Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/qUVyAGSGeUG-qXJ5Twk0cZTWah0.roa
File:                     qUVyAGSGeUG-qXJ5Twk0cZTWah0.roa (raw, json)
Hash identifier:          VK4QOEKHJ3oRkjhTvpfKLzut4fjxmpHGeTXm3o9bMfQ=
Subject key identifier:   A9:45:72:00:64:86:79:41:BE:A9:72:79:4F:09:34:71:94:D6:6A:1D
Certificate issuer:       /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial:       018572E8251362D6F4E603093C6A2CD544FC
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/qUVyAGSGeUG-qXJ5Twk0cZTWah0.roa
Signing time:             Mon 02 Jan 2023 14:34:54 +0000
ROA not before:           Mon 02 Jan 2023 14:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62035
IP address blocks:        185.193.244.0/22 maxlen: 24
                          2a0a:3cc0::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:25:13:62:d6:f4:e6:03:09:3c:6a:2c:d5:44:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
        Validity
            Not Before: Jan  2 14:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a945720064867941bea972794f09347194d66a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:72:5f:74:bd:94:04:4d:f0:f4:ad:b3:22:
                    99:61:f1:47:be:c6:fe:08:3f:2f:70:79:c8:98:7c:
                    b2:8f:24:2c:dc:b1:af:07:3c:dc:f0:c9:58:88:8b:
                    76:77:3d:52:63:e8:33:36:7d:eb:95:3d:b3:f3:3e:
                    31:ba:0b:f7:23:d6:b2:b1:32:86:ce:4c:67:c5:a8:
                    ff:e9:d7:a0:a8:c8:33:92:12:8e:9d:5d:f2:6c:55:
                    05:07:ba:33:25:7c:00:0f:a7:e3:7b:4e:b9:0d:b1:
                    cd:d7:0b:65:9b:1a:0a:df:88:02:64:35:2e:15:70:
                    4c:25:95:68:91:c9:5c:01:b5:19:08:4d:06:31:84:
                    a7:30:91:af:c1:b8:f3:a9:f8:a9:ba:38:72:8d:43:
                    15:2e:d6:5b:aa:d6:24:f7:ee:70:37:ff:13:98:e0:
                    fe:9c:66:98:16:de:d8:56:ce:e8:ee:89:8d:f1:32:
                    4d:d8:8c:93:88:85:5c:8f:fd:45:1c:20:6e:1f:b0:
                    38:cf:f4:02:fc:67:fd:79:aa:77:7a:0a:14:53:11:
                    95:34:50:53:15:54:fa:4b:61:99:8e:f5:aa:c9:be:
                    b1:bc:8e:7d:c4:52:fb:1c:fb:5c:c8:22:24:5c:d2:
                    86:ea:ab:96:23:73:ae:07:ad:5a:d3:f3:a3:56:cb:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:72:00:64:86:79:41:BE:A9:72:79:4F:09:34:71:94:D6:6A:1D
            X509v3 Authority Key Identifier:
                keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/qUVyAGSGeUG-qXJ5Twk0cZTWah0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.244.0/22
                IPv6:
                  2a0a:3cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:fe:31:db:f0:ce:ad:fa:dc:aa:f3:fb:0a:93:cc:2f:87:8c:
         9b:18:c8:4d:74:26:df:9b:7d:b9:5d:cb:dc:72:0c:9c:b0:52:
         e2:39:4d:f3:26:33:0d:1d:eb:39:a0:e9:2c:54:b6:32:6c:76:
         0f:0f:57:94:d7:78:b2:37:7e:1f:18:75:19:86:ee:42:8a:f4:
         ec:9c:28:6f:ba:e2:0b:36:ea:fb:36:a4:2c:17:da:63:ac:ab:
         10:a8:05:ad:75:30:2b:ce:33:4f:ca:01:75:bc:66:c3:fc:a4:
         9b:34:58:ec:93:b4:60:0c:e2:3a:2e:79:dc:9e:df:7f:7e:9b:
         31:c0:86:d5:e4:51:a1:62:c6:b6:bb:25:3c:0d:50:83:e4:bd:
         28:42:f4:e7:0a:9f:aa:60:e1:d7:e2:96:0c:c7:62:82:bd:39:
         ca:a8:ec:3d:cb:c1:59:02:a6:ad:bb:89:9b:8a:eb:84:08:de:
         34:65:85:cf:b0:d3:98:44:30:25:a4:c4:e7:cb:52:71:fb:70:
         d4:5e:7d:f4:a6:c3:2d:57:6b:a2:5f:0b:7b:29:3c:fb:4e:a3:
         af:ae:7d:9b:58:4e:1c:ab:40:20:a1:13:92:00:c3:9f:00:12:
         4f:ff:31:83:29:17:31:9a:4f:f0:ff:35:8a:eb:16:f3:34:45:
         49:eb:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----