Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/X6016_giJDlfe5r5CAf0XHLuiBA.roa
File:                     X6016_giJDlfe5r5CAf0XHLuiBA.roa (raw, json)
Hash identifier:          g2MyqkVyfvMvLKeJkhFbw7khRshK3EV4SqphbZjcLj8=
Subject key identifier:   5F:AD:35:EB:F8:22:24:39:5F:7B:9A:F9:08:07:F4:5C:72:EE:88:10
Certificate issuer:       /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial:       018A8A2AB81E483F2374A2D91C3165A81138
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/X6016_giJDlfe5r5CAf0XHLuiBA.roa
Signing time:             Tue 12 Sep 2023 16:12:50 +0000
ROA not before:           Tue 12 Sep 2023 16:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34177
IP address blocks:        83.142.144.0/21 maxlen: 21
                          91.90.96.0/21 maxlen: 21
                          62.193.32.0/19 maxlen: 19
                          82.210.0.0/19 maxlen: 19
                          78.31.40.0/21 maxlen: 21
                          83.118.192.0/19 maxlen: 19
                          80.245.16.0/20 maxlen: 20
                          178.16.160.0/20 maxlen: 20
                          176.57.32.0/21 maxlen: 21
                          95.141.96.0/20 maxlen: 20
                          82.210.32.0/19 maxlen: 19
                          94.228.176.0/20 maxlen: 20
                          62.244.112.0/22 maxlen: 22
                          5.133.68.0/22 maxlen: 22
                          62.244.117.0/24 maxlen: 24
                          62.244.119.0/24 maxlen: 24
                          212.106.96.0/19 maxlen: 19
                          195.15.128.0/18 maxlen: 18
                          185.5.108.0/22 maxlen: 22
                          185.81.52.0/22 maxlen: 22
                          62.244.84.0/22 maxlen: 22
                          62.244.88.0/23 maxlen: 23
                          62.244.86.0/23 maxlen: 23
                          62.244.89.0/24 maxlen: 24
                          62.244.96.0/22 maxlen: 22
                          185.19.48.0/22 maxlen: 22
                          159.180.224.0/19 maxlen: 19
                          78.109.240.0/20 maxlen: 20
                          185.41.4.0/22 maxlen: 22
                          2001:ab8::/29 maxlen: 32
                          2a01:4e00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8a:2a:b8:1e:48:3f:23:74:a2:d9:1c:31:65:a8:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
        Validity
            Not Before: Sep 12 16:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fad35ebf82224395f7b9af90807f45c72ee8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:56:41:4e:c4:27:90:83:61:fa:1f:ca:22:
                    6c:45:26:e2:a9:af:88:f3:62:6c:5c:74:a6:21:e4:
                    df:42:85:7e:7d:b7:84:b2:f7:94:c7:13:e7:04:3d:
                    75:cf:7d:95:ed:67:16:ec:83:d2:63:5a:7d:6f:3f:
                    ec:8a:58:e4:43:07:5d:39:4a:29:bb:2c:a8:05:c8:
                    ff:4e:6a:8c:c6:24:05:0f:db:74:e5:26:f4:71:6a:
                    6f:2a:e3:a2:56:d2:ee:b5:da:3b:4e:4d:bd:e2:81:
                    b3:76:bc:0d:86:10:3a:70:fb:18:d4:98:ac:67:90:
                    3f:f1:31:a7:df:69:89:ed:a1:b9:f9:1f:d8:eb:04:
                    89:15:4c:65:98:f8:22:32:a0:05:f4:95:ef:a9:22:
                    d0:bc:1e:9a:46:68:cb:7f:f2:80:0f:63:49:55:8c:
                    b3:35:b2:de:ee:b7:f6:97:10:7f:7a:7e:11:33:9b:
                    75:fb:df:03:3a:8f:43:60:a5:be:0e:ad:a4:2e:17:
                    25:41:63:63:0b:ad:f3:25:06:ff:94:a2:d7:56:11:
                    1d:0f:21:da:1e:25:1c:ce:de:1e:f9:17:bb:8f:a7:
                    e2:74:45:a0:23:64:20:8b:3a:13:dc:de:b7:57:1d:
                    43:a7:2b:eb:35:aa:14:27:45:58:25:7e:30:58:cf:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AD:35:EB:F8:22:24:39:5F:7B:9A:F9:08:07:F4:5C:72:EE:88:10
            X509v3 Authority Key Identifier:
                keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/X6016_giJDlfe5r5CAf0XHLuiBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.68.0/22
                  62.193.32.0/19
                  62.244.84.0-62.244.89.255
                  62.244.96.0/22
                  62.244.112.0/22
                  62.244.117.0/24
                  62.244.119.0/24
                  78.31.40.0/21
                  78.109.240.0/20
                  80.245.16.0/20
                  82.210.0.0/18
                  83.118.192.0/19
                  83.142.144.0/21
                  91.90.96.0/21
                  94.228.176.0/20
                  95.141.96.0/20
                  159.180.224.0/19
                  176.57.32.0/21
                  178.16.160.0/20
                  185.5.108.0/22
                  185.19.48.0/22
                  185.41.4.0/22
                  185.81.52.0/22
                  195.15.128.0/18
                  212.106.96.0/19
                IPv6:
                  2001:ab8::/29
                  2a01:4e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:f1:ac:76:f2:87:b1:5f:30:c8:7b:e0:b0:1a:a5:3f:e7:
         83:a6:7b:ea:aa:c4:0b:2a:db:f3:b7:4f:59:61:1e:e9:16:99:
         38:2c:15:97:9e:8a:92:28:5d:bf:a1:d9:db:33:7f:47:1b:66:
         6c:84:18:5b:41:28:97:50:79:73:9a:9d:9f:7f:2f:10:1d:23:
         ac:0d:78:cc:65:20:19:1e:09:51:43:e4:0a:83:38:11:35:13:
         1c:59:33:93:dc:21:5e:57:63:eb:a9:34:c7:20:a4:b8:a3:73:
         84:28:f0:90:ff:7c:6c:f4:b0:c8:ce:77:75:4d:a1:2f:0d:91:
         ff:53:55:35:4f:2f:e0:6e:8b:b8:67:f4:7d:cb:c8:12:77:51:
         f6:2d:90:5e:b9:61:b5:05:a3:72:e1:75:30:7e:b1:a9:54:77:
         d1:da:54:12:47:30:38:bc:ad:6e:89:5a:1c:0a:0a:30:1a:86:
         1b:5d:67:c8:4f:44:e1:d1:25:11:cd:28:19:ab:a6:48:db:e2:
         f1:06:08:f5:49:04:61:d2:11:26:c6:d9:9e:e4:7a:1c:aa:57:
         ba:99:cb:81:46:af:76:69:03:85:16:92:7b:e6:4c:e9:c9:78:
         3b:55:80:db:84:3d:5e:c7:e4:95:0c:b7:bd:ba:a9:c4:9f:52:
         65:4b:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----