Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1-s3YJhYyhA8V2ubonlnKRfs7ZE8.roa
File:                     1-s3YJhYyhA8V2ubonlnKRfs7ZE8.roa (raw, json)
Hash identifier:          GuO2rH0PJLj0Uv7MfYKxx+jzDr0m4kxkbE0F/ruYXBw=
Subject key identifier:   FA:CD:D8:26:16:32:84:0F:15:DA:E6:E8:9E:59:CA:45:FB:3B:64:4F
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       01860DD55D245CDBB9D67F4E34807BF2D26E
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1-s3YJhYyhA8V2ubonlnKRfs7ZE8.roa
Signing time:             Wed 01 Feb 2023 16:35:32 +0000
ROA not before:           Wed 01 Feb 2023 16:35:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5405
IP address blocks:        94.103.180.0/24 maxlen: 24
                          2a11:4140::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0d:d5:5d:24:5c:db:b9:d6:7f:4e:34:80:7b:f2:d2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Feb  1 16:35:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=facdd8261632840f15dae6e89e59ca45fb3b644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d0:96:8e:39:df:04:0f:9a:67:85:62:31:f5:
                    a8:3c:43:2d:00:f2:06:f1:e2:75:10:63:21:92:de:
                    bd:b4:09:a7:5e:59:0a:10:de:78:19:10:e3:08:e0:
                    72:b7:89:38:75:3e:d1:19:07:52:c0:db:b4:aa:00:
                    db:44:1d:69:7d:1e:af:db:c1:47:22:17:b5:67:97:
                    af:4a:89:18:0a:8d:88:e3:9c:95:78:c2:8d:d6:4e:
                    77:eb:6d:ac:bc:a0:b6:cf:0d:b8:85:23:1b:1a:6a:
                    3d:1a:cc:34:ac:bf:e2:6d:8c:eb:0a:66:97:bb:23:
                    dc:0d:49:8f:65:ec:16:d7:52:92:88:82:a9:71:c1:
                    1c:91:0e:18:1f:f5:88:90:74:24:95:40:4c:e2:39:
                    e8:1d:39:cf:80:48:c4:4b:12:25:c8:23:c5:ec:c7:
                    b1:4e:1b:bc:65:d6:42:38:65:2f:f3:5c:22:f1:a6:
                    13:02:4b:8c:5d:ca:7c:51:80:f2:1d:ca:1a:05:84:
                    40:6a:08:bd:3f:da:09:64:64:43:9b:1a:95:8c:0c:
                    66:9e:82:13:8f:63:72:3f:09:ca:76:0d:8d:fc:cc:
                    ae:c9:4e:8f:64:f2:9d:42:38:7e:c3:be:5f:52:16:
                    94:6c:75:e2:b9:dc:96:bb:9e:95:28:26:91:60:d0:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CD:D8:26:16:32:84:0F:15:DA:E6:E8:9E:59:CA:45:FB:3B:64:4F
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1-s3YJhYyhA8V2ubonlnKRfs7ZE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.180.0/24
                IPv6:
                  2a11:4140::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:6a:42:84:d1:08:68:06:ee:c5:31:a0:42:2e:9a:11:b4:
         03:be:4a:ed:6f:8f:72:ad:f0:e3:e6:fb:7b:0f:07:c3:68:e8:
         3e:9e:d4:c1:27:1b:93:5a:de:93:55:e4:0b:0a:85:43:db:a2:
         6d:96:16:d2:88:d2:33:50:b1:d4:32:ee:bc:5c:a5:f5:d0:6e:
         5a:41:44:88:1e:82:38:37:9b:55:69:43:2c:0a:bb:7b:49:ce:
         31:9c:82:59:fd:66:d7:52:bc:b0:28:88:68:32:d4:61:c0:42:
         46:47:bb:30:5b:53:60:18:8d:64:da:f8:34:2b:43:50:89:f0:
         71:f1:46:c2:9c:73:e2:ad:1b:67:a5:8a:a2:eb:56:74:ff:f0:
         0a:bf:a6:79:72:1c:d0:2c:0b:47:e3:73:2a:39:f8:ae:89:9a:
         49:d2:f5:84:f9:ab:72:88:34:40:88:92:7c:28:c7:d8:8e:9d:
         13:86:7b:15:49:0d:1b:e6:96:a2:57:3b:85:41:87:35:cc:52:
         78:72:77:e2:00:83:cc:08:ac:01:2b:2b:7b:b1:91:ab:4a:03:
         11:e5:e0:c4:3e:39:ac:23:00:4f:fa:a3:0c:94:b4:60:f2:95:
         3f:28:6e:1e:0a:c3:24:14:c2:4f:f2:97:ab:f0:2a:9d:26:b1:
         b5:9c:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----