:e0:95:62:85:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan  1 03:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=85c8e27123ca3dee853ddf1ab0e1e54c05ff5fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:f4:a2:e7:aa:b0:78:30:8a:83:da:97:71:
                    c2:20:9b:a5:de:9a:b2:25:78:27:a3:62:9b:12:42:
                    50:36:43:e5:38:ec:8e:80:1b:38:c6:54:82:1e:ba:
                    f5:70:8a:0b:55:c9:38:11:3d:25:47:4b:df:db:85:
                    35:2e:6f:35:9d:db:45:8d:73:07:7c:00:13:69:63:
                    f8:a9:a1:04:9a:4c:9a:32:14:43:73:30:f6:1f:2f:
                    64:3b:f5:c6:37:da:29:4f:14:a1:b1:4c:c5:fc:7b:
                    64:a5:92:cc:81:23:7a:f5:94:31:8c:05:35:3a:c6:
                    27:88:5b:7d:20:9d:02:da:93:4f:3f:6c:a8:ed:e4:
                    84:1b:07:ee:6d:da:47:31:01:f0:b1:cf:e8:d6:fc:
                    3a:c0:8b:22:64:ca:56:bf:c6:3c:a7:44:f7:67:13:
                    65:7c:44:76:ab:d1:ad:83:fc:3f:cf:11:9a:18:d9:
                    d6:c4:2f:2e:f9:7c:f6:7a:98:80:57:f0:8a:b3:7f:
                    ca:52:26:49:7d:19:0d:9e:dd:15:4b:97:03:d7:f7:
                    15:3b:ca:0d:27:20:17:f4:48:e4:12:96:76:83:d3:
                    ca:06:e3:0b:cd:63:e7:f2:dc:29:88:89:95:da:8a:
                    e3:6e:73:8a:62:2c:e8:8e:ef:07:8c:97:05:d5:42:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:E2:71:23:CA:3D:EE:85:3D:DF:1A:B0:E1:E5:4C:05:FF:5F:ED
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/hcjicSPKPe6FPd8asOHlTAX_X-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:84:df:06:96:f1:c7:dd:da:7d:34:f9:f8:fc:0d:ed:b4:19:
         2c:b1:1d:49:48:a6:ee:1e:e5:40:0a:56:27:b0:2f:e4:93:03:
         61:e5:05:55:76:62:9b:4c:76:85:14:bb:ad:62:fb:6d:ca:b4:
         5e:ea:f6:ab:cc:69:51:c7:07:4e:02:91:6c:59:d2:8b:5d:ca:
         2e:60:d1:33:ca:e1:22:b8:ba:f2:53:69:e7:70:27:ba:f9:98:
         6f:f2:fb:3a:ba:f8:f3:eb:02:b0:da:6d:9a:f4:2d:25:48:13:
         59:36:82:b0:a2:41:b7:c1:8a:b6:b1:21:7c:f2:05:14:b6:8a:
         3b:fb:77:db:93:2f:85:10:44:91:86:46:b3:7a:70:10:b1:a4:
         a2:7d:27:78:af:34:c4:8c:34:a8:66:6c:07:67:7f:c9:97:18:
         63:5f:5e:d0:3f:fd:5c:65:2b:24:34:6a:e3:92:3a:fc:11:df:
         e2:f8:0d:22:d5:47:74:ad:17:7b:da:6f:23:95:c2:df:2e:ae:
         62:27:e1:e6:ed:d8:ec:36:d4:d7:e2:d3:1f:ea:d1:30:86:b7:
         df:d3:63:63:28:76:84:50:13:67:34:9b:fe:02:5a:49:4a:36:
         4f:c2:c4:0c:76:79:14:49:02:2c:b0:3b:f9:b0:d0:a9:db:c7:
         93:09:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----