Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/F5v3wlCLAmyM3wwC7HeNDSdohQw.roa
File:                     F5v3wlCLAmyM3wwC7HeNDSdohQw.roa (raw, json)
Hash identifier:          0405F3/OSBmEG/6daXhdpa/cqQI7eKknDm1SoP8rcAQ=
Subject key identifier:   17:9B:F7:C2:50:8B:02:6C:8C:DF:0C:02:EC:77:8D:0D:27:68:85:0C
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       01869CAA90BAB967D5EF1739193ECF07A444
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/F5v3wlCLAmyM3wwC7HeNDSdohQw.roa
Signing time:             Wed 01 Mar 2023 10:14:29 +0000
ROA not before:           Wed 01 Mar 2023 10:14:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209372
IP address blocks:        31.204.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9c:aa:90:ba:b9:67:d5:ef:17:39:19:3e:cf:07:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Mar  1 10:14:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=179bf7c2508b026c8cdf0c02ec778d0d2768850c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:95:9e:51:c0:aa:cc:c1:18:13:6b:9b:39:
                    42:91:ea:29:8e:ee:c7:b6:c4:3c:36:00:9d:01:9a:
                    e6:f8:a9:91:05:5d:d6:c6:01:eb:45:98:35:d0:b4:
                    ff:8e:57:bd:12:fd:7e:a8:51:50:bd:06:e3:81:45:
                    46:da:e0:8e:9e:27:e9:d1:e0:1c:81:78:9f:e5:fc:
                    c9:bb:76:b6:58:4c:56:ac:60:5c:44:82:4e:9b:c4:
                    58:5c:04:89:ff:38:a2:1d:6f:50:0e:61:7e:30:33:
                    09:6f:99:10:a4:cd:8d:2d:58:ed:c3:17:df:4e:1b:
                    49:df:15:6b:a3:78:61:27:36:5b:ba:40:ed:58:5f:
                    95:f0:f4:53:8c:01:27:69:82:6a:dc:62:8b:b4:28:
                    ee:82:db:f8:f0:95:35:c1:cb:30:80:cc:3a:81:bf:
                    25:83:ae:48:71:6a:1c:ae:34:d6:4e:87:d0:58:e9:
                    49:93:3e:c3:29:22:6e:54:8f:78:11:34:48:d2:d5:
                    52:0c:5a:e5:1b:98:d7:d0:1c:f1:51:72:3e:47:76:
                    31:c4:9e:06:7e:b5:3a:95:ae:c1:c7:24:4d:52:61:
                    f7:4c:22:e4:8f:41:66:18:b7:0e:86:88:1e:f0:81:
                    31:12:4f:f4:35:29:c7:23:de:a3:2c:97:02:bb:a4:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9B:F7:C2:50:8B:02:6C:8C:DF:0C:02:EC:77:8D:0D:27:68:85:0C
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/F5v3wlCLAmyM3wwC7HeNDSdohQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.204.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:a2:14:85:be:53:2c:69:36:e5:30:e7:ef:f1:80:6b:90:60:
         97:26:3f:c7:e0:e8:24:15:fe:c9:8e:7d:fa:63:97:f8:81:b3:
         46:43:d6:b3:3d:db:ff:e5:49:2c:ba:b0:ef:c2:90:7f:0c:bd:
         b6:ce:39:17:1f:2b:ac:a8:a8:17:fb:73:82:c4:c6:ca:67:40:
         4a:b5:fd:46:ad:48:6d:58:07:9c:73:82:71:9e:d1:80:b8:6d:
         9f:5c:a7:6e:80:0f:3f:29:72:fb:ff:ff:c5:b4:64:d6:35:c6:
         4d:b9:2d:1e:08:3c:7c:63:a6:dd:ec:e6:ff:69:58:24:be:88:
         11:4d:d5:e5:4a:55:c5:23:52:56:48:ed:03:d6:71:c5:2c:c6:
         d3:5a:12:ac:19:c0:75:e1:47:d0:42:a5:a0:6b:7b:64:de:9a:
         2e:c8:d1:56:06:a0:96:69:9e:f6:ac:60:b8:ae:b9:e7:d9:4f:
         cf:23:1f:9a:ff:0e:6f:ef:c8:ef:18:c0:8c:3e:ab:15:bf:c0:
         a3:1a:34:0d:b8:c7:cf:7b:82:32:42:7b:47:3d:67:ca:77:68:
         3e:fb:76:a4:7a:cf:09:79:73:48:a2:83:cb:2c:3b:f8:f4:5b:
         e7:ad:09:a3:bc:e8:10:b1:da:31:59:52:c3:1e:8a:5f:21:13:
         8b:4d:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----