Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/ehAbyOqiUV9tjzRIgeIx4Mcj_xc.roa
File:                     ehAbyOqiUV9tjzRIgeIx4Mcj_xc.roa (raw, json)
Hash identifier:          +V09XC8L25juAAkS5+++eOX5Hzf5ckJfxkZD8RSMSdA=
Subject key identifier:   7A:10:1B:C8:EA:A2:51:5F:6D:8F:34:48:81:E2:31:E0:C7:23:FF:17
Certificate issuer:       /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial:       0185BEFBA0FA6771BA8FE867FF30B4B93D60
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/ehAbyOqiUV9tjzRIgeIx4Mcj_xc.roa
Signing time:             Tue 17 Jan 2023 09:07:19 +0000
ROA not before:           Tue 17 Jan 2023 09:07:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15763
IP address blocks:        149.232.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:be:fb:a0:fa:67:71:ba:8f:e8:67:ff:30:b4:b9:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
        Validity
            Not Before: Jan 17 09:07:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a101bc8eaa2515f6d8f344881e231e0c723ff17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:1f:52:7c:e7:12:39:17:59:69:4d:ee:6c:
                    21:a4:bf:13:61:6c:1a:ad:95:94:15:54:34:87:fe:
                    d2:21:3d:9c:2a:25:89:39:f5:5f:52:bf:95:91:62:
                    8c:32:d4:f4:3e:36:c4:3f:8e:6b:f7:7e:41:66:54:
                    52:8a:cd:20:b0:c6:06:05:50:83:73:29:c1:4c:97:
                    d0:8b:9d:b5:96:cc:19:1c:df:8a:04:69:23:7f:33:
                    aa:86:a2:7f:0e:8e:4a:76:d2:fe:05:11:29:9d:90:
                    5d:d6:d9:38:ce:7b:a4:b1:5c:aa:26:68:5d:3e:77:
                    48:b8:e8:17:c6:7d:f6:d8:68:f6:49:52:d2:51:b6:
                    3e:41:fa:55:b8:13:5b:6f:74:9a:27:c7:ea:4c:92:
                    b2:3c:53:1a:f2:be:51:21:17:16:0a:7a:6b:90:2d:
                    07:b9:1e:c7:50:a6:f5:d6:fa:2e:5e:68:e5:72:f8:
                    ec:83:49:c5:4b:d6:05:18:22:ad:73:fb:03:b7:05:
                    5c:35:49:ce:f3:02:46:40:17:79:7d:2f:69:fc:76:
                    9b:7a:e1:39:64:80:b5:07:19:bd:2f:65:12:6b:e1:
                    c1:68:21:ae:0a:65:b7:4d:44:1c:8b:b3:10:31:0b:
                    63:96:17:d0:ac:e6:fe:7a:0a:f0:16:6c:d0:a7:f6:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:1B:C8:EA:A2:51:5F:6D:8F:34:48:81:E2:31:E0:C7:23:FF:17
            X509v3 Authority Key Identifier:
                keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/ehAbyOqiUV9tjzRIgeIx4Mcj_xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.232.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:34:f0:8c:f2:b3:b8:d6:d9:b5:6f:81:ed:cd:69:7d:6f:9e:
         59:be:69:5e:2f:61:41:00:3c:46:b5:b2:02:1b:a1:7e:5d:4c:
         90:bd:83:66:76:fa:67:0f:cb:64:5d:41:d3:1b:e1:d8:88:aa:
         ec:a8:34:47:4a:ad:09:32:f4:69:46:08:e0:af:f1:b0:e8:59:
         29:61:2d:52:b5:40:db:7a:b8:1b:85:eb:29:92:27:b2:0f:31:
         e5:ee:ef:e6:a9:ac:45:3c:1e:78:5a:99:da:b1:87:86:de:d1:
         c7:bd:ca:da:5a:27:a9:83:e2:67:d4:b4:7d:54:69:b4:0c:52:
         bd:74:6e:a7:2d:02:19:b9:25:a6:41:b3:66:12:32:3c:ce:ba:
         09:a0:0b:94:68:1c:bf:9d:32:5e:47:86:d7:fd:f3:f2:5e:37:
         d3:4c:27:f4:46:8d:d7:87:10:e9:d7:23:7f:96:e2:e8:9f:8f:
         51:4d:43:85:9e:45:84:9a:0f:4e:33:fc:7d:d1:68:e2:57:23:
         f2:ce:ed:42:f9:c3:0a:ae:45:70:f2:18:a9:91:ab:6c:32:fe:
         1a:57:99:a7:e0:53:74:2f:ef:e7:e6:15:ca:e3:87:64:4a:27:
         bf:da:3a:c4:11:54:c1:c2:db:ca:2b:1e:b8:01:35:bb:4a:7e:
         45:45:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----