Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9LrEfWo5C1RKr7mm1VT3bSCv32c.roa
File:                     9LrEfWo5C1RKr7mm1VT3bSCv32c.roa (raw, json)
Hash identifier:          kI5eHcGT73C6buPO5duWi7XpLEWXl5GzZzggFyBAEUk=
Subject key identifier:   F4:BA:C4:7D:6A:39:0B:54:4A:AF:B9:A6:D5:54:F7:6D:20:AF:DF:67
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       018A630B132398864BCD26D107A51B001F67
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9LrEfWo5C1RKr7mm1VT3bSCv32c.roa
Signing time:             Tue 05 Sep 2023 01:53:04 +0000
ROA not before:           Tue 05 Sep 2023 01:53:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     397966
IP address blocks:        192.144.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:0b:13:23:98:86:4b:cd:26:d1:07:a5:1b:00:1f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Sep  5 01:53:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4bac47d6a390b544aafb9a6d554f76d20afdf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:fd:a5:72:07:99:fb:43:b2:3b:a5:48:93:
                    d7:8e:14:b3:19:ae:a9:75:a8:8a:c9:3e:45:10:95:
                    ce:88:2b:4d:fa:22:b3:aa:4b:73:93:b2:1c:d7:bf:
                    f3:ff:96:a1:d4:b4:85:5d:9a:7c:bf:64:dc:05:24:
                    c3:c3:0e:52:34:3c:62:f9:c3:30:af:fb:e9:8c:f8:
                    7c:b6:fb:db:93:e7:8a:cc:67:af:0d:7f:bc:55:40:
                    1e:f4:e7:7b:18:e6:cc:34:ba:20:65:3d:e1:aa:35:
                    69:54:e1:d8:a8:1b:99:8e:60:38:a5:4a:43:e8:c6:
                    98:31:4e:e1:61:3e:c7:9f:01:9b:d3:4d:52:2a:44:
                    5e:85:67:d5:a7:26:34:b2:9e:f0:21:31:a5:d4:27:
                    d2:3a:a0:09:57:6c:f6:20:47:65:49:3d:a9:b9:f5:
                    2d:68:8e:89:8b:bc:7d:d5:78:40:30:bc:1b:f1:ef:
                    b0:db:28:43:a5:18:da:b8:e6:0f:d2:7a:4e:3e:bc:
                    85:71:94:bc:94:6a:0e:7e:e1:9a:2b:c4:78:22:42:
                    ec:23:8f:82:4a:de:db:dd:eb:db:80:3d:95:6e:03:
                    e8:20:ea:9c:fc:99:eb:98:2d:93:3a:30:3a:7a:17:
                    b4:b7:ac:14:20:55:e8:0d:c9:56:02:58:20:cf:7f:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:C4:7D:6A:39:0B:54:4A:AF:B9:A6:D5:54:F7:6D:20:AF:DF:67
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/9LrEfWo5C1RKr7mm1VT3bSCv32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:30:70:7e:d5:97:82:65:06:09:9c:f4:48:a5:dc:69:0e:76:
         e4:7b:7e:01:3d:98:e9:16:5e:7a:26:bd:71:f7:fb:cf:b1:28:
         19:42:29:52:1a:91:ad:55:e2:52:9a:b1:ab:3e:d4:05:09:de:
         39:29:f2:8f:ab:62:39:72:46:4e:ce:06:ec:4d:f9:b3:17:24:
         45:bd:c1:ce:20:1f:a9:c5:23:bc:bc:1d:13:c6:40:3d:d7:ee:
         c0:1f:bc:04:e7:b6:42:7f:5c:0d:b7:93:dd:1c:86:05:9b:bd:
         3f:2c:c0:37:07:9b:55:0d:32:43:e5:88:2f:fd:8e:d2:1c:0e:
         0c:fe:e2:2b:0d:22:77:1a:ad:40:3a:2b:b1:f5:5a:1d:c7:87:
         e7:dc:0f:a3:cc:61:ff:48:64:51:b8:5b:9f:ce:a5:6e:f9:13:
         9e:48:b4:16:ce:c6:50:48:58:db:3c:a5:a6:62:26:96:16:13:
         da:d2:7c:dc:8c:ec:d5:58:b5:99:b9:c5:00:da:72:26:e6:60:
         bc:51:70:00:f7:0b:05:f6:50:62:1a:92:a7:67:35:1b:f8:5a:
         54:47:36:e7:08:d8:7b:8f:e3:2c:4b:8f:41:57:0a:1f:f4:97:
         29:f8:d3:f6:5a:da:aa:a5:0b:25:57:08:50:92:a2:b7:29:95:
         e8:76:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----