Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/dic76kPD4xSpLSrJFvubiQSbF1U.roa
File:                     dic76kPD4xSpLSrJFvubiQSbF1U.roa (raw, json)
Hash identifier:          nlI0bj43GgM5u02UdzUMayTQyaiNoamETm+Ll3CIEq0=
Subject key identifier:   76:27:3B:EA:43:C3:E3:14:A9:2D:2A:C9:16:FB:9B:89:04:9B:17:55
Certificate issuer:       /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial:       0185724C8F11D85E421F62217D33C64CC980
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/dic76kPD4xSpLSrJFvubiQSbF1U.roa
Signing time:             Mon 02 Jan 2023 11:44:57 +0000
ROA not before:           Mon 02 Jan 2023 11:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56366
IP address blocks:        93.92.240.0/21 maxlen: 21
                          2a03:d200::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:4c:8f:11:d8:5e:42:1f:62:21:7d:33:c6:4c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
        Validity
            Not Before: Jan  2 11:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76273bea43c3e314a92d2ac916fb9b89049b1755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:f1:b0:cd:0a:72:26:f1:a7:70:09:3a:6e:
                    27:f5:7a:d6:49:1a:2b:d9:22:3d:78:40:8d:81:90:
                    12:46:83:dd:70:82:ac:36:ad:6d:ab:f6:36:7b:dd:
                    ac:07:51:6e:c5:78:ad:51:39:8d:ce:39:5e:73:1d:
                    72:20:e2:c1:98:eb:90:c8:24:d0:d5:66:c4:bd:20:
                    95:26:2b:31:f9:65:c5:34:ba:70:b6:f4:d7:b9:40:
                    f3:4a:df:d6:c6:f0:96:fb:bd:47:9a:e9:73:d0:dc:
                    ef:d3:0b:90:4f:cd:c9:ad:a9:22:c0:60:13:9d:e8:
                    e0:30:f4:55:71:3b:83:9c:e7:93:37:e0:47:de:cd:
                    f3:3c:ee:11:11:51:2a:77:ae:4f:fa:b2:22:74:e5:
                    63:81:5b:a7:c5:56:dc:62:d3:c2:51:67:8d:6f:6c:
                    42:1b:b1:87:31:5f:e1:17:09:47:ee:b9:52:04:99:
                    ad:03:9f:e5:aa:32:b1:42:ba:04:d7:c9:6e:fe:33:
                    65:5d:f1:a1:58:92:78:a1:d1:db:b7:ff:17:2e:3c:
                    ca:83:d8:b4:27:70:c4:81:fc:ba:15:5a:43:c4:ef:
                    ad:ec:88:83:a9:0a:c5:76:33:8a:7e:92:42:cd:0b:
                    73:db:7c:e8:3a:bf:66:6d:3a:b0:71:cd:74:1f:0c:
                    e0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:27:3B:EA:43:C3:E3:14:A9:2D:2A:C9:16:FB:9B:89:04:9B:17:55
            X509v3 Authority Key Identifier:
                keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/dic76kPD4xSpLSrJFvubiQSbF1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.240.0/21
                IPv6:
                  2a03:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:80:4f:09:95:a7:be:15:c7:b7:29:06:f8:9c:f0:5a:81:c6:
         f7:fc:da:5c:57:a2:f1:c9:19:63:30:0c:f0:93:cc:de:8a:94:
         08:40:87:21:6b:b0:7e:1c:3c:a9:16:b4:57:f6:21:92:0c:dd:
         f9:04:81:67:c5:7e:84:f5:04:11:3e:dd:5c:f1:34:83:91:6b:
         1d:6b:e5:9f:23:df:14:3f:e1:85:a3:19:3a:26:15:c5:51:1b:
         8f:ca:93:c0:16:d6:ab:5a:8f:88:77:ca:f7:97:fb:05:3b:12:
         ac:b9:56:a7:76:f6:16:e5:57:42:1a:fb:3a:88:0c:d6:5b:c6:
         81:96:bb:fc:f6:ba:6a:61:5b:b6:f2:8c:96:b3:e3:6b:e0:57:
         ab:a7:4c:21:12:63:80:4f:b4:8a:04:1f:2c:f2:9d:40:0f:3e:
         bd:0d:cc:41:5d:bd:c9:af:f5:8d:88:b1:55:b2:36:19:78:4d:
         8a:6e:8f:13:f1:67:f6:d3:55:07:8c:c0:00:cb:6e:86:dd:48:
         1a:ce:61:42:34:26:7b:3e:39:bb:8b:bf:a3:9c:f0:e1:d2:31:
         b8:9c:ec:3e:61:aa:c6:9a:b6:0d:95:d2:fb:f1:76:31:c1:2d:
         1b:1d:f1:21:ce:24:6c:22:f8:0e:e0:17:63:4c:c7:0d:33:44:
         d4:5b:58:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----