Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa
File:                     FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa (raw, json)
Hash identifier:          ZygKMWAjuHJipaXbYKAvolll2Tm+V0FOJ0j6UX89u+0=
Subject key identifier:   17:24:2A:3C:56:70:8F:3C:A4:7F:E6:65:99:72:F3:5D:8B:2E:E7:E0
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01882E3A0940E1AB6B84E3B6D4D945A9DA27
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa
Signing time:             Thu 18 May 2023 09:38:55 +0000
ROA not before:           Thu 18 May 2023 09:38:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198652
IP address blocks:        163.5.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2e:3a:09:40:e1:ab:6b:84:e3:b6:d4:d9:45:a9:da:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: May 18 09:38:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17242a3c56708f3ca47fe6659972f35d8b2ee7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:b9:38:98:2e:3b:cd:cf:82:24:07:a7:6a:
                    cf:a1:8e:f4:36:d5:38:74:06:8e:22:fd:69:82:6d:
                    98:44:84:d8:e0:8a:97:f8:17:1c:47:07:37:75:bf:
                    2a:e7:34:d6:41:c8:8c:1f:a9:51:cd:4e:e2:38:92:
                    bc:ab:d5:4c:21:01:ad:15:57:b5:b2:fa:3c:7f:f7:
                    49:61:83:82:40:a8:00:33:1b:9e:3f:4c:81:6d:6a:
                    b0:0e:51:bf:4a:97:1f:6d:6e:2a:e9:b4:be:a4:20:
                    b3:4b:7e:de:d5:d5:ec:13:09:c9:6c:93:55:a9:5f:
                    67:07:1c:5f:69:ba:e9:73:f7:bc:5d:dd:63:ac:33:
                    31:51:e1:13:e2:6c:1d:b1:eb:4f:47:60:bd:a9:73:
                    5b:bf:7a:6c:17:ee:92:7d:d0:4a:f2:71:8b:23:c0:
                    27:df:7b:18:8c:c6:0e:41:42:8c:c4:5a:f5:0f:7d:
                    eb:09:f5:2f:d2:e4:cb:54:28:0c:d1:d5:8b:8a:ae:
                    9a:17:3f:e4:e1:98:47:1a:db:4d:3b:e4:c1:a2:a1:
                    2d:0a:96:47:6b:2c:8a:fc:82:5f:46:0c:63:9c:7a:
                    b7:53:cd:83:ce:72:d3:66:28:73:35:d9:db:90:f1:
                    7e:b5:0b:90:93:58:05:2d:88:88:7a:79:e9:03:1b:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:2A:3C:56:70:8F:3C:A4:7F:E6:65:99:72:F3:5D:8B:2E:E7:E0
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:02:8e:2b:3b:e5:1f:7d:6a:87:48:d6:b1:5c:d8:00:4c:
         78:51:59:23:73:8b:d0:49:9d:a3:f1:a9:49:26:b2:e3:08:e1:
         43:2c:90:90:78:d6:e6:c3:c1:43:11:6f:46:6a:62:45:07:3b:
         bd:b9:ba:35:c5:5c:f5:95:4e:45:35:0e:1e:62:a3:3c:07:93:
         6f:7c:d3:60:28:b9:d0:0b:f4:db:7a:87:fb:07:af:97:69:ff:
         41:29:52:62:9f:81:a2:49:e5:3c:ea:49:90:76:b7:0c:27:9c:
         16:7f:18:02:00:12:c1:86:74:11:4b:36:72:c0:d3:ce:73:02:
         91:40:80:6f:82:82:52:d4:dc:a1:06:f5:6d:d5:2b:95:99:ea:
         fb:ea:3a:c8:31:b1:ad:4c:c1:3b:c1:66:9f:87:32:7e:7f:71:
         c1:67:08:64:07:39:fb:dc:59:cf:f5:b6:86:e8:62:3f:41:bc:
         3a:a8:b9:17:94:f3:bb:da:a5:34:48:64:09:1b:32:e6:12:1a:
         95:6c:36:88:30:7a:a6:a8:10:c9:4d:e3:4f:22:f5:9c:a4:c1:
         9a:2f:25:85:c5:90:3c:6e:bf:58:89:b4:78:82:74:15:bd:a8:
         f3:7c:c2:e6:04:f7:a2:ee:3a:9e:34:bd:60:e3:58:35:d1:22:
         70:4d:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----