Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa
File:                     _sx21jLFN-9kaDa2DoqgM65oai8.roa (raw, json)
Hash identifier:          i4cTrv/1xoTnOpN/WF8jV+CDu0hlBcrvFeoFhM+54CI=
Subject key identifier:   FE:CC:76:D6:32:C5:37:EF:64:68:36:B6:0E:8A:A0:33:AE:68:6A:2F
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       01886427627B4D6E7E43209C5413BE06A36F
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa
Signing time:             Sun 28 May 2023 20:58:02 +0000
ROA not before:           Sun 28 May 2023 20:58:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59645
IP address blocks:        193.104.168.0/24 maxlen: 24
                          195.191.196.0/23 maxlen: 24
                          2a06:d1c1:e::/48 maxlen: 48
                          2a06:d1c0:dead::/48 maxlen: 48
                          2a06:d1c0:deae::/48 maxlen: 48
                          2a06:d1c0:f761::/48 maxlen: 48
                          2a06:d1c0:a761::/48 maxlen: 48
                          2a06:d1c0:deac::/48 maxlen: 48
                          2a06:d1c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:64:27:62:7b:4d:6e:7e:43:20:9c:54:13:be:06:a3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: May 28 20:58:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fecc76d632c537ef646836b60e8aa033ae686a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:cc:92:98:6e:1b:bf:2d:b2:bc:ca:b6:f8:
                    04:4c:36:4a:2b:4a:72:1a:b2:38:a7:9a:33:19:25:
                    b0:a5:1e:67:1a:e2:14:68:8a:ac:77:98:1c:29:1b:
                    d7:78:95:73:62:5d:be:96:7f:ee:e8:1b:ec:58:ad:
                    dc:c5:1d:13:2f:12:09:60:72:b5:5a:9f:ad:ec:69:
                    df:30:2b:32:f6:ad:71:00:d5:18:8b:b8:6e:e5:d8:
                    e9:42:26:8b:c5:67:a3:f2:df:3c:72:f4:d5:20:ff:
                    ea:56:06:6d:c4:55:b5:98:0f:ac:12:58:8f:8c:8e:
                    34:e1:a1:ba:41:27:5e:ce:8c:4c:ca:1d:e3:96:26:
                    ae:dd:b7:ee:fb:95:98:e1:f9:94:b1:9a:88:d6:36:
                    c1:d3:44:84:54:9e:a7:82:b2:5a:83:4e:e8:ff:2c:
                    0e:66:7c:75:4d:d2:32:bb:79:28:e8:29:5e:21:a6:
                    d1:42:55:1e:cb:bf:42:c1:c6:b3:46:1b:49:d4:94:
                    b3:6d:e0:66:b7:69:51:6b:6a:06:2e:0a:c9:0b:b4:
                    16:39:4f:28:d2:0a:45:c8:87:04:d7:5e:ba:44:e0:
                    d9:79:7e:78:37:e5:97:0c:42:73:cc:ae:74:e7:6b:
                    08:91:2f:57:e1:7c:53:75:b3:cf:f3:a5:a2:7c:b2:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CC:76:D6:32:C5:37:EF:64:68:36:B6:0E:8A:A0:33:AE:68:6A:2F
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.168.0/24
                  195.191.196.0/23
                IPv6:
                  2a06:d1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:16:44:59:25:61:11:52:4f:99:3f:53:4c:b7:2e:31:1d:29:
         16:41:9a:13:20:79:83:3e:02:7a:af:d1:86:cf:31:72:58:56:
         d5:aa:25:22:5d:2e:0d:5f:24:b5:2b:10:01:a9:78:93:29:8a:
         e6:b6:5e:47:9f:c7:8f:21:f1:1a:54:fd:4e:46:85:04:14:23:
         27:2f:a8:46:2d:9b:c5:26:89:65:b0:ee:e1:1e:e0:d6:7b:f0:
         3b:19:a2:e7:15:67:0a:dd:cd:37:af:32:88:6d:49:fa:a7:c5:
         17:b4:aa:6a:54:44:65:16:2f:53:83:17:0b:34:5f:ae:d0:b1:
         a3:02:a0:64:a4:de:30:6d:2c:79:13:bf:27:11:a1:66:b1:9c:
         6d:36:ec:e7:25:3d:e8:63:6c:fb:39:e8:9a:80:a0:d1:dc:c5:
         8f:5c:32:b6:6e:71:ce:4c:a7:24:ac:b6:92:7f:37:ea:72:ea:
         57:f6:96:b0:0e:03:cc:ef:26:9a:d0:b3:52:83:37:00:53:aa:
         3e:1e:f9:19:df:b6:a1:06:d4:6b:7a:ad:d8:39:07:3b:1c:43:
         cd:36:f3:23:87:7d:bd:79:d0:11:c2:49:62:e0:d0:b6:5e:a2:
         4f:00:c9:b1:76:22:45:cc:74:df:a7:ec:dd:fd:da:90:f9:67:
         da:7d:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----