Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5wq9CX29z4weMDAe8OVXR2IGtWw.roa
File:                     5wq9CX29z4weMDAe8OVXR2IGtWw.roa (raw, json)
Hash identifier:          /JcF3Ox/u8tgW0H+dkZohxnfPMr0S0CxC59iFYCYsnU=
Subject key identifier:   E7:0A:BD:09:7D:BD:CF:8C:1E:30:30:1E:F0:E5:57:47:62:06:B5:6C
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0189D481B6BA6AC6EBFA82AB6D2C416C41DC
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5wq9CX29z4weMDAe8OVXR2IGtWw.roa
Signing time:             Tue 08 Aug 2023 09:36:57 +0000
ROA not before:           Tue 08 Aug 2023 09:36:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396881
IP address blocks:        185.255.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:81:b6:ba:6a:c6:eb:fa:82:ab:6d:2c:41:6c:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Aug  8 09:36:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e70abd097dbdcf8c1e30301ef0e557476206b56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:15:cc:5e:19:03:28:19:35:2e:1e:03:ee:
                    78:f7:e0:bb:b1:10:7d:19:83:f0:18:94:7c:27:e0:
                    78:e4:ff:e9:42:a7:bf:7c:a6:24:42:4b:d4:b0:6f:
                    d1:ca:f8:0c:21:0c:c6:16:e5:f9:54:f1:4c:87:7d:
                    87:88:94:eb:db:80:43:34:96:29:12:9f:03:4d:0d:
                    76:a8:12:81:40:0b:85:a0:b6:a4:1e:b0:97:17:59:
                    0d:61:dc:cf:a2:80:ef:e7:55:6a:2f:8f:7e:08:a5:
                    29:35:2e:e6:49:72:5c:c5:21:bb:ee:07:d5:4f:d7:
                    19:c3:42:c1:85:09:b6:51:ed:fe:ab:aa:87:f6:18:
                    9e:a4:16:36:f0:6b:ff:70:72:3c:dd:86:53:cc:eb:
                    b3:d8:fc:b6:d9:5e:4a:47:79:19:1a:8f:f7:c2:f4:
                    1f:ea:af:a4:d9:24:65:4a:fb:6b:e3:d3:ed:45:9e:
                    4c:5b:58:30:7f:1b:91:70:22:d5:6b:5f:d8:a3:7a:
                    22:ab:13:d0:10:9c:48:92:1b:22:42:58:8d:c8:fe:
                    4c:eb:04:e1:25:70:5f:fc:c9:8b:7e:e3:15:16:1a:
                    2a:69:02:7c:90:46:58:8c:10:f3:21:b6:ef:27:aa:
                    7b:00:a9:1f:11:36:b5:57:e4:0e:e2:aa:0a:cf:d5:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:BD:09:7D:BD:CF:8C:1E:30:30:1E:F0:E5:57:47:62:06:B5:6C
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5wq9CX29z4weMDAe8OVXR2IGtWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:de:69:4e:bb:7c:ed:3f:ff:cd:b3:88:30:14:a4:b1:dc:
         c3:af:39:69:46:39:1c:ac:0c:ff:55:16:98:2d:9d:c1:19:a4:
         b1:ad:f8:fa:e0:c4:14:94:c9:46:45:02:3a:68:71:c4:87:35:
         1f:ff:88:41:06:c8:52:4a:86:ce:a3:1b:92:e4:17:3c:7c:1f:
         bf:08:17:9f:64:cb:77:22:81:9b:5f:09:49:4d:bd:dc:5e:bc:
         28:cb:38:9f:45:82:24:a6:ee:25:51:c3:2c:b3:47:f2:22:ef:
         31:f3:fa:98:18:3a:d4:d0:d5:58:43:bf:7d:33:ab:52:58:4a:
         e6:8e:28:b3:62:fc:f7:6a:e0:77:24:a1:41:37:70:c8:ff:86:
         e5:0f:f7:0a:57:e3:b3:7d:c8:90:b5:41:19:bb:15:52:8b:d2:
         b0:f8:bd:df:f3:16:66:69:6e:2e:1e:03:4a:65:d5:c5:59:e1:
         a9:f3:21:98:21:6b:22:b5:29:68:a0:d4:a9:28:72:42:fd:4a:
         73:d7:a5:34:74:7f:41:e5:48:c5:9d:36:02:bf:e6:fe:0f:f3:
         85:81:2b:57:ba:f8:a0:2b:a6:61:8c:07:22:f1:43:e7:98:7b:
         f7:6b:e9:b5:84:8d:1c:d2:dd:25:bb:fe:51:25:2b:ed:d0:5e:
         ad:15:34:8f
-----BEGIN CERTIFICATE-----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