Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa
File:                     MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa (raw, json)
Hash identifier:          GGjYQXSbIopSlNa5IPLh3pZ34yomNXA44mZg47L5GU8=
Subject key identifier:   30:6D:B1:36:EF:B2:EA:AF:EC:52:A5:7D:46:99:09:D8:D0:72:A3:EE
Certificate issuer:       /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial:       01857246FF71EF5FB03B5E3F3A6BDD575D9A
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa
Signing time:             Mon 02 Jan 2023 11:38:53 +0000
ROA not before:           Mon 02 Jan 2023 11:38:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39305
IP address blocks:        5.183.16.0/22 maxlen: 22
                          2a0e:7400::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:ff:71:ef:5f:b0:3b:5e:3f:3a:6b:dd:57:5d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
        Validity
            Not Before: Jan  2 11:38:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=306db136efb2eaafec52a57d469909d8d072a3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:28:c1:a1:78:0e:5a:a5:80:aa:d2:5d:3f:
                    45:f7:02:34:83:b0:f6:c3:74:0b:66:1e:52:1b:84:
                    4a:23:dd:ad:b1:74:72:c1:02:fd:5e:89:bf:b6:68:
                    c8:b5:2f:94:29:2c:91:cd:2b:55:d4:ef:50:67:d3:
                    9f:d2:f5:48:36:85:f3:8d:47:56:fb:ba:29:7e:8e:
                    80:b6:ac:b5:94:23:41:b9:4d:37:9d:4c:a4:92:eb:
                    23:e6:55:06:64:89:3b:51:78:b1:d7:da:f2:94:84:
                    ac:77:72:76:30:f1:1a:00:bd:04:0a:e9:1a:f8:44:
                    d6:2c:ac:2a:cb:dd:9d:a0:b5:43:47:87:e6:7d:ae:
                    42:5f:f6:b4:4c:2e:82:79:78:0b:27:8a:9b:4b:2c:
                    31:a9:1f:4e:78:a0:05:23:62:7b:7b:c5:05:d1:6c:
                    7b:1c:0a:51:55:72:8e:f4:a8:20:07:4f:db:86:a6:
                    48:a9:af:c1:bf:fa:2b:69:69:f5:cb:3b:08:65:14:
                    be:be:38:65:44:3a:67:e4:96:c2:23:d9:66:66:67:
                    16:68:7b:8a:54:02:96:40:af:94:17:1d:8d:a6:fd:
                    4e:34:31:5d:69:54:23:41:4b:16:a1:bf:0b:5b:2c:
                    2f:14:5a:7c:4c:d6:fe:c7:4e:6c:ef:1b:3f:5d:04:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6D:B1:36:EF:B2:EA:AF:EC:52:A5:7D:46:99:09:D8:D0:72:A3:EE
            X509v3 Authority Key Identifier:
                keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MG2xNu-y6q_sUqV9RpkJ2NByo-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.16.0/22
                IPv6:
                  2a0e:7400::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:69:9a:38:09:23:71:ac:5a:1d:4d:60:dd:cb:41:a5:38:
         9f:1e:3f:28:ae:3e:22:e4:95:7d:31:7b:87:09:5a:17:1d:db:
         e0:bb:0d:cd:e4:a7:77:37:5b:60:e7:e2:7d:f8:b1:aa:2c:da:
         1f:0d:a6:6e:0e:90:6a:8c:33:df:db:a0:53:ab:5f:b0:70:02:
         14:d0:d2:07:c2:6d:5e:79:6e:e5:a8:94:01:4a:43:9f:ac:db:
         ce:1e:01:dd:b5:01:33:ab:42:65:ed:2a:fb:bd:12:e2:f5:66:
         0d:15:5c:84:37:de:ae:07:57:19:c8:e9:af:c4:7c:8a:5f:70:
         ef:7a:5a:03:43:65:b6:29:b4:f5:53:83:73:57:7a:0d:82:fe:
         40:b8:b2:57:cd:74:60:1c:15:84:04:8b:ef:53:00:cf:bd:bd:
         a3:54:f6:c8:d1:3a:a0:7f:d7:b2:c5:87:50:b2:25:b8:d6:ba:
         04:9c:0c:91:e6:84:27:5b:58:62:08:25:9d:49:1a:f2:1c:4b:
         36:88:da:f9:ff:0d:23:93:49:3a:00:99:73:c0:85:86:bf:fa:
         75:0c:ad:02:9c:11:fb:e5:3b:d0:94:e4:5a:0a:aa:40:61:fc:
         3e:35:80:f0:13:97:9d:99:d5:20:2c:c4:8d:17:a3:db:9a:dd:
         32:26:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----