Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/ysf66-_5aKY7G92IX07Tm9PJOeM.roa
File:                     ysf66-_5aKY7G92IX07Tm9PJOeM.roa (raw, json)
Hash identifier:          BlJcPxJr1ouqI5rNT/GlV9SoKWlFIdIcM7u7sFrylSc=
Subject key identifier:   CA:C7:FA:EB:EF:F9:68:A6:3B:1B:DD:88:5F:4E:D3:9B:D3:C9:39:E3
Certificate issuer:       /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial:       01856FCB9D965D20CC15E6D34E8D88EC373A
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/ysf66-_5aKY7G92IX07Tm9PJOeM.roa
Signing time:             Mon 02 Jan 2023 00:04:53 +0000
ROA not before:           Mon 02 Jan 2023 00:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207729
IP address blocks:        185.15.139.0/24 maxlen: 24
                          2a0f:cfc0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:9d:96:5d:20:cc:15:e6:d3:4e:8d:88:ec:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
        Validity
            Not Before: Jan  2 00:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cac7faebeff968a63b1bdd885f4ed39bd3c939e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:08:a7:2d:40:6f:c5:09:fe:25:ed:68:7a:
                    53:40:42:a7:e1:ed:0f:f5:c5:3e:5b:89:61:92:72:
                    72:7b:c4:5b:ea:30:7b:84:16:b0:ae:dc:a7:81:f7:
                    3b:b4:5e:c3:e6:f8:c7:77:9c:6a:6b:5b:ac:02:84:
                    8e:7b:90:1d:8c:d8:a3:31:fe:c5:cb:37:20:6d:7a:
                    4b:da:ca:79:a2:bb:66:90:71:f0:9a:8f:76:a2:1b:
                    3e:0e:e6:d9:2f:4c:3c:5e:04:18:40:04:0b:42:a1:
                    7f:b7:56:d8:1b:e7:04:c4:65:75:e0:1b:bc:c7:14:
                    8b:dc:51:da:46:70:5f:24:c1:7f:3c:30:3e:5a:91:
                    08:8e:f1:52:2a:8d:67:1f:64:c3:36:97:a7:8b:b6:
                    b4:af:ed:7f:29:41:01:46:51:87:e9:fb:e1:30:a4:
                    14:62:ea:5a:53:d0:c6:09:f3:6d:87:91:50:3d:83:
                    67:19:72:0e:9b:35:1b:87:2f:69:a2:d4:8a:b6:6a:
                    04:ed:c8:cb:77:34:7c:2a:3f:88:60:d1:2e:dc:54:
                    5b:f3:dc:59:20:21:d2:05:3a:e7:33:57:51:a0:45:
                    1b:0e:39:04:31:29:62:07:16:8e:ee:f7:fe:a2:c7:
                    77:5e:b4:f0:de:a8:ca:e8:18:32:5a:31:91:9e:08:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:FA:EB:EF:F9:68:A6:3B:1B:DD:88:5F:4E:D3:9B:D3:C9:39:E3
            X509v3 Authority Key Identifier:
                keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/ysf66-_5aKY7G92IX07Tm9PJOeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.139.0/24
                IPv6:
                  2a0f:cfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:27:ca:3c:38:6b:04:0a:fb:ed:d2:fc:2d:0e:51:84:39:3c:
         83:18:7c:47:68:0e:52:53:3c:a2:ad:de:19:de:ad:4a:a1:dc:
         30:fe:36:66:8a:43:69:db:4b:70:81:d7:26:4c:87:45:fe:d1:
         90:46:91:1c:25:eb:ef:34:15:42:8f:8a:df:32:51:16:2b:09:
         07:4c:46:60:66:67:0d:2e:10:d1:b2:1f:ff:8d:d4:68:93:31:
         d6:ac:fe:41:2d:a8:2b:56:77:07:16:65:df:b5:32:4e:b1:d3:
         64:f5:a6:1e:9f:2f:71:8f:bf:3c:8e:38:e0:d3:d6:05:4d:fe:
         8d:1f:21:ce:16:a1:c1:cc:2e:28:68:88:75:73:ac:a4:4f:68:
         ac:3d:0f:ee:f8:1c:a8:d5:3f:0a:f9:06:c3:15:df:aa:a9:46:
         1e:13:ab:53:d4:37:59:43:f2:03:74:20:d4:74:80:08:db:d3:
         c9:c0:e1:cf:13:e3:61:45:eb:8a:b9:dc:9c:94:61:ac:30:11:
         74:fd:95:fd:7a:fa:da:82:57:76:1d:95:a3:f4:b0:e0:aa:00:
         62:49:b1:de:94:13:42:97:b8:b4:89:f6:10:26:b9:5e:49:61:
         af:74:0d:b7:63:9f:7c:6d:7a:4c:ba:8a:c8:98:15:d2:ba:6d:
         7d:ad:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----