Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/jisKrrdD42S4BSZqXqjrXCV_2uQ.roa
File:                     jisKrrdD42S4BSZqXqjrXCV_2uQ.roa (raw, json)
Hash identifier:          7oEhbsceflPDmGGSQjE6d43XZ/15E9+Jdhr8Mj+D11Y=
Subject key identifier:   8E:2B:0A:AE:B7:43:E3:64:B8:05:26:6A:5E:A8:EB:5C:25:7F:DA:E4
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       0185729EDAE411EEC1E0F8ECFF5CEECC83B0
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/jisKrrdD42S4BSZqXqjrXCV_2uQ.roa
Signing time:             Mon 02 Jan 2023 13:14:51 +0000
ROA not before:           Mon 02 Jan 2023 13:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48506
IP address blocks:        185.163.192.0/22 maxlen: 32
                          2a0a:2c00::/29 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:da:e4:11:ee:c1:e0:f8:ec:ff:5c:ee:cc:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: Jan  2 13:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e2b0aaeb743e364b805266a5ea8eb5c257fdae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:93:b4:cf:ad:58:10:a2:0a:f1:58:2f:ee:
                    e3:66:04:12:64:bc:42:b7:f2:6c:f8:53:74:9e:03:
                    d2:78:18:40:74:38:66:de:df:1a:ea:4e:c4:3e:27:
                    74:14:91:0e:6a:76:e9:88:f7:98:81:f4:19:51:b2:
                    6d:a6:ab:33:ee:6d:59:5f:9c:fc:37:80:7f:01:2f:
                    ab:7d:95:f3:63:28:81:98:6c:a4:d9:bc:57:86:0f:
                    ad:75:f0:fb:12:a1:cb:87:0c:1e:e0:d5:c5:5a:79:
                    a1:17:ae:ed:f7:65:43:cb:c4:8d:68:08:4e:6d:d6:
                    8d:4b:77:f6:88:34:8d:de:bd:63:39:7d:8b:eb:0f:
                    1e:85:e4:f4:f8:f9:db:ba:31:d3:98:f0:34:8b:7d:
                    c9:ab:e8:9e:b4:32:d8:a8:00:45:1a:f6:65:d0:b4:
                    ee:78:fc:c8:b8:da:55:98:ea:03:1e:ae:78:c6:7c:
                    e9:fd:c6:24:0e:72:7f:90:1f:75:39:50:9b:e1:03:
                    b3:30:c0:c7:64:5e:9e:72:23:3b:2f:3a:93:e9:13:
                    d3:f0:a9:94:77:a0:54:05:17:80:ab:7f:3b:6e:8d:
                    b3:76:2a:db:e1:e4:d9:7e:c3:4f:6a:8d:59:e0:5d:
                    b6:cd:c5:16:03:27:f8:6f:06:2e:ee:17:8f:d7:de:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2B:0A:AE:B7:43:E3:64:B8:05:26:6A:5E:A8:EB:5C:25:7F:DA:E4
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/jisKrrdD42S4BSZqXqjrXCV_2uQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.192.0/22
                IPv6:
                  2a0a:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         83:36:83:5a:42:25:7c:74:5c:61:bb:f6:40:57:d0:eb:24:58:
         b7:1f:83:e1:e6:f7:b2:f9:98:3c:e4:ea:86:ac:d1:5c:7a:31:
         63:e7:5f:11:48:ab:6f:7c:b7:23:d5:27:a0:68:d4:a2:c8:09:
         0f:92:bc:71:b5:4e:fc:a3:2a:95:af:b8:81:be:6f:9b:b7:12:
         ba:d9:41:3b:b0:ad:54:1f:9f:e4:38:d2:9e:e3:27:ee:34:79:
         5e:d9:d1:2c:81:29:20:37:2f:53:73:39:32:64:e2:3e:4c:f0:
         70:df:97:fe:dc:19:a5:c6:14:fd:d2:98:2a:34:fd:6c:82:27:
         d6:c9:ff:e6:4f:51:3e:ba:57:4c:cd:f0:c1:03:a7:bd:bb:8e:
         11:3a:78:50:95:50:4c:96:01:2e:ba:e8:99:4a:e5:49:9e:73:
         53:12:e0:48:33:55:7c:92:80:e0:a8:bd:91:6d:aa:58:35:d4:
         f7:c9:2c:fb:fb:3c:4c:97:7f:79:69:16:9a:61:70:de:9b:de:
         83:c6:f4:53:f8:df:ea:9a:ab:6c:18:78:9f:68:aa:d5:a8:ab:
         e8:cd:7e:9b:30:ce:53:41:0b:42:09:b5:9a:13:b2:a9:45:6e:
         2c:1d:6b:ee:1d:2d:79:08:2f:1e:86:67:30:b3:a5:d3:81:cb:
         45:fd:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----