Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rre9O6ssbDtNRYfOwBogpIIWVAE.roa
File:                     Rre9O6ssbDtNRYfOwBogpIIWVAE.roa (raw, json)
Hash identifier:          Agb7j9Zp5fbXED2uD04dWxSO9wbk+r6KUHnOtKi+fHE=
Subject key identifier:   46:B7:BD:3B:AB:2C:6C:3B:4D:45:87:CE:C0:1A:20:A4:82:16:54:01
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0185C5A0168A9BC0E9CA17D845485F4F6747
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rre9O6ssbDtNRYfOwBogpIIWVAE.roa
Signing time:             Wed 18 Jan 2023 16:04:41 +0000
ROA not before:           Wed 18 Jan 2023 16:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34962
IP address blocks:        193.38.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c5:a0:16:8a:9b:c0:e9:ca:17:d8:45:48:5f:4f:67:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan 18 16:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46b7bd3bab2c6c3b4d4587cec01a20a482165401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:46:75:11:ba:be:a8:04:82:52:e1:98:29:
                    4f:0a:e5:5d:a4:9c:2f:ef:ed:87:89:25:52:91:cb:
                    3f:ec:6b:6f:14:12:8a:c5:f6:7a:1f:9d:e0:48:18:
                    db:bc:17:99:ea:74:53:2f:9e:c5:65:52:07:71:80:
                    dc:6a:af:8c:c5:ab:86:e4:4b:8c:5b:b8:61:7a:cc:
                    be:3d:8d:79:24:fc:e9:93:7c:00:56:21:6b:0e:8d:
                    36:4d:2a:5c:7f:1e:ea:fb:2f:8b:84:12:7e:51:89:
                    73:f1:9f:44:48:d5:e3:94:00:7f:46:2f:b0:1f:60:
                    c9:3f:38:42:de:6f:2b:e7:31:fb:6e:7a:20:f8:d7:
                    ae:89:d1:85:3d:f4:23:18:42:00:0b:8c:b8:2e:d9:
                    47:dd:f2:60:3c:2f:9c:c3:2c:25:56:3f:07:a3:b5:
                    eb:6c:9e:57:bb:17:f9:3f:f9:ed:da:0d:58:82:ab:
                    3f:a6:4b:08:8a:eb:54:89:2c:99:53:15:ac:bc:76:
                    69:46:bb:93:7a:66:08:ee:eb:c6:8e:69:25:02:9b:
                    94:e0:49:4e:f7:90:0e:1a:eb:21:29:86:63:e9:1c:
                    00:28:13:76:f1:74:73:56:f8:34:d9:43:2b:d4:d9:
                    58:c7:c4:46:cc:43:cf:b1:7b:58:23:f6:c7:e5:cc:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:BD:3B:AB:2C:6C:3B:4D:45:87:CE:C0:1A:20:A4:82:16:54:01
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rre9O6ssbDtNRYfOwBogpIIWVAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:60:18:de:dd:18:73:38:4a:25:37:8c:7d:d5:ff:2c:86:
         3b:8d:00:e0:cb:fc:93:78:cd:22:6c:ef:9f:86:e1:ae:b0:cb:
         4a:9a:ec:44:84:e9:e2:55:a9:46:8c:e9:62:a1:43:bd:91:a4:
         30:d5:a3:f7:51:b8:5a:a8:3c:70:fc:ce:53:fb:75:10:d8:aa:
         63:5f:a2:94:c7:0d:8e:ba:20:ff:be:55:dc:a0:81:35:bb:60:
         7b:c7:08:f7:dc:2b:f5:39:66:fd:5a:d5:7a:9c:56:0e:06:20:
         84:9b:72:34:98:7d:fd:4c:93:9e:a9:83:8f:2f:6f:1c:28:92:
         2a:71:d2:36:4b:51:df:ae:e5:32:0f:64:32:4e:87:15:6f:a8:
         72:b3:4e:05:da:f4:8c:e9:f5:fe:05:9b:65:36:cf:02:ea:62:
         4b:a2:80:ed:f1:35:65:a5:c9:4d:0b:09:61:5a:fe:96:e1:30:
         73:0c:d5:1b:45:aa:23:e8:7c:e5:6f:5e:44:25:91:e2:8e:c9:
         79:5a:e4:7c:d4:7a:93:a9:78:82:3a:d9:83:e6:ff:1f:74:f0:
         58:38:9d:dd:f0:6e:cd:64:72:05:f5:fd:80:5d:97:1f:99:0d:
         79:eb:8d:c0:fa:ca:d7:76:a0:2d:ac:2f:20:dd:ab:10:f4:88:
         28:7f:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----