Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/XrFljA-ACeanbreXVCegRUJ5myc.roa
File:                     XrFljA-ACeanbreXVCegRUJ5myc.roa (raw, json)
Hash identifier:          SnRMMOYdxI120+yZ69lZlfjIgZB+0NnVFN5ZyUtUpIQ=
Subject key identifier:   5E:B1:65:8C:0F:80:09:E6:A7:6E:B7:97:54:27:A0:45:42:79:9B:27
Certificate issuer:       /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial:       0185701EE5D2DC628524C482B294A78AE794
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/XrFljA-ACeanbreXVCegRUJ5myc.roa
Signing time:             Mon 02 Jan 2023 01:35:51 +0000
ROA not before:           Mon 02 Jan 2023 01:35:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212084
IP address blocks:        86.106.183.0/24 maxlen: 24
                          2a0d:f301:42::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:e5:d2:dc:62:85:24:c4:82:b2:94:a7:8a:e7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
        Validity
            Not Before: Jan  2 01:35:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5eb1658c0f8009e6a76eb7975427a04542799b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:18:54:8f:22:39:6c:5c:54:28:0e:37:af:
                    cc:b4:2f:7c:0b:94:7f:5f:31:4f:37:4b:bd:bc:c2:
                    85:25:50:30:1a:43:13:e7:46:21:4a:8e:8a:61:ae:
                    2f:b4:48:df:14:1a:32:6d:56:2f:3d:af:09:93:18:
                    9d:36:01:2d:c7:10:8e:62:18:81:d1:50:01:cc:bb:
                    a2:39:09:1e:61:1e:76:d4:dd:1f:ca:3b:0c:9a:8b:
                    13:01:ba:03:94:f9:6f:94:ee:30:85:a1:72:a7:77:
                    25:e0:ca:50:23:3c:e3:9e:de:d7:6e:47:5d:c6:ff:
                    d7:ad:d9:67:e5:31:16:1b:d7:67:1c:3f:4b:31:a4:
                    bd:87:35:6a:8e:75:db:df:60:de:84:b9:8d:a5:36:
                    a1:f3:57:b3:da:e1:06:f5:fc:eb:2e:e1:dd:db:9f:
                    81:73:2b:6d:b1:f5:c7:2e:cd:b0:d9:ea:09:84:da:
                    24:cb:c6:9f:1b:ff:71:6b:c7:d7:b9:77:22:0e:1c:
                    0e:de:4d:74:6b:f6:7f:b9:3f:0c:27:c8:4c:31:94:
                    70:06:42:95:ad:fd:03:b6:21:2b:31:ea:41:dc:c0:
                    59:2e:4c:20:b9:f5:6c:9f:7a:a7:d7:d9:f8:45:dc:
                    f2:bd:10:ba:1e:1f:fe:bf:3d:af:e5:41:82:0c:25:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B1:65:8C:0F:80:09:E6:A7:6E:B7:97:54:27:A0:45:42:79:9B:27
            X509v3 Authority Key Identifier:
                keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/XrFljA-ACeanbreXVCegRUJ5myc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.183.0/24
                IPv6:
                  2a0d:f301:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:b2:60:f7:bf:17:2c:71:b0:d3:e9:7d:45:56:1f:c8:4b:
         38:83:6f:22:4a:d8:2b:60:3a:b6:4b:7f:f9:82:cf:d1:ae:48:
         71:bc:08:65:2e:8e:2b:6b:ff:0d:e0:57:db:2a:56:77:49:88:
         68:49:b2:dd:7c:4a:ad:cc:53:9f:b3:69:3b:a5:61:1c:56:a8:
         50:7a:20:f3:c0:19:c7:56:91:61:fb:97:c6:a4:b7:5b:69:b5:
         42:8f:eb:c1:98:a4:ee:6e:b2:21:75:94:89:d3:5c:62:64:d2:
         b1:31:27:d4:7f:3b:a5:1b:ae:cc:30:d4:a3:ae:ae:a5:d0:3c:
         52:76:fc:c3:99:72:70:c2:51:2c:6d:10:ed:a6:c2:c0:c4:8f:
         c5:db:57:d3:59:0d:a2:54:ca:98:a9:34:79:af:20:65:0c:44:
         c2:43:42:4d:c4:41:13:d2:9a:60:32:a6:34:1b:28:3c:35:13:
         dc:eb:5e:1c:86:96:cd:3f:0f:bf:22:06:d9:b9:f5:4c:0b:63:
         6f:4e:68:70:fd:54:15:3e:9b:4f:32:a5:24:68:70:94:86:b6:
         8c:92:fd:02:02:dd:69:63:f0:ba:b6:26:3d:32:05:d4:85:c5:
         25:de:aa:47:c8:47:d4:09:58:9f:d5:22:e1:ab:22:be:71:b7:
         1f:70:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----