Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/y9ly0nnerpJaQWXCCz2iwt587EA.roa
File:                     y9ly0nnerpJaQWXCCz2iwt587EA.roa (raw, json)
Hash identifier:          eWn3GOL/I4mTv3jqIF5f7CK5u3A+sGM1tL5I8XCNe0c=
Subject key identifier:   CB:D9:72:D2:79:DE:AE:92:5A:41:65:C2:0B:3D:A2:C2:DE:7C:EC:40
Certificate issuer:       /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial:       018C5361159BD4EB4F575EEBF97C8B2DC717
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/y9ly0nnerpJaQWXCCz2iwt587EA.roa
Signing time:             Sun 10 Dec 2023 10:58:40 +0000
ROA not before:           Sun 10 Dec 2023 10:58:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61062
IP address blocks:        193.135.156.0/24 maxlen: 24
                          2a0d:cb80::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:53:61:15:9b:d4:eb:4f:57:5e:eb:f9:7c:8b:2d:c7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
        Validity
            Not Before: Dec 10 10:58:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbd972d279deae925a4165c20b3da2c2de7cec40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:c6:01:d3:5e:81:21:25:d8:b1:d1:7b:25:
                    95:00:81:e6:77:81:82:c4:a9:d7:72:c8:96:80:9f:
                    24:18:26:48:c6:ce:73:d2:41:dd:34:ad:3d:b5:6e:
                    c7:9c:73:0b:aa:d7:fe:bc:76:f3:26:3c:cb:2d:85:
                    e0:15:59:51:6c:dc:67:fb:f1:a2:1d:87:7f:c8:18:
                    5a:ac:c7:99:48:0a:cb:46:bb:c6:35:d0:61:ea:a4:
                    5a:4c:09:61:2b:51:5f:96:f2:0c:8f:ea:40:8c:3c:
                    70:8a:16:28:8d:d8:9f:54:9a:48:87:53:a2:f1:67:
                    cd:a0:2a:1c:6c:fe:b4:db:06:93:01:bf:b3:90:45:
                    07:07:0f:f4:08:ba:71:87:2a:ca:58:b0:44:26:63:
                    73:2d:31:61:95:33:cf:82:f0:6d:1c:10:9e:c7:54:
                    47:6d:c0:b2:30:04:7d:6d:8c:f2:ed:6d:46:f0:8d:
                    5b:5b:11:70:9c:f9:63:9f:04:cc:49:5b:41:52:ca:
                    e2:ba:cc:74:88:1f:44:74:48:8f:fb:28:e3:8f:4b:
                    17:94:d2:69:77:85:0d:81:d4:b1:2c:a0:23:5b:d5:
                    27:ac:f7:31:47:e0:ca:7c:ee:71:ca:73:c0:41:40:
                    54:02:1d:4f:2f:b6:8a:3a:da:13:94:75:31:1a:e1:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:72:D2:79:DE:AE:92:5A:41:65:C2:0B:3D:A2:C2:DE:7C:EC:40
            X509v3 Authority Key Identifier:
                keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/y9ly0nnerpJaQWXCCz2iwt587EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.156.0/24
                IPv6:
                  2a0d:cb80::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:38:92:ff:15:2d:b8:ce:bb:c6:a8:2d:95:89:26:7c:e8:
         bb:0f:38:63:eb:47:20:d1:1d:29:b5:87:b2:80:35:9c:0b:98:
         76:c2:83:f3:c0:91:a3:59:2b:49:70:39:af:93:e6:34:ea:69:
         e3:88:05:5d:3e:d5:65:1a:03:af:a4:57:18:b5:36:23:02:75:
         0e:21:95:7f:24:92:4a:29:a6:88:f8:19:65:27:d7:c5:69:78:
         5e:60:bc:96:55:8a:98:83:3d:21:56:b9:89:cf:72:ab:9a:f5:
         40:4e:2e:9b:cd:d7:be:ad:68:ee:ef:83:59:33:6f:67:c7:fa:
         0b:b3:a6:f8:2e:ac:f5:aa:56:48:2e:e8:9d:77:14:55:ff:9c:
         bb:34:b4:cc:dd:ef:d8:fd:54:6e:cf:c4:73:17:77:4e:57:d4:
         0e:a4:af:80:d1:38:7f:e7:58:70:f8:fa:41:e9:f3:f1:41:f9:
         a6:24:fb:e3:61:42:ae:f5:66:46:c8:0a:a2:80:86:a9:6b:63:
         7f:98:97:46:3f:dc:49:57:74:0e:dd:89:5a:a0:12:92:ba:f5:
         d3:02:3f:7a:ae:6e:cc:f5:f7:4c:d8:61:68:49:97:14:f7:63:
         e6:5d:15:78:6a:b7:02:36:64:fe:b3:77:d7:14:28:3c:24:2b:
         cd:f3:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----