Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/Vdr1opzzk0UTIyRRvQWCUFrUbrM.roa
File:                     Vdr1opzzk0UTIyRRvQWCUFrUbrM.roa (raw, json)
Hash identifier:          Bvnxi+DVZRo5Emfc4B3K5JwFHcxpgrNo5lgtXizovlc=
Subject key identifier:   55:DA:F5:A2:9C:F3:93:45:13:23:24:51:BD:05:82:50:5A:D4:6E:B3
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       0186BC3F2A35B2CEA3714DDB3A6EDB3845D3
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/Vdr1opzzk0UTIyRRvQWCUFrUbrM.roa
Signing time:             Tue 07 Mar 2023 13:25:01 +0000
ROA not before:           Tue 07 Mar 2023 13:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59441
IP address blocks:        185.113.9.0/24 maxlen: 24
                          2a12:9340::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bc:3f:2a:35:b2:ce:a3:71:4d:db:3a:6e:db:38:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Mar  7 13:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55daf5a29cf3934513232451bd0582505ad46eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:4c:b7:ac:d8:d5:4b:e2:82:e7:31:a0:57:
                    83:80:88:22:c2:cc:24:ce:27:f6:42:18:ca:48:e9:
                    e3:4e:80:bc:21:73:cc:48:74:0e:9f:33:42:ab:c3:
                    1f:96:ee:66:92:96:18:f3:21:7d:df:69:a0:76:4f:
                    48:e7:21:b3:af:90:48:3a:a3:47:84:e9:2e:fc:22:
                    68:42:d2:48:49:b4:ab:8d:7d:08:40:be:b0:db:2b:
                    2f:90:cf:c0:e6:d5:e1:8f:15:58:86:6b:c3:34:ff:
                    87:af:36:89:bc:54:6f:3f:9b:4d:6b:d1:e6:76:73:
                    23:85:02:0c:02:b7:7b:25:83:f0:08:e3:b3:67:96:
                    47:5e:58:8b:a2:73:37:7f:df:26:e8:2d:74:a7:fe:
                    7f:5e:56:b0:ce:d9:ff:0f:8c:ba:12:87:ea:7a:2f:
                    19:e9:01:31:83:be:ec:3f:23:8b:e3:6a:ed:e4:2b:
                    7a:b8:63:57:b8:f5:6f:34:bd:07:09:79:6b:c3:8e:
                    3e:76:e5:fd:c9:5a:2c:fc:68:24:23:83:04:ca:e1:
                    18:d8:3c:b8:37:fa:e8:3d:fb:f3:16:31:4a:cf:9a:
                    ff:22:74:f6:f9:bf:09:ef:b4:96:87:6c:fd:17:67:
                    e2:7d:f6:ea:c9:99:f3:b5:2b:1b:bd:a3:8b:00:35:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:F5:A2:9C:F3:93:45:13:23:24:51:BD:05:82:50:5A:D4:6E:B3
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/Vdr1opzzk0UTIyRRvQWCUFrUbrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.9.0/24
                IPv6:
                  2a12:9340::/29

    Signature Algorithm: sha256WithRSAEncryption
         bf:29:3d:59:58:8b:e6:47:90:49:c1:e6:f5:ef:36:e7:52:12:
         dd:33:8d:e4:ea:04:51:38:8a:00:23:59:b5:e1:9e:1b:7e:de:
         81:db:01:30:4f:cf:6d:66:d5:1e:c2:c6:4b:71:f5:dd:2d:0d:
         0e:5b:b9:d8:6a:2d:15:76:d2:1e:29:34:fe:0d:5c:79:5c:f9:
         70:be:57:93:1d:bb:49:43:05:98:9b:0f:f4:95:fd:a7:97:66:
         95:40:14:6c:75:c5:03:be:8b:b7:78:78:79:98:a8:92:91:a7:
         83:23:6e:0a:c4:bb:9c:5b:f2:eb:d2:91:50:8e:32:c8:fa:b6:
         3b:63:e3:f2:8d:3c:b2:e2:a7:67:b1:6f:ec:6d:7f:07:e4:57:
         68:08:f4:8b:99:b9:af:d8:81:61:9a:2c:65:7d:4d:d5:98:60:
         a2:0a:11:88:74:3c:7a:9b:46:62:80:4b:8a:d3:5a:93:af:5e:
         5f:ea:87:c5:39:c9:eb:63:3c:ac:7f:a1:a3:74:a1:54:72:a4:
         0d:60:13:9b:1f:29:7d:9b:54:f5:c1:44:21:82:08:f2:78:2f:
         c5:34:64:60:52:cb:b7:86:83:3a:bc:b2:42:4d:ad:5d:c5:ec:
         a6:84:47:5a:a0:f4:e1:81:4f:35:5d:90:c8:00:cc:4e:cc:a0:
         5d:a9:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----