Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UK48UdWa-itWRZ1xTgaiXc3tPMI.roa
File:                     UK48UdWa-itWRZ1xTgaiXc3tPMI.roa (raw, json)
Hash identifier:          VkymU5yLXkYY/YUVJRlM0C+lEt+xdJoGZy4iwTvXElQ=
Subject key identifier:   50:AE:3C:51:D5:9A:FA:2B:56:45:9D:71:4E:06:A2:5D:CD:ED:3C:C2
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01883A8C7A17F5006B74AFF1E0DF448B7C3E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UK48UdWa-itWRZ1xTgaiXc3tPMI.roa
Signing time:             Sat 20 May 2023 19:04:24 +0000
ROA not before:           Sat 20 May 2023 19:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138687
IP address blocks:        194.87.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:3a:8c:7a:17:f5:00:6b:74:af:f1:e0:df:44:8b:7c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: May 20 19:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50ae3c51d59afa2b56459d714e06a25dcded3cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:70:0a:69:4e:f3:4d:cd:14:46:97:6c:d7:
                    73:21:e9:74:59:e2:6f:5b:e2:ee:8b:41:c9:8f:62:
                    a7:1f:03:9b:13:be:db:f1:17:1a:6e:8e:b0:6a:69:
                    0e:b7:4d:ee:05:68:f5:81:ae:6f:b0:cf:ae:86:1d:
                    f0:01:1c:2c:19:16:38:6b:10:fe:5a:a6:80:e9:93:
                    1f:df:15:f4:41:5b:d1:fa:ab:dd:69:a4:ec:24:eb:
                    a9:66:38:09:83:64:5e:4f:f5:18:67:74:b7:ea:32:
                    8e:db:58:6a:1b:86:61:ad:0e:7b:dc:ca:8f:e8:ac:
                    24:b9:cd:7e:11:8b:44:3b:1b:68:07:4b:9a:70:f1:
                    e2:93:fb:20:f1:37:13:ff:9a:7f:c7:7b:36:bf:0c:
                    95:5a:8c:c0:d4:77:03:d2:42:ca:37:d4:73:f0:50:
                    92:f5:15:56:8f:17:b6:f7:63:2d:22:84:4e:a8:53:
                    67:bb:01:ea:bf:94:60:2c:ca:ae:bd:91:1f:5f:1a:
                    ae:09:ba:d6:c5:f3:2a:c3:ad:6d:56:60:64:5d:ad:
                    1c:3b:19:2f:22:f6:5c:ed:be:f4:fc:b3:d8:95:ef:
                    8d:34:c2:65:fb:c3:e0:02:97:1b:63:58:b7:23:01:
                    95:9a:c8:b6:b4:d4:e9:d3:41:c1:cf:70:d4:da:c0:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:3C:51:D5:9A:FA:2B:56:45:9D:71:4E:06:A2:5D:CD:ED:3C:C2
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UK48UdWa-itWRZ1xTgaiXc3tPMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:5c:54:07:e9:29:c9:44:4f:72:74:f3:9e:e4:ba:62:53:
         ca:d1:95:ac:61:29:dd:62:f2:ad:ac:79:1f:31:c3:f4:60:12:
         88:c5:05:a5:ff:d5:40:48:68:27:bb:7c:8b:27:a1:bf:f2:d4:
         eb:05:2c:6d:da:5c:bd:4b:16:ed:d2:6e:4d:a0:ad:3d:4c:6e:
         fb:28:0f:a4:89:18:e6:38:8b:b7:fd:5a:1d:76:14:00:89:9e:
         1b:08:b7:b5:c2:e4:f8:c8:2d:75:a1:2f:9f:12:d6:17:95:2e:
         a3:56:de:3f:b8:f1:18:b1:d8:d6:d9:02:06:22:21:f3:bb:97:
         47:35:32:42:a0:14:f7:a8:68:f0:11:ef:c5:0c:4d:c0:bb:f7:
         d4:a6:fe:e8:c0:67:4f:2a:d3:b2:50:5d:3e:18:53:1a:50:24:
         7d:28:c6:fc:b6:05:af:6d:a6:89:8a:6c:89:ac:85:6a:c6:62:
         6b:08:06:63:c1:90:e7:4d:78:8b:c5:01:ec:ab:3d:87:3f:71:
         ae:7f:49:54:bf:9e:e0:a0:95:67:13:2c:e8:fc:75:0c:87:83:
         1b:0c:62:13:c5:a9:ae:48:0f:1e:42:fc:f0:a3:b3:ed:65:98:
         17:c1:5d:95:28:8f:74:89:44:a0:57:d2:66:9a:9d:8b:c0:42:
         f7:ca:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----