Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hRDlLk8K0csnWnvgXIU5Y2kYjrM.roa
File:                     hRDlLk8K0csnWnvgXIU5Y2kYjrM.roa (raw, json)
Hash identifier:          Kp1UbDMao7Xzq0YJTbH+G8+dK0VCVii5iCIClYIwWX8=
Subject key identifier:   85:10:E5:2E:4F:0A:D1:CB:27:5A:7B:E0:5C:85:39:63:69:18:8E:B3
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0188703B769FE6542D0E2D0E87693FD1E736
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hRDlLk8K0csnWnvgXIU5Y2kYjrM.roa
Signing time:             Wed 31 May 2023 05:15:25 +0000
ROA not before:           Wed 31 May 2023 05:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        193.58.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:70:3b:76:9f:e6:54:2d:0e:2d:0e:87:69:3f:d1:e7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 31 05:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8510e52e4f0ad1cb275a7be05c85396369188eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:74:fb:0b:a5:9f:b6:11:39:c1:b1:53:41:
                    b9:4f:d0:43:5a:4d:6b:90:58:a8:95:eb:c0:ba:f7:
                    e4:d2:31:e2:b0:5b:67:3b:1b:07:ba:6e:e7:47:f8:
                    d6:01:c4:ea:f1:df:14:c8:e7:51:07:c7:ef:ad:8f:
                    49:68:c5:18:a8:21:d9:29:2b:b3:63:11:89:f2:40:
                    5f:15:ea:82:96:40:10:76:48:4c:d2:d2:a2:63:e8:
                    cc:64:87:ee:4d:cd:7e:74:cd:a1:4a:b4:b4:a2:4d:
                    11:b1:57:35:48:17:e6:85:36:e1:7b:bd:db:3e:48:
                    c3:bf:f8:ac:cd:53:60:34:f8:61:a5:fc:d1:47:86:
                    f0:5e:36:a5:57:f7:7f:1a:e1:ce:e7:14:77:2a:fe:
                    5c:bd:35:40:86:8c:e8:79:0e:cd:e5:77:a7:3a:08:
                    de:9e:cf:e1:ca:3b:7d:12:ec:7f:0e:b9:74:5e:16:
                    07:4d:06:42:57:36:11:c7:5e:f9:8d:86:e5:aa:ab:
                    d2:19:8c:24:2d:e2:ce:51:ce:d5:36:69:20:31:91:
                    00:3d:6e:9e:8d:79:32:50:0c:5c:ab:83:37:bf:11:
                    aa:f4:a9:ec:93:0f:07:38:b9:42:56:8d:16:16:b0:
                    37:bf:94:4f:89:68:39:f8:26:53:e2:68:17:1a:71:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:10:E5:2E:4F:0A:D1:CB:27:5A:7B:E0:5C:85:39:63:69:18:8E:B3
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hRDlLk8K0csnWnvgXIU5Y2kYjrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:a0:88:26:d6:8d:28:7e:fd:31:51:39:33:6d:4d:de:06:
         f4:08:08:dd:d4:8f:5f:4a:2e:51:ab:6e:49:09:6a:42:5d:15:
         55:ce:2b:9e:bb:a2:2b:45:a5:79:68:23:0d:b8:c1:7e:37:ed:
         62:b9:44:e0:54:d5:e4:35:09:d3:6b:c6:cb:01:8e:07:38:a6:
         a1:99:70:96:bd:b4:3a:46:2b:a2:5c:08:4e:e9:cf:db:e0:67:
         5c:e7:7c:31:1b:f9:6a:01:4b:d5:26:86:9e:3e:49:1c:71:c1:
         b4:7e:53:36:7a:5d:67:bd:5f:0d:24:e5:f8:35:95:c8:2a:ca:
         e8:55:cd:86:12:c8:11:a7:1a:b5:01:39:86:eb:8e:e5:a9:48:
         12:24:09:66:47:88:1c:72:18:4a:28:b5:08:bd:ef:68:bb:32:
         7d:9b:44:0d:cb:bb:3a:d1:33:1f:f0:07:ed:85:b4:39:ff:5f:
         d5:8d:60:70:2e:5f:a2:91:83:ec:83:9f:c8:c8:34:f5:52:5f:
         39:41:65:70:5d:ad:6e:64:af:02:04:6c:f5:93:21:f0:18:b9:
         3f:03:8e:94:cc:11:e0:71:f0:83:b3:e2:8c:d8:9c:9a:dc:4c:
         28:3c:a3:41:a7:83:39:2c:3d:89:7e:3e:d7:f6:9e:5d:e4:bb:
         fc:8c:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----