Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/IDi_o0FvLATHtRDAcg_UqYTx8SU.roa
File:                     IDi_o0FvLATHtRDAcg_UqYTx8SU.roa (raw, json)
Hash identifier:          j6Di8ZHasslLpQtk//PYp24hE/QbkgGXGIxXXo+czII=
Subject key identifier:   20:38:BF:A3:41:6F:2C:04:C7:B5:10:C0:72:0F:D4:A9:84:F1:F1:25
Certificate issuer:       /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial:       018A40602DCE6FE2E3EA865F495C9CF5DBBE
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/IDi_o0FvLATHtRDAcg_UqYTx8SU.roa
Signing time:             Tue 29 Aug 2023 08:19:19 +0000
ROA not before:           Tue 29 Aug 2023 08:19:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48083
IP address blocks:        193.116.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:60:2d:ce:6f:e2:e3:ea:86:5f:49:5c:9c:f5:db:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
        Validity
            Not Before: Aug 29 08:19:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2038bfa3416f2c04c7b510c0720fd4a984f1f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:71:5f:23:29:84:6d:79:be:9d:a6:79:5f:
                    76:ce:31:f1:1a:a1:3a:72:94:6a:a2:63:58:ac:da:
                    6a:a0:b7:a0:91:5f:72:0c:a6:62:f0:c7:07:ae:ad:
                    6c:2f:75:9e:ef:5e:26:8b:d7:0e:77:f9:63:9e:62:
                    b7:9b:76:61:b0:b9:1e:9b:ae:a2:40:bc:aa:dd:38:
                    1a:14:42:fb:cf:0c:44:4e:d9:c4:c9:95:f7:c5:98:
                    20:13:7d:ae:97:ec:0f:48:fc:35:bf:2a:d2:84:7a:
                    ef:2e:fb:21:13:42:2a:35:76:9d:7f:d7:8e:bc:5e:
                    16:3f:7c:77:09:ca:c4:02:ab:c8:41:b5:77:08:39:
                    bd:ed:96:1d:72:85:a9:ba:1e:cd:67:a3:3b:f1:68:
                    86:7f:96:5a:b4:aa:f1:29:48:4d:0f:88:cc:ac:b4:
                    cd:00:14:51:3e:e5:c6:d5:e8:f7:ed:b5:84:bb:a1:
                    e0:97:bb:05:61:22:78:d3:7c:75:47:b1:1a:a7:f3:
                    d5:03:04:9b:c6:8c:41:e2:ac:ba:e1:05:27:62:5f:
                    27:94:10:06:d8:ce:37:41:72:cf:32:37:4a:de:af:
                    96:af:0d:38:50:35:eb:42:0f:20:56:95:fd:50:0f:
                    11:1b:1f:0e:39:ed:30:37:c5:d7:3b:50:6f:64:ab:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:38:BF:A3:41:6F:2C:04:C7:B5:10:C0:72:0F:D4:A9:84:F1:F1:25
            X509v3 Authority Key Identifier:
                keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/IDi_o0FvLATHtRDAcg_UqYTx8SU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:07:47:9a:ae:c5:16:2a:0f:73:0b:a8:69:a9:f2:6e:00:db:
         82:32:c8:41:16:5b:f5:34:f7:e5:60:38:fd:4e:7d:b7:1b:9d:
         0b:0a:83:aa:2f:7f:26:f0:b9:b7:50:27:fe:39:4e:4a:bf:d6:
         60:3f:83:24:5c:e6:59:86:22:71:59:e4:c6:a9:3d:46:91:b1:
         4e:1a:fe:0d:e3:c6:3f:86:78:70:b9:5a:24:64:b2:45:57:b6:
         e6:f8:db:87:21:a8:8d:12:8f:51:fa:fc:52:b4:6e:cb:46:86:
         27:29:c7:67:66:f7:c2:79:4f:72:4b:6f:2e:6b:83:05:0a:6f:
         3c:20:d4:bc:90:8d:7a:19:d4:15:30:6d:b9:8c:4c:29:72:49:
         f1:00:4f:35:df:1b:a5:a5:aa:54:5f:02:27:35:9f:8a:5a:a0:
         7f:87:69:4f:f5:88:ec:3b:3c:f9:7e:fa:c5:75:3d:ea:3b:32:
         e3:70:28:80:8e:9d:a1:d4:40:78:1d:87:4d:5b:c3:1f:38:a5:
         8a:32:0e:c7:dd:1b:03:89:cd:ad:2b:36:0d:3b:2f:23:b3:fb:
         d6:ba:14:21:95:a8:38:f7:78:2d:f6:71:a3:7c:e7:a0:c7:d2:
         92:21:7b:bf:5e:94:da:b4:5f:d7:a4:86:8f:f7:26:63:77:5e:
         ca:7c:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----