Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Oin8lm5zIkfbxPpcdAANY8Vvrv8.roa
File:                     Oin8lm5zIkfbxPpcdAANY8Vvrv8.roa (raw, json)
Hash identifier:          85MiKPauopsq+j4wph/8RCnNF1Yxc2DHG0mkJs0eLN4=
Subject key identifier:   3A:29:FC:96:6E:73:22:47:DB:C4:FA:5C:74:00:0D:63:C5:6F:AE:FF
Certificate issuer:       /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial:       01857094FFF584A3C8EB0E9EAEDF09B17A31
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Oin8lm5zIkfbxPpcdAANY8Vvrv8.roa
Signing time:             Mon 02 Jan 2023 03:44:50 +0000
ROA not before:           Mon 02 Jan 2023 03:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        46.226.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:94:ff:f5:84:a3:c8:eb:0e:9e:ae:df:09:b1:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
        Validity
            Not Before: Jan  2 03:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3a29fc966e732247dbc4fa5c74000d63c56faeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:c8:34:74:c3:22:a5:f3:24:07:38:68:e6:
                    71:85:a9:4b:78:be:0b:54:e9:86:27:09:ac:ff:94:
                    c8:15:70:74:d3:28:7a:16:1d:e2:bd:d3:a3:06:8f:
                    b8:49:0c:1d:4d:51:4a:92:ca:d5:98:65:df:df:1a:
                    8e:df:a4:63:c4:eb:cb:b3:55:ec:63:b4:aa:7d:73:
                    ea:97:0d:84:47:77:fb:64:08:b3:c5:c4:f0:3c:a7:
                    78:58:ee:80:45:d1:94:da:bc:70:1c:5b:a2:8c:9b:
                    99:f1:38:9e:7b:be:08:78:ef:a9:3b:c7:42:9c:77:
                    49:5a:78:2c:a8:08:ca:75:b5:dc:3e:53:66:ab:1c:
                    6b:a3:81:75:06:a8:67:34:19:a2:2f:da:0b:5f:de:
                    98:ac:9c:11:b2:ff:33:c0:ac:17:70:51:05:1a:95:
                    6c:c4:a5:27:44:0b:79:51:9b:f5:15:86:93:bf:7e:
                    33:aa:d7:29:d2:f0:f3:95:77:dc:ad:e0:97:93:d3:
                    74:19:07:99:00:05:bb:eb:cb:5c:78:71:88:08:2f:
                    41:23:66:c4:ca:fb:aa:eb:8e:10:7b:46:42:5b:86:
                    1c:97:9c:54:61:16:d9:d3:8c:39:6c:8e:73:97:99:
                    0e:61:d7:8e:59:e7:f8:0c:f9:1c:2c:50:c1:6b:9b:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:FC:96:6E:73:22:47:DB:C4:FA:5C:74:00:0D:63:C5:6F:AE:FF
            X509v3 Authority Key Identifier:
                keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Oin8lm5zIkfbxPpcdAANY8Vvrv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:67:df:88:1d:6d:7c:a5:50:6f:df:5f:0c:76:cf:34:95:
         d0:6d:f0:16:92:43:ad:b5:ed:0e:a8:2d:64:fc:bb:e8:7a:31:
         a3:53:4e:a7:46:90:66:d2:43:6a:4e:1b:70:9c:9c:59:49:e4:
         32:ad:57:de:50:3e:b2:a5:2d:d6:60:e9:5f:1b:de:07:28:36:
         e9:c5:2b:57:0b:b8:29:ee:8f:0e:f4:5a:87:c4:09:55:95:5a:
         a0:ec:c9:eb:71:22:6b:6d:30:6a:9a:aa:ee:e4:5c:06:b8:12:
         4d:3f:57:a7:d1:e9:1d:ae:8c:9e:e0:6d:1f:23:12:bd:b8:bf:
         cd:33:f8:0e:d2:2a:ca:ed:06:bb:71:0f:99:09:1a:5d:6c:b1:
         bc:ba:75:e9:15:65:f3:fe:62:a9:a3:97:49:44:94:a8:f8:af:
         17:4f:85:69:a2:a7:a3:31:da:9f:fe:da:6b:89:f5:5e:5c:54:
         91:ce:61:d7:d0:4b:59:e1:b6:1f:4d:95:bd:5b:b7:78:b8:43:
         95:4b:91:5a:18:ba:61:bc:a6:fa:05:7c:60:7a:a1:21:c0:5d:
         b0:02:69:f3:1f:7b:04:39:6c:e6:33:8c:14:dd:79:36:b2:50:
         c0:68:00:2a:f8:10:d8:ca:d1:57:df:3c:51:4c:0e:24:85:52:
         94:6d:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----