Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/0TuH6gowE8d2-19aw60hrFWQ8Ww.roa
File:                     0TuH6gowE8d2-19aw60hrFWQ8Ww.roa (raw, json)
Hash identifier:          nxU+4NK3HkSuPgvo/NGqzlDvTbBHvJz7nJOKETH6TEU=
Subject key identifier:   D1:3B:87:EA:0A:30:13:C7:76:FB:5F:5A:C3:AD:21:AC:55:90:F1:6C
Certificate issuer:       /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial:       0187B371F16D5F11310B0CE91699687A6803
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/0TuH6gowE8d2-19aw60hrFWQ8Ww.roa
Signing time:             Mon 24 Apr 2023 13:26:41 +0000
ROA not before:           Mon 24 Apr 2023 13:26:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3257
IP address blocks:        185.135.190.0/24 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:71:f1:6d:5f:11:31:0b:0c:e9:16:99:68:7a:68:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
        Validity
            Not Before: Apr 24 13:26:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d13b87ea0a3013c776fb5f5ac3ad21ac5590f16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:f0:76:bb:fb:47:a1:35:4e:52:35:b6:0c:
                    9c:8a:6b:fc:b2:12:43:f0:5b:7a:e1:53:f1:2d:a0:
                    34:97:19:c6:9c:ca:32:f1:fe:e0:93:40:65:8d:c1:
                    22:6e:9a:52:db:f8:7b:37:fb:1f:ee:eb:e4:5d:9c:
                    31:3e:66:6e:f5:f6:3c:5f:09:86:a7:f0:c1:76:ba:
                    72:9a:25:f5:ec:ae:73:66:52:0f:ec:71:95:44:aa:
                    6c:d4:58:4f:a3:e4:0f:de:62:f4:04:5e:fc:3e:c2:
                    2d:a1:f7:d9:2d:88:78:ea:cb:71:c6:02:da:3a:b8:
                    83:50:ea:86:4d:df:a9:c8:88:03:d7:f9:ae:92:36:
                    5a:84:b3:2d:8b:bc:f5:93:e5:48:ae:4e:a8:dc:31:
                    70:b4:ae:cd:7e:be:2e:c3:a2:38:3b:c1:62:0d:4c:
                    42:fa:a2:e8:aa:c5:f4:33:a7:49:63:59:0a:4b:f9:
                    45:e3:08:90:73:02:d3:8b:b9:76:66:66:d5:b9:aa:
                    0a:ed:e2:63:5f:3c:34:e4:1e:40:09:9f:35:79:ff:
                    29:7b:cf:41:67:ca:b7:de:13:a1:a8:73:02:2b:7a:
                    b7:4e:04:0a:f4:2a:31:80:2f:b4:a5:3e:56:f8:ce:
                    93:31:5a:17:ad:a2:0b:e9:69:68:96:e1:c5:80:ca:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3B:87:EA:0A:30:13:C7:76:FB:5F:5A:C3:AD:21:AC:55:90:F1:6C
            X509v3 Authority Key Identifier:
                keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/0TuH6gowE8d2-19aw60hrFWQ8Ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9f:1e:c0:6b:d1:c3:c9:65:6c:e3:27:5d:37:f1:5e:0a:4a:
         80:77:6f:f2:c6:53:4c:90:13:5b:b3:6f:af:52:71:a1:36:b8:
         e7:51:0c:65:91:6d:72:02:5a:44:e1:6f:2b:8f:5c:cd:9c:ac:
         48:e0:e7:42:db:4f:bc:4f:b2:b7:1c:77:33:70:a7:90:86:3d:
         36:29:53:6a:ba:49:cd:08:e9:cf:6b:75:42:38:b0:97:08:18:
         f9:8a:f3:34:b7:65:75:6d:ef:0c:3a:a3:2d:67:22:91:05:92:
         7d:9e:0a:ef:5b:88:72:51:bc:14:aa:8d:26:70:df:7d:e7:d1:
         bc:f8:6a:88:76:43:a2:c8:bd:7a:e1:41:ac:25:cf:15:5d:c5:
         e8:d7:84:76:1d:fc:09:f6:1c:9e:36:eb:8a:5c:fd:e2:af:4a:
         fd:31:ec:cf:71:13:5f:51:78:f8:1d:ce:24:fe:08:70:de:7f:
         58:b3:be:c7:3a:24:fa:53:dd:8c:fe:77:80:35:c7:b5:de:72:
         02:13:2b:3d:5f:ef:69:b6:99:9a:8e:a2:a4:eb:8a:8c:39:1e:
         93:85:ba:24:d6:68:0b:65:c6:35:b0:40:59:9c:f9:bc:fc:d0:
         7c:51:6e:e7:29:bd:bd:39:3d:dc:4c:1f:68:db:b6:20:8f:5f:
         87:12:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----