Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/a7T_N2M8JGm8CCHHMzZj7P4ZvGA.roa
File:                     a7T_N2M8JGm8CCHHMzZj7P4ZvGA.roa (raw, json)
Hash identifier:          WzT0O0S9RsEBXAzfwizke1u8rpdMu5ZcfTCBdGob8lA=
Subject key identifier:   6B:B4:FF:37:63:3C:24:69:BC:08:21:C7:33:36:63:EC:FE:19:BC:60
Certificate issuer:       /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial:       01856CF872990E1DF16BF304A57D08A98FC3
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/a7T_N2M8JGm8CCHHMzZj7P4ZvGA.roa
Signing time:             Sun 01 Jan 2023 10:54:59 +0000
ROA not before:           Sun 01 Jan 2023 10:54:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211434
IP address blocks:        193.163.184.0/24 maxlen: 24
                          2a10:e540::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:f8:72:99:0e:1d:f1:6b:f3:04:a5:7d:08:a9:8f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
        Validity
            Not Before: Jan  1 10:54:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bb4ff37633c2469bc0821c7333663ecfe19bc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:51:1f:72:5b:d4:ae:0c:71:e6:3f:2e:3e:
                    ce:cf:ab:14:b4:53:67:63:cf:c6:61:3d:58:b9:6f:
                    cf:c5:7a:82:c1:fc:7c:5f:b4:8d:f7:ee:31:68:32:
                    22:62:29:53:f6:1d:24:37:63:8d:92:43:52:b7:7e:
                    7a:a9:71:da:79:6c:f1:8a:89:d7:7b:ee:bd:9f:be:
                    61:28:d8:b7:f1:17:f4:f6:23:81:5a:b0:ae:a5:84:
                    e9:6a:23:ce:9c:ee:6c:32:58:60:fa:86:ee:f1:77:
                    25:b9:c4:e4:36:9a:28:a8:e9:42:3a:c9:d5:c7:e8:
                    16:58:f2:e3:68:42:14:c4:09:38:d0:bd:61:b8:61:
                    89:d1:7b:ea:40:39:5e:d3:65:ea:7a:a2:cb:b2:37:
                    7f:7e:d2:fe:f5:9c:22:3f:8f:7d:69:7f:f8:05:f0:
                    aa:c2:71:17:f1:a7:18:1e:5d:f6:2b:1f:6d:bf:8e:
                    6d:a8:4c:f8:b8:e5:43:5f:38:55:a4:1f:e6:cc:00:
                    70:48:2c:5a:ab:94:c1:b7:31:db:7c:bf:00:fc:d1:
                    f3:f5:a5:95:ca:0e:c0:dd:bc:a8:10:a1:76:2c:58:
                    94:a8:c8:68:eb:cf:07:3f:4d:5e:cd:bc:12:ca:dc:
                    2c:0a:a3:42:cf:6c:88:fd:f9:ed:84:c3:c4:8e:f7:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:FF:37:63:3C:24:69:BC:08:21:C7:33:36:63:EC:FE:19:BC:60
            X509v3 Authority Key Identifier:
                keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/a7T_N2M8JGm8CCHHMzZj7P4ZvGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.184.0/24
                IPv6:
                  2a10:e540::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:38:c2:14:69:b4:b2:09:74:a8:41:18:ca:bb:23:e8:e5:eb:
         19:4c:46:db:79:90:7d:2a:2c:b4:64:e5:61:cd:08:49:b7:92:
         d0:69:e6:42:69:15:e4:d6:32:e6:63:cb:f7:8a:34:4c:56:06:
         dc:61:52:80:86:59:80:f4:46:63:c5:09:69:21:5f:10:7b:9a:
         43:8c:cd:01:ae:21:d6:86:6d:16:be:76:88:d1:3c:31:be:4b:
         0e:71:16:b6:7a:33:e7:79:b2:c4:83:b2:df:5a:3f:17:fa:d0:
         1f:df:01:61:72:ed:89:8a:c5:dc:3d:96:98:49:a5:f5:3c:eb:
         1c:92:c5:70:99:12:70:75:9c:6f:95:36:15:03:b7:a2:8f:66:
         c4:d3:d4:9c:b5:e1:0d:be:f9:e1:b4:3e:ba:55:c1:a4:b7:84:
         7d:3b:3d:06:a6:2a:42:af:2d:54:67:44:4a:c5:73:84:d9:22:
         04:52:4d:f1:dd:9c:e1:ed:ac:5e:d3:b1:90:9b:4c:a7:58:d6:
         5a:51:c2:dd:4c:fc:2d:70:27:aa:7a:ac:f7:c3:62:2c:71:5a:
         d3:08:6d:32:f3:e0:d8:67:19:d7:69:84:30:f7:4a:ae:0b:2d:
         2e:01:d2:c7:92:75:5f:b0:5f:fb:b6:2b:2a:cd:28:e6:cb:b6:
         25:bb:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----