Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa
File:                     G0eVQw7ri4AG47MPfuALkiE_5Xs.roa (raw, json)
Hash identifier:          QybCVWou4pozl0yxaupkdtsyEqMSPwv+OruBeYN1bd0=
Subject key identifier:   1B:47:95:43:0E:EB:8B:80:06:E3:B3:0F:7E:E0:0B:92:21:3F:E5:7B
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE61E9761469EEEA2DD3B542AE1451A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa
Signing time:             Sun 01 Jan 2023 10:34:58 +0000
ROA not before:           Sun 01 Jan 2023 10:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60558
IP address blocks:        194.15.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:1e:97:61:46:9e:ee:a2:dd:3b:54:2a:e1:45:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b4795430eeb8b8006e3b30f7ee00b92213fe57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:fd:7b:9f:ec:3e:ae:8d:df:d8:d6:dc:68:
                    64:24:ee:5a:97:d7:fb:f7:83:22:dc:55:dc:28:a3:
                    a2:e4:59:74:5b:fd:78:6c:0e:61:6b:0d:53:77:ca:
                    37:c8:e0:3e:64:e3:69:6b:02:84:92:cd:95:22:93:
                    33:5a:37:b6:8c:12:9c:92:29:94:b8:3b:b1:c1:c6:
                    1d:d9:3c:ac:10:4a:05:b6:64:18:68:83:5a:a8:9e:
                    1d:8a:25:fa:ea:4f:f0:48:27:3a:1c:d0:54:7e:d2:
                    b4:89:f5:c5:76:6e:db:40:05:bb:f1:df:2f:eb:c7:
                    bb:46:71:71:e3:6c:3c:a9:34:2c:80:a0:22:fe:fb:
                    73:ae:3f:dc:ac:c9:35:a6:83:da:ae:37:2b:59:67:
                    b3:a2:77:ab:54:f5:1b:9d:f6:24:ac:53:75:c9:27:
                    5c:d1:33:cb:84:81:cd:91:ec:cb:5a:c4:20:3d:69:
                    65:d6:89:fe:28:51:68:cf:26:19:0c:71:eb:c0:e1:
                    fb:70:ad:8e:4c:f6:ac:4b:c0:bf:22:bf:f4:14:ab:
                    58:d4:5c:4c:c8:b4:ce:7f:24:72:86:f9:bc:9b:41:
                    c1:b0:4e:3b:22:9c:ad:79:0d:d6:5b:89:e9:87:e1:
                    9b:b2:13:0b:b8:e1:a2:d7:11:34:b7:00:dc:66:db:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:47:95:43:0E:EB:8B:80:06:E3:B3:0F:7E:E0:0B:92:21:3F:E5:7B
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/G0eVQw7ri4AG47MPfuALkiE_5Xs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b2:46:aa:b7:1a:ec:a7:25:fe:0b:34:10:3d:80:b9:d3:3f:
         64:38:6c:61:e8:1e:16:76:da:55:31:8b:25:e5:6a:33:84:5c:
         4a:8b:a5:23:e5:28:ef:87:42:b4:b5:fa:5e:ad:ac:ea:6a:bc:
         ca:c9:06:bd:a4:dd:77:dd:b8:91:ca:17:64:48:99:83:05:67:
         51:74:f5:5b:53:7c:71:47:57:35:43:7e:3c:b6:fc:1e:02:ac:
         ba:31:ef:15:1f:7c:7d:c7:31:58:59:7b:ce:da:87:73:18:ea:
         3a:6a:1e:41:ac:fe:1d:11:80:f6:9c:7a:7a:ca:40:2e:0d:46:
         d9:28:79:05:d3:b9:53:c6:89:2a:ca:0b:fb:4e:3a:7d:6b:59:
         2f:b8:39:72:02:e6:7e:73:22:73:e2:e2:04:91:be:34:2a:01:
         8d:7a:86:6c:10:0d:ea:c3:1e:a7:20:58:99:44:b2:30:e3:c2:
         45:d2:99:83:ae:c3:83:ac:fd:f2:0f:7c:6b:c8:b8:6c:1e:c0:
         74:8e:e9:cb:f6:c9:56:3e:9c:8c:f0:e9:62:1a:5a:57:6c:d7:
         e6:76:b5:61:a0:36:14:1e:09:a0:20:75:ff:40:2b:7f:59:8d:
         dd:5d:dc:37:8e:20:46:c6:7c:1b:ec:c2:90:29:08:b5:fd:89:
         75:74:76:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----