Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/wFmsZrUvNWU8qR_ekfF2V6kEYJQ.roa
File:                     wFmsZrUvNWU8qR_ekfF2V6kEYJQ.roa (raw, json)
Hash identifier:          ygF95xqrrbTJLycBkmgxRsmm3B2+NTsAydHNZV7z4QA=
Subject key identifier:   C0:59:AC:66:B5:2F:35:65:3C:A9:1F:DE:91:F1:76:57:A9:04:60:94
Certificate issuer:       /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial:       01856BC1274035AABEB8EC63C0944B4FCF08
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/wFmsZrUvNWU8qR_ekfF2V6kEYJQ.roa
Signing time:             Sun 01 Jan 2023 05:14:58 +0000
ROA not before:           Sun 01 Jan 2023 05:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62217
IP address blocks:        5.102.170.0/23 maxlen: 24
                          2a00:1c10:104::/48 maxlen: 48
                          2a00:1c10:5:200::/56 maxlen: 64
                          2a00:1c10:103::/48 maxlen: 48
                          2a00:1c10:101::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c1:27:40:35:aa:be:b8:ec:63:c0:94:4b:4f:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
        Validity
            Not Before: Jan  1 05:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c059ac66b52f35653ca91fde91f17657a9046094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:44:d8:45:85:9c:f1:01:7e:c8:b1:77:31:
                    6e:ab:97:e6:c7:e1:8f:2e:6f:14:65:f8:64:5a:38:
                    1a:7f:eb:9c:3a:e2:ff:7d:7a:18:11:05:f8:77:92:
                    d9:f7:68:f1:46:b8:26:67:4a:66:b4:d4:c1:f8:5d:
                    de:30:79:02:77:fc:ad:e4:05:d6:8c:49:bf:68:75:
                    b1:6e:22:af:5b:9a:f2:11:58:f4:d0:f9:9b:13:a9:
                    24:d1:b3:bd:26:fe:8a:1d:d8:39:ac:b0:82:54:ca:
                    cd:93:6b:98:f1:8f:51:b8:aa:3c:be:db:9b:63:5a:
                    95:c9:02:a2:fc:9e:a0:4f:61:13:25:c9:90:c2:fc:
                    fc:9c:58:c4:b0:11:41:68:0d:b1:cb:6a:4f:27:8e:
                    e8:5a:83:53:d9:31:69:94:f2:7a:54:df:e2:d7:08:
                    d9:4c:4f:36:26:ed:49:58:5b:e0:e9:17:6c:33:df:
                    08:a1:f4:a7:8d:aa:a7:40:dd:76:a5:17:87:eb:45:
                    37:0e:ff:37:32:d3:d1:4d:51:f4:1a:be:52:df:6b:
                    ad:45:5a:59:01:fa:b1:8a:17:54:83:12:36:08:a0:
                    13:49:5d:e5:23:5f:b5:0f:f1:43:00:5e:df:ec:03:
                    75:2f:6b:cc:05:17:1a:ad:54:84:10:96:8f:b0:9a:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:AC:66:B5:2F:35:65:3C:A9:1F:DE:91:F1:76:57:A9:04:60:94
            X509v3 Authority Key Identifier:
                keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/wFmsZrUvNWU8qR_ekfF2V6kEYJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.102.170.0/23
                IPv6:
                  2a00:1c10:5:200::/56
                  2a00:1c10:101::/48
                  2a00:1c10:103::-2a00:1c10:104:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:32:da:34:28:f4:d5:45:75:16:7c:a3:b6:a3:7b:46:76:
         e6:0b:f0:71:26:f8:67:13:68:69:ba:f0:e1:d4:11:bc:8d:5b:
         cd:ae:7d:9d:92:49:08:d2:fc:45:43:4b:8c:1e:53:11:c0:ac:
         08:ea:6b:75:34:71:79:a9:a5:58:8e:08:53:44:60:a7:85:1f:
         b2:aa:cb:ac:53:a5:be:a0:dc:ad:ae:ae:40:c8:98:7a:1c:7d:
         75:26:e9:44:02:e7:99:14:f6:94:d6:38:a7:af:ab:23:d9:c0:
         59:50:12:1e:71:23:88:b1:60:69:30:34:fc:c1:59:e0:f5:4e:
         92:a3:c7:0e:80:2a:8c:15:42:00:67:b8:28:1b:ce:e6:c3:47:
         96:00:cf:b6:e4:72:08:77:f2:c9:71:81:a8:97:fc:c3:32:cb:
         82:1b:b7:29:c1:ec:00:ed:18:04:fb:90:70:b9:25:e5:ca:43:
         53:b9:16:b2:75:38:11:10:cf:f7:5f:fc:50:71:31:dc:32:68:
         03:2c:00:e7:36:4e:21:2a:69:8c:99:c0:bd:3b:fc:50:c4:84:
         63:ca:2d:b3:87:74:a4:7e:15:bd:3d:44:72:9d:e6:97:8d:0e:
         d0:30:a3:6b:b9:3d:8c:9b:d9:61:35:46:85:7a:b5:c1:b4:d5:
         c0:03:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----