Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5TX8UbJHXr4DrCoSHEzgQt8wtc4.roa
File:                     5TX8UbJHXr4DrCoSHEzgQt8wtc4.roa (raw, json)
Hash identifier:          zyNXSjX/sVRhXYQ75bb8S8FJls+jW0N2wtT7uTfRyLA=
Subject key identifier:   E5:35:FC:51:B2:47:5E:BE:03:AC:2A:12:1C:4C:E0:42:DF:30:B5:CE
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018588CA12532C010D369ED7C449AF814D08
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5TX8UbJHXr4DrCoSHEzgQt8wtc4.roa
Signing time:             Fri 06 Jan 2023 20:33:42 +0000
ROA not before:           Fri 06 Jan 2023 20:33:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64080
IP address blocks:        212.192.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:88:ca:12:53:2c:01:0d:36:9e:d7:c4:49:af:81:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  6 20:33:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e535fc51b2475ebe03ac2a121c4ce042df30b5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:cf:6f:3e:05:0f:cf:10:6b:4c:90:36:38:
                    ef:b5:fc:25:5b:05:c8:05:5d:57:3a:df:a0:53:d5:
                    f1:cd:9f:b5:52:42:fb:0e:b9:5a:b2:89:1a:35:56:
                    b4:e1:09:06:34:83:75:8d:5d:f1:dd:89:6f:e0:c7:
                    3e:f1:95:bd:b4:1e:d3:b6:0b:57:6e:7a:6c:ff:be:
                    f9:09:11:60:ab:e0:82:8a:95:93:2c:4d:78:33:13:
                    2b:f6:4d:c2:0a:db:30:2d:65:f3:c7:fe:a6:ac:dc:
                    3f:f2:a1:61:9a:15:0c:53:79:cb:b8:f8:4f:30:fd:
                    90:4b:ea:e3:a4:c1:7c:8d:ed:d3:e8:51:0b:49:2c:
                    a2:a4:1c:a0:d9:ae:3b:30:09:2c:56:b0:22:46:f1:
                    ec:7d:13:80:bc:4f:b7:6d:19:0e:4b:e6:cc:10:25:
                    60:0e:aa:8a:a1:e4:34:bc:af:cf:18:54:5f:71:b0:
                    f5:d9:4b:2a:c4:55:15:59:f1:5a:aa:11:35:d3:83:
                    ff:b3:10:b3:1f:b8:8c:61:5e:5a:92:62:b7:57:0b:
                    03:69:37:ab:13:42:52:f9:29:3f:89:83:8d:ac:de:
                    84:6c:1b:44:48:d1:60:ab:73:0d:5e:86:44:bb:ba:
                    35:fe:5f:28:59:dd:1f:31:0b:77:98:9a:85:97:1c:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:35:FC:51:B2:47:5E:BE:03:AC:2A:12:1C:4C:E0:42:DF:30:B5:CE
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5TX8UbJHXr4DrCoSHEzgQt8wtc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:43:88:6a:12:03:42:63:39:2d:13:4d:fd:7e:1f:0e:d3:
         cb:a4:7f:39:8f:e6:14:b2:18:8a:7f:0e:a6:c0:f4:cf:7f:5a:
         e1:9c:c5:6e:42:33:25:3f:4f:57:57:e6:ab:89:e7:89:e1:74:
         80:d4:4e:c0:95:64:30:6c:e5:d7:65:e2:03:0d:2b:b4:4a:05:
         a1:0e:af:f7:c7:e0:da:ec:35:3a:8b:2e:d9:a9:96:a0:34:a5:
         89:c2:fe:0c:b3:c2:5a:65:05:e5:ea:59:47:e0:92:48:31:5e:
         86:28:e1:63:88:fc:f2:f1:cd:33:38:ec:de:66:a9:88:87:1a:
         d0:35:31:c9:c9:66:2f:91:11:1c:cf:0f:a7:cc:c5:f1:84:64:
         80:10:4b:18:71:44:44:c0:66:53:e2:e5:96:c0:7b:cc:ce:ed:
         7b:26:a0:3b:a4:83:fe:66:7a:41:77:71:4b:f1:51:a9:5f:44:
         e6:6c:29:e8:4c:9c:40:c5:40:26:fe:0b:68:32:af:80:df:e2:
         e2:f6:47:ca:4b:4c:f8:ce:29:e0:16:e2:e5:7c:c9:97:1a:45:
         60:61:ea:f4:51:43:2c:77:42:c4:e5:bb:f8:77:36:5e:fd:7e:
         2b:ec:ff:cd:99:e0:b8:2f:a0:bf:3a:4d:1c:da:c3:16:65:d1:
         ca:20:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----