Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa
File:                     f4wRVk-W4Tf9x4fcwildkeubst4.roa (raw, json)
Hash identifier:          VHOjZAksQR3Sd3CRRPfajhQvLhvVhpD5fGr4iAtQcMA=
Subject key identifier:   7F:8C:11:56:4F:96:E1:37:FD:C7:87:DC:C2:29:5D:91:EB:9B:B2:DE
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       01856DE64E63D2C9FDE7864FB1CCE9A5A5D3
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa
Signing time:             Sun 01 Jan 2023 15:14:47 +0000
ROA not before:           Sun 01 Jan 2023 15:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24582
IP address blocks:        185.64.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:e6:4e:63:d2:c9:fd:e7:86:4f:b1:cc:e9:a5:a5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Jan  1 15:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f8c11564f96e137fdc787dcc2295d91eb9bb2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f4:ca:75:6d:4a:17:61:0a:7d:af:5d:e5:46:
                    4e:b5:9e:c6:7a:19:88:05:94:33:4e:5b:55:6f:f5:
                    e8:94:18:21:8a:a3:da:af:2c:d2:74:46:a6:0d:83:
                    c7:b3:70:d4:c9:3e:53:12:31:9b:cd:69:49:bc:da:
                    f9:c3:97:10:35:42:80:50:0c:d9:ec:55:f3:64:da:
                    94:e7:77:9b:f5:2e:76:c9:84:2b:74:85:93:51:03:
                    70:2b:33:3e:7e:04:a8:ff:e7:0d:7a:4f:0b:18:17:
                    8f:b7:23:5f:2f:cd:e2:9e:1b:66:d5:5f:68:85:c8:
                    c2:40:22:ee:37:d2:1a:1c:81:00:4e:f6:d5:42:3a:
                    11:03:0e:a2:d1:c0:6b:33:98:12:b0:e5:bf:da:c0:
                    0f:0c:c3:8e:88:36:52:40:30:2d:50:66:04:ae:09:
                    4f:da:aa:df:2f:bb:53:3d:2d:ac:8d:82:d5:cf:f5:
                    01:da:23:bc:17:6c:95:7a:a8:06:66:68:1f:0f:82:
                    fc:00:72:61:30:1f:67:49:14:9e:05:5c:8d:ce:8f:
                    90:1f:14:f9:ff:63:11:be:bf:77:68:7d:4c:fe:87:
                    92:66:96:63:58:ed:bd:26:01:86:3c:3c:7a:d3:b9:
                    20:e0:39:05:5f:9e:99:51:3c:f9:cd:22:47:97:e9:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:11:56:4F:96:E1:37:FD:C7:87:DC:C2:29:5D:91:EB:9B:B2:DE
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.64.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:af:6f:fb:b3:04:20:34:b2:5a:16:73:b3:80:64:81:ae:f9:
         2b:3c:14:d5:ab:07:f3:6e:84:2a:a5:26:6e:c2:68:ed:85:fe:
         db:39:51:b2:d9:2c:22:d3:fc:07:55:55:ff:07:6f:1e:8d:eb:
         06:0a:8a:a8:6c:5e:7d:ec:74:f0:5d:f9:6b:63:ff:83:1e:e3:
         ec:0f:21:6a:f5:bc:8d:de:b9:4e:0b:2a:87:2c:7b:da:56:08:
         63:fb:4c:b6:b2:d9:03:ee:83:b4:6f:51:a5:e6:c0:f9:7b:13:
         32:dc:58:5f:7b:dd:8a:09:10:62:94:68:c9:7a:a1:14:74:bc:
         c7:59:2f:4a:6c:9d:48:a4:1c:05:99:a8:1a:a7:c6:83:ae:b0:
         0f:09:60:df:72:ff:b5:51:78:c2:06:02:db:0c:03:45:e3:f1:
         cf:81:7f:c3:e9:30:0e:a2:06:00:5d:9e:a9:44:ad:b4:b2:93:
         ac:8f:14:99:a9:93:61:08:e7:fb:9f:82:f0:0b:aa:51:79:19:
         7d:6e:97:b9:16:3e:e6:70:c8:d5:81:4a:65:bb:e8:91:a9:ba:
         74:28:55:6e:8c:3b:4f:9e:86:02:84:16:9f:33:11:c7:3d:77:
         67:31:65:40:a3:7d:8c:d9:84:8c:00:57:fc:9e:f3:58:48:e5:
         e5:6a:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----