Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/z4cirhF7_equVAVpynq1k0T6Da8.roa
File:                     z4cirhF7_equVAVpynq1k0T6Da8.roa (raw, json)
Hash identifier:          UP5R6xdEj1RNtM/ZYDpHDlcX91Cu5RQsbD9IGo1CJFA=
Subject key identifier:   CF:87:22:AE:11:7B:FD:EA:AE:54:05:69:CA:7A:B5:93:44:FA:0D:AF
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       01856D6638207FDC3FD365649C47C3F17592
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/z4cirhF7_equVAVpynq1k0T6Da8.roa
Signing time:             Sun 01 Jan 2023 12:54:53 +0000
ROA not before:           Sun 01 Jan 2023 12:54:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199627
IP address blocks:        185.9.20.0/24 maxlen: 24
                          2a03:42c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:38:20:7f:dc:3f:d3:65:64:9c:47:c3:f1:75:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jan  1 12:54:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf8722ae117bfdeaae540569ca7ab59344fa0daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:f1:b4:7c:96:90:3b:97:92:3f:98:0f:41:
                    5e:f0:58:57:6e:b7:f4:13:a8:6f:d6:a4:01:ac:13:
                    86:0c:f4:71:a0:12:82:6e:0a:da:fb:a4:f9:61:ac:
                    fe:6c:14:1c:a9:5f:42:60:1b:ca:09:86:7c:e1:4f:
                    98:c7:be:c4:88:06:d1:17:ce:7b:fd:02:4e:40:c6:
                    7c:06:9c:2b:03:4c:25:52:6c:f7:3e:5a:40:c1:88:
                    84:61:2e:69:dd:a6:a6:cc:8f:5b:b0:1f:44:c3:b6:
                    38:eb:58:df:f5:f7:b3:64:ee:f6:79:ac:10:80:e3:
                    a4:c3:f7:82:64:02:03:ce:cd:a8:87:a6:23:a0:a3:
                    89:84:12:ba:3a:5a:43:3a:24:25:88:53:a7:df:e8:
                    e0:b4:1b:c9:59:a6:98:98:bb:c3:83:ab:ff:11:a7:
                    18:69:a7:fa:55:4f:ca:9c:bd:3e:99:94:f8:6f:91:
                    f1:6c:68:9e:9a:c9:fe:9d:3b:87:97:19:29:6d:96:
                    8f:af:2b:76:14:70:8e:cd:44:51:91:7a:66:dc:d5:
                    c6:c0:74:79:36:bd:7b:1a:7d:2e:c8:64:e7:08:f2:
                    75:1e:2c:b9:c5:d4:72:fe:bf:45:1e:dc:ad:d7:16:
                    46:4e:7e:f1:51:ec:24:8c:56:86:a6:2d:8f:3c:2a:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:22:AE:11:7B:FD:EA:AE:54:05:69:CA:7A:B5:93:44:FA:0D:AF
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/z4cirhF7_equVAVpynq1k0T6Da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.20.0/24
                IPv6:
                  2a03:42c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:33:1b:88:23:ea:dd:9f:04:c3:4d:3d:c6:e6:d8:8e:c0:e7:
         1e:44:1e:f4:05:f1:26:5e:4a:47:cb:3d:09:23:3f:c3:75:d4:
         85:e4:7c:0b:d6:96:26:1e:23:b7:ba:a0:db:f0:69:39:ab:60:
         c1:6b:f9:e0:3b:92:4a:3a:fc:25:3a:29:a3:7e:ed:fb:b8:a4:
         ae:e2:7d:29:91:77:28:78:7a:98:7a:b5:02:75:2d:03:13:9a:
         44:ed:00:fc:7d:97:d3:b0:2c:81:68:14:a5:62:b4:26:72:2b:
         be:94:d6:b3:d8:27:02:91:b0:e0:f4:14:2c:b3:19:d1:98:61:
         5b:9a:7f:c3:58:cc:9f:eb:a9:db:b7:07:67:93:a8:dc:55:40:
         79:0f:3d:18:f8:bd:2e:51:19:00:04:4d:b1:3b:df:0a:ae:e8:
         db:5f:2e:7e:6d:4a:22:0b:50:2c:d7:60:48:9d:63:db:bd:32:
         47:0c:0c:fa:cd:9d:3f:da:04:92:f2:94:38:72:cd:28:d3:39:
         bf:b2:68:d5:df:72:4a:89:0d:b0:e2:86:66:4f:88:e9:23:29:
         db:21:0c:31:1f:45:68:14:6f:3f:c8:c7:3a:6c:81:98:d8:b5:
         9c:d6:85:57:f5:bb:c2:4b:08:64:61:a1:69:fd:4a:51:b5:4b:
         70:10:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----