Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/8Mljf0M9mmWUyI1LsQdYckW3WM4.roa
File:                     8Mljf0M9mmWUyI1LsQdYckW3WM4.roa (raw, json)
Hash identifier:          WLY3VC22tv7o7w56Su0xJGgF3+7VfiXQ6Y+8dv57TtY=
Subject key identifier:   F0:C9:63:7F:43:3D:9A:65:94:C8:8D:4B:B1:07:58:72:45:B7:58:CE
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       01857082A8E2839A2608F54F1FE7F2DCEAF4
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/8Mljf0M9mmWUyI1LsQdYckW3WM4.roa
Signing time:             Mon 02 Jan 2023 03:24:49 +0000
ROA not before:           Mon 02 Jan 2023 03:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12353
IP address blocks:        80.173.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:a8:e2:83:9a:26:08:f5:4f:1f:e7:f2:dc:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jan  2 03:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0c9637f433d9a6594c88d4bb107587245b758ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:3f:30:3d:59:18:ce:10:bb:20:bb:9c:5d:
                    60:05:20:6e:19:ab:cb:d3:4c:11:9c:21:e1:96:1a:
                    2e:09:4a:6c:fd:8c:88:65:6e:4c:6f:42:35:93:40:
                    dd:bb:08:95:72:a4:f5:b0:78:7e:1d:cf:9f:64:47:
                    7c:e8:a3:cc:38:db:44:10:b4:da:be:a0:8e:dd:58:
                    b7:a9:ad:f5:c8:0d:a6:8d:a2:65:42:e3:51:ff:1e:
                    96:e7:22:11:43:94:7d:8e:ae:d8:23:94:f4:f8:0e:
                    fb:a2:57:64:dc:c9:df:fd:b4:28:a1:35:a1:95:3f:
                    ff:c0:cf:f3:c9:13:71:3b:21:de:3f:df:ef:b8:ef:
                    6a:bd:4a:2d:3e:ec:c2:e1:e8:02:c3:e2:8f:63:0b:
                    07:e1:34:3a:d0:0d:45:bc:df:15:f7:e3:c6:60:fa:
                    fe:20:ec:74:65:ea:e5:3f:43:10:88:5e:85:a7:20:
                    a7:06:c2:3b:94:e3:66:31:c7:e1:74:60:13:fa:0e:
                    75:04:7c:71:49:28:28:9f:b5:e5:06:31:f1:aa:d1:
                    87:73:85:6b:55:5a:9e:e3:7f:33:46:ca:7c:61:3a:
                    e8:ef:bf:48:ce:cc:54:e1:c9:28:56:d3:14:84:fb:
                    67:42:a4:30:1e:3a:09:bf:9c:72:fa:ec:fe:3d:f9:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:63:7F:43:3D:9A:65:94:C8:8D:4B:B1:07:58:72:45:B7:58:CE
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/8Mljf0M9mmWUyI1LsQdYckW3WM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.173.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:17:8f:1b:89:72:f1:53:b6:a8:3b:0c:13:53:15:ea:ea:9c:
         6d:01:9a:5d:42:b3:16:ff:da:3f:b6:62:2c:cb:bd:f6:ff:c1:
         d4:93:14:0e:e5:06:90:29:89:c6:0d:cc:fc:c2:20:48:17:e8:
         9c:38:11:58:24:d2:c5:75:91:a3:9d:c2:5a:b3:42:69:39:56:
         95:27:14:49:17:ba:13:4b:fa:f7:29:b1:95:36:17:f4:9c:ea:
         da:95:69:a8:cd:09:1c:ac:dc:40:88:0d:5d:a5:f0:21:49:d2:
         e2:d3:c0:ae:2b:a5:e8:5d:0e:0d:8e:c0:f2:30:ce:2c:d7:8d:
         a4:63:4b:40:ac:51:b6:51:f6:75:5e:94:13:08:cf:26:2e:8d:
         30:4b:e1:27:b8:2c:73:31:ea:a4:59:b8:b3:50:14:f4:48:87:
         07:87:67:82:69:f8:60:64:31:e8:57:80:9a:9b:7f:88:e7:ac:
         29:0e:ff:53:95:e7:34:e4:da:7d:16:54:d2:a0:47:22:d3:37:
         bd:7c:a1:92:71:44:10:2f:92:1b:72:d7:ea:1d:6a:02:8c:f1:
         0d:73:d4:d2:65:93:1b:80:a8:3d:09:10:61:d8:c7:0d:15:ea:
         85:1e:a3:66:fd:48:11:93:71:91:e1:50:a5:5d:41:2f:b0:cb:
         aa:96:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----