Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/8opQoGDa-EJAOR70ixMEeonKSr8.roa
File:                     8opQoGDa-EJAOR70ixMEeonKSr8.roa (raw, json)
Hash identifier:          vzNM+rdn9VhcekVsU+cVNpeP2Ih1+vUTrz0jZETXE8s=
Subject key identifier:   F2:8A:50:A0:60:DA:F8:42:40:39:1E:F4:8B:13:04:7A:89:CA:4A:BF
Certificate issuer:       /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial:       018709BBAB82226E3BD21C7B6B6E0A023154
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/8opQoGDa-EJAOR70ixMEeonKSr8.roa
Signing time:             Wed 22 Mar 2023 14:31:46 +0000
ROA not before:           Wed 22 Mar 2023 14:31:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199963
IP address blocks:        185.142.115.0/24 maxlen: 24
                          2a13:a900::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:bb:ab:82:22:6e:3b:d2:1c:7b:6b:6e:0a:02:31:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
        Validity
            Not Before: Mar 22 14:31:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f28a50a060daf84240391ef48b13047a89ca4abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:c4:6e:d5:f8:33:2f:c6:95:f3:ee:d9:e6:
                    e7:b8:66:a1:b2:0a:25:60:f4:5f:b5:b8:2a:47:24:
                    ce:41:24:db:13:fa:ef:00:26:77:24:01:e5:77:3e:
                    25:9e:b8:ac:4f:69:45:cb:29:ef:11:0d:0e:4a:2c:
                    fa:f8:c8:f7:27:04:90:b6:b4:61:10:ea:99:e6:22:
                    f8:50:2d:08:23:ce:89:84:89:a1:41:bb:4a:75:8d:
                    c1:a8:ba:77:cf:30:6d:19:1f:fa:f0:68:55:87:b3:
                    82:26:e8:a2:29:b8:41:a0:8f:c0:14:e0:43:07:0b:
                    d0:45:7e:b7:94:58:79:ac:68:be:3b:38:60:ee:05:
                    ac:ae:c4:74:88:8d:3d:8d:3b:0d:d7:af:40:13:e9:
                    c1:17:dc:1b:97:b0:b4:87:5b:eb:c6:cf:81:4c:69:
                    68:a7:c3:61:58:fd:a7:c4:8b:82:d5:ee:06:02:a8:
                    73:73:80:5f:84:a6:b8:b4:57:7b:75:e4:9b:3e:ed:
                    e5:04:45:15:f2:a1:b1:d3:b2:73:49:db:0c:2e:18:
                    e5:40:48:cf:74:3f:6c:69:8e:98:d3:b7:f7:28:aa:
                    34:ec:b9:f2:de:c4:93:d9:c8:e8:0b:59:87:b0:97:
                    8d:1c:ad:44:7e:4b:89:bd:17:a6:17:05:ac:5f:2e:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8A:50:A0:60:DA:F8:42:40:39:1E:F4:8B:13:04:7A:89:CA:4A:BF
            X509v3 Authority Key Identifier:
                keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/8opQoGDa-EJAOR70ixMEeonKSr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.115.0/24
                IPv6:
                  2a13:a900::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:64:25:27:db:99:f7:2d:cd:1b:52:8e:d0:95:f6:00:93:
         ff:0a:ff:91:31:da:cf:fe:4c:62:bf:b8:81:df:3e:97:b9:d6:
         33:e7:83:db:06:7b:7b:c3:e0:49:46:b6:8d:eb:05:82:26:21:
         14:9b:b3:38:60:11:f2:fc:48:75:68:ae:bc:71:47:7c:8a:72:
         3a:e4:c6:5b:48:62:97:25:2e:ea:c4:0c:18:61:6a:24:0e:f3:
         18:4d:45:f0:49:1e:63:9c:be:1a:1b:c9:7e:d5:3c:cf:2d:96:
         af:08:0b:dd:3d:ee:c4:d1:fd:c9:a1:d1:35:b3:96:1d:09:bf:
         c0:3a:9d:cb:02:e8:1a:5b:ee:8d:25:06:29:5a:d5:25:79:3a:
         d5:77:71:83:3a:77:e4:83:80:d7:c3:da:01:6b:e4:ad:a4:d4:
         f4:30:37:85:a1:c7:5f:2c:30:c2:57:c2:4f:78:56:d6:c5:04:
         8b:9b:44:c8:97:77:87:08:92:87:af:ea:64:e7:0d:df:dd:ef:
         e2:fb:fe:f1:fa:37:2b:c7:75:29:8f:bc:28:e0:4b:5b:03:84:
         6a:d3:1e:cd:51:d0:6c:72:24:27:36:9b:32:db:bb:ef:dd:77:
         d2:d4:ce:17:ce:f0:68:f4:1f:2c:5d:ec:27:cc:b4:fe:dd:c9:
         ab:90:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----