Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa
File:                     jw-u6jAwnvNpgMKW4trayYJ-bXI.roa (raw, json)
Hash identifier:          K7HjiSqibul+aO50hjVTgLcR9R0epogcybeC3xrM9xk=
Subject key identifier:   8F:0F:AE:EA:30:30:9E:F3:69:80:C2:96:E2:DA:DA:C9:82:7E:6D:72
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       0188E3AD2C0619A8AB6868DC16C0739479F7
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa
Signing time:             Thu 22 Jun 2023 15:15:56 +0000
ROA not before:           Thu 22 Jun 2023 15:15:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        91.147.124.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:ad:2c:06:19:a8:ab:68:68:dc:16:c0:73:94:79:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jun 22 15:15:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f0faeea30309ef36980c296e2dadac9827e6d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:d8:47:95:6f:47:99:09:29:d6:d8:d4:f4:
                    1e:d3:dd:96:a6:e5:72:b4:44:c5:21:ea:5b:63:a5:
                    95:12:f2:1a:64:f4:6d:41:60:2f:cf:10:75:7b:a5:
                    24:86:1c:4c:6c:15:89:65:53:63:e0:6a:60:c9:c6:
                    6a:0c:ee:cb:13:21:0f:8a:80:2c:2c:a5:62:e9:bc:
                    39:db:ad:fb:5d:ca:ce:16:fd:15:a8:b6:5b:84:9b:
                    d3:bc:3b:f6:00:57:9e:f7:41:7a:be:39:69:cf:15:
                    23:ed:ab:14:a0:42:c8:6d:77:81:5c:25:36:25:d8:
                    29:ae:c5:5a:c5:33:ef:b0:ef:be:4c:76:8a:83:ca:
                    dc:13:1f:be:34:ad:5c:65:6f:13:20:a3:3c:b5:09:
                    f7:99:c4:21:7e:7d:81:7f:fc:c1:59:31:e1:36:bc:
                    fc:50:4a:07:6f:b3:03:ff:ab:a5:26:fc:7a:17:20:
                    5f:e1:64:fe:5c:2d:03:de:16:48:49:b9:64:c4:3f:
                    a2:7f:c5:aa:b5:46:0b:c3:42:83:9b:34:8f:c0:86:
                    d4:93:fc:42:53:93:09:d9:b1:ef:5e:38:69:45:59:
                    a5:dc:57:7f:1c:0f:43:fe:7a:8e:e9:1c:9a:db:c2:
                    fe:df:6b:1d:2a:2b:68:d5:41:6e:9a:d1:2e:61:72:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0F:AE:EA:30:30:9E:F3:69:80:C2:96:E2:DA:DA:C9:82:7E:6D:72
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jw-u6jAwnvNpgMKW4trayYJ-bXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.147.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:c5:d7:e8:50:79:7f:05:e2:28:23:5b:86:36:61:b3:72:
         ef:47:c6:55:da:c1:17:74:f3:0d:99:5d:d4:ce:1e:09:4f:e0:
         ed:58:ae:2f:0a:b0:b9:0c:9d:53:d7:7f:9e:10:63:2d:a4:5f:
         3b:b2:07:21:2c:dc:92:2f:4b:d4:e6:a8:fd:a0:6b:48:41:b3:
         81:3d:bb:da:9a:df:2e:36:4a:60:18:9e:28:46:65:ba:92:9b:
         7b:f0:69:32:55:1c:2d:10:2b:a4:7a:53:74:ea:f6:d3:13:99:
         c5:05:cc:0c:86:d2:f0:e5:3e:ff:12:18:b6:58:e4:66:4b:2e:
         2f:66:4f:05:c5:66:6a:d9:27:77:7e:18:00:da:1c:c1:42:7e:
         c7:f8:4b:94:d2:fd:50:4b:7d:e0:17:9a:53:68:10:1f:4a:c3:
         48:92:b6:be:73:25:cc:80:64:44:de:bc:7d:b8:eb:45:1c:6f:
         26:d0:2e:75:fa:dd:37:5c:a9:f0:e3:6c:cd:23:0b:3d:31:79:
         23:89:63:16:05:e8:f6:be:b3:56:e9:70:1f:d5:c7:e7:47:f2:
         bf:45:6c:c1:b7:98:6a:85:c8:a5:b0:a5:38:34:01:4f:8a:f7:
         f7:be:9a:26:f4:2f:07:80:c8:94:87:30:74:a6:8f:de:96:b5:
         b3:3b:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----