Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/anwl4JCxdN_b5GH-a8_f_gUYH5g.roa
File:                     anwl4JCxdN_b5GH-a8_f_gUYH5g.roa (raw, json)
Hash identifier:          Q1bOLo+bP3fy2hPHv7MN0sS6SPdbsG0o1ow9xPogFt4=
Subject key identifier:   6A:7C:25:E0:90:B1:74:DF:DB:E4:61:FE:6B:CF:DF:FE:05:18:1F:98
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       018BAA28BC9108280BB2032D6E0B2ACBAEEA
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/anwl4JCxdN_b5GH-a8_f_gUYH5g.roa
Signing time:             Tue 07 Nov 2023 14:21:18 +0000
ROA not before:           Tue 07 Nov 2023 14:21:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198034
IP address blocks:        185.153.28.0/23 maxlen: 23
                          185.153.30.0/23 maxlen: 23
                          2a12:9240::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:aa:28:bc:91:08:28:0b:b2:03:2d:6e:0b:2a:cb:ae:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Nov  7 14:21:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a7c25e090b174dfdbe461fe6bcfdffe05181f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:b6:98:1d:05:40:5a:ba:5c:7f:c4:e1:96:
                    e8:88:46:3a:e7:9a:2d:fa:e8:07:43:2d:30:1d:dd:
                    89:e5:b8:86:fa:86:ea:49:66:b6:16:d3:08:6c:20:
                    a9:03:c0:9b:21:2b:ad:0f:6f:87:49:a4:72:4e:d9:
                    8a:6e:45:59:11:b2:02:7d:12:dd:30:56:a8:10:cb:
                    79:3a:11:5e:1e:4e:a0:b9:e4:36:b8:45:b7:c5:22:
                    5a:be:e7:25:b2:81:da:13:2e:51:9b:de:70:94:93:
                    82:d0:a0:24:6b:98:a5:1e:65:87:14:02:67:b6:0c:
                    3b:da:f5:c2:16:5d:6a:af:fb:08:22:c4:6b:1b:88:
                    39:cf:71:0f:26:d2:33:46:b3:7b:c5:d5:8d:2e:af:
                    59:4d:8b:49:a3:02:99:a3:c9:b0:70:da:3a:54:f4:
                    c5:d2:64:e0:6c:d6:33:c2:97:5a:d9:01:0a:10:da:
                    e5:26:dd:2d:8c:16:e6:13:e9:5b:06:b5:9e:4c:61:
                    41:1b:63:81:02:b2:08:f4:65:cb:90:40:85:b4:ba:
                    f5:c7:73:cd:f4:cc:fd:e5:8f:5e:95:ac:3e:db:41:
                    a4:33:ae:6a:6f:3a:26:63:a2:d0:25:99:96:f9:47:
                    0d:9b:d1:3b:b2:b5:14:e2:e3:30:10:0d:89:b2:f4:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7C:25:E0:90:B1:74:DF:DB:E4:61:FE:6B:CF:DF:FE:05:18:1F:98
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/anwl4JCxdN_b5GH-a8_f_gUYH5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.28.0/22
                IPv6:
                  2a12:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:8a:b8:83:1c:1b:1b:3a:55:d0:ef:74:82:71:30:8a:c8:
         40:5b:91:82:e7:ff:f7:0c:47:c2:54:b0:a4:b2:74:85:43:9a:
         13:32:8d:5c:e0:54:cd:72:f5:6f:16:0d:6b:61:9d:53:72:83:
         b7:4b:00:78:89:85:d2:5f:68:d4:29:9e:1c:1b:a8:4f:1c:42:
         e2:eb:2d:fc:52:87:9f:b4:03:8e:91:35:85:0f:51:9a:a0:af:
         c6:75:a9:d9:f6:ac:d0:fb:bb:4f:81:77:b0:aa:68:0d:e4:f6:
         fd:01:80:80:d7:9f:ec:c0:f0:57:c5:a6:0c:e7:b6:fa:a9:a8:
         8e:46:04:f5:1d:30:cb:84:9b:48:36:b0:7e:f7:81:59:1d:48:
         8d:50:d0:9c:04:26:95:36:e0:bb:a8:86:39:90:02:1b:d3:79:
         f8:dd:ac:c9:79:db:79:0e:ae:a7:6d:53:4d:12:f6:63:8c:91:
         62:f2:2d:73:95:7d:8c:8d:75:18:bc:75:db:b9:82:18:6c:b2:
         b7:61:d3:c8:97:db:40:d6:aa:e2:fb:ff:2c:4e:c6:5f:68:71:
         43:fd:f5:33:8a:3d:47:a1:4b:d8:58:b5:4f:ec:d8:b2:e4:44:
         f6:e9:fe:ea:b0:a4:7f:c4:bb:fd:33:c4:ba:be:51:fe:de:75:
         06:2c:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----