Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa
File:                     0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa (raw, json)
Hash identifier:          92BsSRbsWY2N2Gc5DIaZuLHfoqRCKyW6zKlt0wMYOVI=
Subject key identifier:   D0:26:41:CD:61:27:5A:1A:F0:13:AA:F3:DD:A4:13:BF:10:C6:3D:E3
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       018BA4F84535F43EB1DD1263FC3C58857790
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa
Signing time:             Mon 06 Nov 2023 14:10:15 +0000
ROA not before:           Mon 06 Nov 2023 14:10:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63018
IP address blocks:        194.110.173.0/24 maxlen: 24
                          2a09:ff00:101::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a4:f8:45:35:f4:3e:b1:dd:12:63:fc:3c:58:85:77:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Nov  6 14:10:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d02641cd61275a1af013aaf3dda413bf10c63de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:3f:16:45:0d:de:e3:99:3c:fc:e5:25:d7:
                    ff:01:2b:e2:99:ed:7e:e9:d3:d5:1c:ad:7a:b4:3c:
                    9f:5d:e8:c0:92:98:97:79:14:d1:5d:be:bb:93:b2:
                    60:f2:bf:3d:82:d5:b0:aa:4d:3a:58:5b:e6:e0:27:
                    15:8a:00:20:60:eb:fd:85:77:29:be:f9:62:0e:e6:
                    d1:3e:d0:5b:90:fb:ec:6c:23:97:3c:f8:51:c0:2b:
                    80:3a:4d:29:4e:f8:a7:30:d4:0e:30:ea:1e:c8:78:
                    ef:d5:35:1c:9e:76:77:b8:36:8f:28:4f:91:ba:ef:
                    d6:29:b8:4f:df:8e:bd:51:d1:3c:78:e8:03:0a:27:
                    37:54:36:64:2b:43:8a:39:8d:7f:ed:55:fe:3e:ad:
                    be:6a:7b:47:13:2b:9c:aa:ad:fb:25:49:71:a6:0c:
                    0c:f8:cd:a7:4b:a2:45:48:e4:bf:5c:66:22:fd:b6:
                    06:8f:e1:dd:a9:7e:1e:2e:2a:fe:9c:dc:f7:58:a6:
                    48:d6:4b:cc:97:fe:41:cf:50:a2:c8:6f:99:7e:65:
                    09:3b:af:11:c2:c0:f2:2b:02:29:98:2f:0a:a0:3c:
                    28:ed:82:a9:35:58:9b:46:4d:c0:f1:a8:cc:85:49:
                    39:95:ed:ba:ad:a1:fc:93:05:46:fc:44:74:70:56:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:41:CD:61:27:5A:1A:F0:13:AA:F3:DD:A4:13:BF:10:C6:3D:E3
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.173.0/24
                IPv6:
                  2a09:ff00:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:d1:1f:10:cd:9f:d8:38:04:65:72:c3:24:fd:35:8e:e0:
         04:01:cf:b8:be:67:26:3d:55:44:ce:62:d0:d5:a0:d3:72:8a:
         04:40:fb:63:96:84:15:83:17:af:d9:7d:7d:8f:6a:34:92:c6:
         25:7c:9b:81:29:ac:2e:ad:f9:ff:61:df:f5:a5:ca:ed:4d:b5:
         ae:9c:5a:ed:78:d4:43:fd:e0:15:12:88:e0:c7:30:35:3e:8d:
         20:1a:1d:65:c5:69:99:0c:d5:6d:05:64:73:18:5a:85:c0:10:
         c9:51:f1:a3:a1:a9:de:ef:ba:71:2c:2d:30:be:33:af:c6:aa:
         04:fa:99:5f:ae:b2:9d:ad:84:06:df:30:ed:11:e0:40:31:5b:
         d5:f6:e4:b1:39:8b:ef:f5:4a:fc:1d:62:02:f3:1f:8a:82:6b:
         15:01:58:d3:7d:4c:81:fb:72:1e:73:c7:2f:22:eb:0a:40:51:
         be:99:73:71:08:fb:98:57:03:74:a8:4c:b0:cc:19:31:79:41:
         58:24:59:97:3c:17:a6:42:ec:37:e5:52:87:a4:3b:45:72:42:
         b1:40:19:b3:64:8b:c8:bc:d5:fb:70:3d:84:21:7e:0d:7c:6e:
         06:5e:8e:c4:e9:5e:b9:eb:c8:99:97:84:5c:6b:5e:62:24:25:
         f5:bf:e9:98
-----BEGIN CERTIFICATE-----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