Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa
File:                     PkVGvVJaQdrEgbodQbK6G4GkGm0.roa (raw, json)
Hash identifier:          PTPFucjsh18vGTDF5zSnXKViK1O/6vbeJxTsW0uYeSs=
Subject key identifier:   3E:45:46:BD:52:5A:41:DA:C4:81:BA:1D:41:B2:BA:1B:81:A4:1A:6D
Certificate issuer:       /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial:       01857155660ED888DCE3FCDE2E0BB2A07DFF
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa
Signing time:             Mon 02 Jan 2023 07:15:00 +0000
ROA not before:           Mon 02 Jan 2023 07:15:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210250
IP address blocks:        194.1.147.0/24 maxlen: 24
                          2001:67c:51c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:66:0e:d8:88:dc:e3:fc:de:2e:0b:b2:a0:7d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
        Validity
            Not Before: Jan  2 07:15:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e4546bd525a41dac481ba1d41b2ba1b81a41a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:48:40:02:95:4e:3d:27:ce:7a:7a:1b:b9:
                    59:51:24:4f:bc:3b:e4:8a:15:e8:3a:34:78:f9:40:
                    7b:61:c7:30:24:f3:a9:8b:87:ff:22:57:e3:74:f5:
                    35:eb:69:0c:82:4d:17:86:bc:f3:f4:fa:07:bc:2d:
                    4c:a8:89:5d:8c:5b:80:9d:3e:7f:d3:1e:39:7d:9f:
                    52:c4:22:5e:44:1a:d5:b3:5d:19:57:e3:d1:52:83:
                    c6:a3:17:5f:c2:90:f6:b7:6f:33:6b:9c:7f:5a:1e:
                    c5:00:a5:cc:28:8c:40:a8:17:e9:bc:d1:4a:00:82:
                    44:7b:8e:82:a3:17:02:5c:dc:01:3a:76:ce:12:78:
                    d8:05:5f:26:6d:77:9f:be:a2:4f:28:21:78:b4:d6:
                    5e:95:f2:db:69:7c:53:36:d3:4e:78:45:36:18:be:
                    a3:8a:51:55:08:f1:61:ae:79:9b:4c:8b:dc:41:9a:
                    62:0f:9c:7b:45:2e:07:72:22:52:a8:a4:fd:97:ae:
                    f0:f1:83:27:a0:1a:4a:02:90:a2:41:2f:9f:d9:4c:
                    99:a5:6f:e6:8d:89:8d:c4:f4:43:97:1e:04:e3:cd:
                    46:58:46:fd:9d:e9:e9:e1:bc:43:9d:43:91:f8:7c:
                    69:1a:f1:09:52:fb:a5:06:2a:58:ab:71:b7:12:d2:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:45:46:BD:52:5A:41:DA:C4:81:BA:1D:41:B2:BA:1B:81:A4:1A:6D
            X509v3 Authority Key Identifier:
                keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/PkVGvVJaQdrEgbodQbK6G4GkGm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.147.0/24
                IPv6:
                  2001:67c:51c::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:54:37:fc:f6:a5:0d:a4:21:ad:77:8f:ae:29:58:88:d7:
         64:e7:31:b2:cb:7b:84:47:1e:53:83:31:61:e1:e9:81:d9:cc:
         0b:2b:5b:c7:ef:97:d9:e7:6c:09:3d:7e:05:bd:ec:2f:31:69:
         ff:bc:a0:1a:5a:03:0b:76:2a:be:fc:f7:2c:bd:52:2b:8d:23:
         e1:5f:96:ab:31:23:bd:ee:a3:c1:fe:15:88:db:91:6b:88:0c:
         ea:9b:13:57:8e:a0:d2:e7:ee:46:b3:c5:31:2b:44:c2:e6:ee:
         37:c5:ea:e5:09:9e:17:f4:a4:c1:ab:d1:41:d4:91:b6:7c:fc:
         c5:f3:fb:ae:6f:5f:6f:66:52:e8:8d:62:9c:9b:5b:84:3d:bc:
         fe:c7:e1:f2:8d:a7:e5:03:5b:f2:06:4e:ae:59:2d:6b:2b:12:
         ae:a4:cc:35:6f:bf:7f:17:bd:d3:33:99:c4:b3:d8:31:a5:bd:
         b1:80:bb:32:d3:cd:d6:6e:2a:cc:7a:72:4d:2c:4b:14:26:57:
         b0:9c:3c:d8:b5:f8:49:1d:ad:57:c8:12:3a:25:40:2a:bb:64:
         09:8a:6a:2c:4d:a8:77:5a:67:4c:ec:8e:24:4b:d6:b4:6e:36:
         84:76:25:5e:4f:53:fb:2f:f6:e4:79:27:e4:c6:5c:79:6c:6d:
         e5:0a:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----