Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/uNd9BZi6tbA_tS26sXzqZtBQGOs.roa
File:                     uNd9BZi6tbA_tS26sXzqZtBQGOs.roa (raw, json)
Hash identifier:          WLld+cht1mPyT7tv+YBDJyktO19yNTKNE3jvXmx/VvA=
Subject key identifier:   B8:D7:7D:05:98:BA:B5:B0:3F:B5:2D:BA:B1:7C:EA:66:D0:50:18:EB
Certificate issuer:       /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial:       01856D7897AFA36F1921F00AE07D800D00C0
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/uNd9BZi6tbA_tS26sXzqZtBQGOs.roa
Signing time:             Sun 01 Jan 2023 13:14:57 +0000
ROA not before:           Sun 01 Jan 2023 13:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9112
IP address blocks:        62.3.160.0/19 maxlen: 19
                          2001:808::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:97:af:a3:6f:19:21:f0:0a:e0:7d:80:0d:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
        Validity
            Not Before: Jan  1 13:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8d77d0598bab5b03fb52dbab17cea66d05018eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:05:ae:de:82:59:8b:6b:07:4f:0c:e5:4c:
                    92:c7:d6:6b:9f:57:01:00:c8:93:b8:6b:20:99:2f:
                    a7:cc:9b:a8:76:19:60:10:80:e2:8b:52:64:1b:87:
                    9d:94:1a:b1:af:ad:ee:be:d8:4e:8a:2b:6e:d3:88:
                    de:e1:7e:17:e5:2b:07:d6:70:dc:be:61:fd:70:45:
                    f3:cd:10:ed:34:4e:42:a2:b6:0f:20:cc:5e:c9:b4:
                    b2:97:60:2e:94:0d:99:e2:d4:2a:09:f2:0f:07:f2:
                    7b:36:11:03:a2:b9:82:e6:6c:d7:68:b3:40:8f:60:
                    5b:ec:58:be:90:94:d5:76:fe:3e:36:6d:3d:26:46:
                    22:ea:02:31:4f:94:77:67:91:1f:18:cb:d9:ec:85:
                    a6:19:8e:09:38:b1:c4:66:7f:05:30:61:75:5e:0e:
                    1d:1f:32:87:1f:9b:0c:23:8a:4e:a8:83:2d:d8:48:
                    b2:8e:4e:f4:11:bd:c2:aa:1a:2d:8f:f4:bd:ec:9a:
                    49:f4:0f:98:dd:30:35:74:31:19:00:cc:49:fd:67:
                    63:52:d0:0c:f9:ad:d8:ba:e6:e5:43:41:55:d1:80:
                    4a:21:13:38:f4:57:34:15:71:5b:54:14:d0:54:1f:
                    e3:ef:de:90:df:94:16:68:a5:59:26:56:79:92:c9:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:7D:05:98:BA:B5:B0:3F:B5:2D:BA:B1:7C:EA:66:D0:50:18:EB
            X509v3 Authority Key Identifier:
                keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/uNd9BZi6tbA_tS26sXzqZtBQGOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.160.0/19
                IPv6:
                  2001:808::/35

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:e4:97:8e:4d:d6:93:d8:25:dd:65:d5:e4:7a:6e:ed:eb:
         bc:b3:98:5f:00:f7:89:96:b0:bc:ca:85:b9:eb:6c:37:ee:8c:
         15:b6:ff:a0:b1:06:8b:0b:90:47:64:c9:9c:ed:b3:40:db:94:
         df:07:e0:f4:8c:2d:33:ea:3e:86:ef:61:df:e5:dd:ef:e5:6e:
         8f:6c:65:33:28:17:40:10:45:32:dc:20:91:05:50:15:2c:e3:
         f4:30:5d:16:f3:57:01:7a:67:82:b7:03:c5:91:08:0d:71:9b:
         f9:77:9a:fe:a6:34:51:d2:a3:ff:ab:01:3a:25:d2:a0:5a:6b:
         08:2f:e8:ef:72:ea:ac:30:eb:28:99:b9:46:aa:b3:26:e2:28:
         9e:f9:23:ce:1e:4b:4d:5e:79:6f:61:21:18:6d:b6:c6:7c:6a:
         5f:32:6d:96:b6:55:bd:59:08:71:e5:bc:8c:88:97:b4:8c:53:
         a9:65:42:ac:61:e7:b7:2e:27:9b:48:48:81:69:fb:40:9b:96:
         18:0a:65:7f:14:05:d2:be:51:68:a7:c2:51:a6:28:77:6d:08:
         a2:0a:22:b2:21:55:ec:ff:15:cc:f8:af:0a:fe:28:ea:ef:0e:
         3e:a5:62:60:0f:94:7c:e0:34:71:15:f3:00:a9:b3:1d:ff:17:
         3c:5d:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----