Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/sAsw7E6rUPQ4MvT7zk_E4aVqpBY.roa
File:                     sAsw7E6rUPQ4MvT7zk_E4aVqpBY.roa (raw, json)
Hash identifier:          Cp8wvydhM30YyHi3l5jI05yupoHl2Pk6TIqYAE5zSN8=
Subject key identifier:   B0:0B:30:EC:4E:AB:50:F4:38:32:F4:FB:CE:4F:C4:E1:A5:6A:A4:16
Certificate issuer:       /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial:       01857315E2A86052CBF8B3DAB856548AB339
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/sAsw7E6rUPQ4MvT7zk_E4aVqpBY.roa
Signing time:             Mon 02 Jan 2023 15:24:52 +0000
ROA not before:           Mon 02 Jan 2023 15:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24749
IP address blocks:        185.70.148.0/22 maxlen: 22
                          2a03:35a0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:e2:a8:60:52:cb:f8:b3:da:b8:56:54:8a:b3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
        Validity
            Not Before: Jan  2 15:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b00b30ec4eab50f43832f4fbce4fc4e1a56aa416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:cd:10:83:26:5d:33:4f:e1:f1:2a:3e:ed:
                    97:5c:f3:a2:10:8a:29:d9:01:a1:6f:14:cf:df:ec:
                    d8:59:e7:74:a4:f5:ce:60:d4:c5:b3:bb:e5:65:93:
                    82:0a:7d:3e:8d:0e:a8:73:73:34:40:10:fd:f3:c8:
                    97:b2:f7:35:ff:c6:09:9c:be:dd:3d:fe:17:97:20:
                    ae:03:8a:0b:49:78:f7:88:b7:9b:0c:d1:75:2f:37:
                    05:87:b2:c1:e0:92:eb:44:37:d5:67:37:8d:87:0f:
                    31:1c:8e:54:84:85:55:90:0b:38:3a:f6:fe:e7:33:
                    57:5a:93:ab:e8:c8:4d:a5:19:ac:92:1e:78:0f:50:
                    5e:57:10:ca:5b:dc:7d:c7:91:52:be:27:df:2e:a9:
                    c9:58:83:d4:b3:f8:c9:82:8f:2d:1d:23:0d:99:a1:
                    03:5f:b5:b3:e6:18:d0:91:cc:4a:64:6a:fa:86:c4:
                    a7:47:5d:45:6c:2a:e3:e7:52:53:f2:2b:81:d4:51:
                    83:25:13:76:6b:32:70:7e:c8:ce:a5:90:ac:84:b9:
                    09:e4:7d:62:69:6c:33:94:37:4c:42:b4:d7:9c:49:
                    4e:9d:91:9d:ee:f3:9a:bb:44:7d:e9:30:d0:7f:cc:
                    20:ce:f3:03:fe:7e:54:da:d3:51:03:c3:f7:25:5b:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0B:30:EC:4E:AB:50:F4:38:32:F4:FB:CE:4F:C4:E1:A5:6A:A4:16
            X509v3 Authority Key Identifier:
                keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/sAsw7E6rUPQ4MvT7zk_E4aVqpBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.70.148.0/22
                IPv6:
                  2a03:35a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:27:e0:14:23:e0:30:63:02:1e:dc:31:31:94:b3:36:ec:01:
         53:fa:4c:d0:de:00:2b:eb:0e:40:50:bc:d3:68:84:f5:f7:18:
         73:11:41:0e:fa:be:7f:40:e7:eb:56:8d:b8:29:f9:e0:bc:5c:
         6b:31:08:d6:31:af:8d:33:38:29:ce:7d:5e:02:f9:8a:b3:69:
         52:0c:55:87:72:74:02:86:d8:34:57:56:ee:3e:2c:0e:5a:4f:
         58:6f:29:2b:70:41:49:cb:f5:a0:7c:de:09:37:4e:09:af:97:
         3d:39:a2:49:ca:d2:44:aa:6a:08:0e:9d:0e:ea:68:17:01:e0:
         e1:05:01:db:ea:db:00:f2:91:ea:43:ff:87:04:08:82:c9:2f:
         0d:29:1e:4d:fe:3d:48:ee:67:4c:1a:8d:d3:37:ce:37:ee:a0:
         64:75:a9:7d:fe:c6:9b:28:2f:de:e7:4c:da:13:f6:bc:01:47:
         ee:ef:c8:24:51:ff:d8:23:74:a8:91:72:9a:28:94:a3:3d:9d:
         ae:98:3c:98:22:2b:02:b9:a0:4a:82:67:75:db:16:eb:41:e7:
         91:86:9f:6e:76:1e:76:b2:6e:90:40:12:cb:35:a2:b1:3e:fc:
         76:17:3e:72:af:fc:54:79:26:f6:8b:8e:07:1c:b6:12:ab:27:
         39:1a:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----