Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/33iN7PF5ey4WIijB0y8TSlmjaUQ.roa
File:                     33iN7PF5ey4WIijB0y8TSlmjaUQ.roa (raw, json)
Hash identifier:          l2TBDdkQcoxNDz+qMfBK6LCXoPs3EIg6Igd4hECMO3o=
Subject key identifier:   DF:78:8D:EC:F1:79:7B:2E:16:22:28:C1:D3:2F:13:4A:59:A3:69:44
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0186095FB472DBD9435A5FB58000219789F3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/33iN7PF5ey4WIijB0y8TSlmjaUQ.roa
Signing time:             Tue 31 Jan 2023 19:48:32 +0000
ROA not before:           Tue 31 Jan 2023 19:48:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210912
IP address blocks:        5.105.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:09:5f:b4:72:db:d9:43:5a:5f:b5:80:00:21:97:89:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jan 31 19:48:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df788decf1797b2e162228c1d32f134a59a36944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:c8:7a:1a:97:31:11:47:9e:af:65:f3:b5:
                    b7:9d:53:df:66:ce:4c:d4:bc:72:de:8e:fd:7b:e3:
                    ed:52:0b:fa:5e:28:ed:bd:33:10:25:5c:6c:71:61:
                    8d:3b:96:34:97:36:11:06:9f:51:ab:9b:cf:6f:5d:
                    3d:17:81:8d:9c:7e:0c:6f:87:37:05:f8:ed:6a:64:
                    91:63:09:51:12:29:08:24:60:cc:2e:33:69:c7:fe:
                    ae:fc:72:ac:c1:09:50:53:18:ff:8c:07:b4:f6:e5:
                    20:91:58:27:3c:a2:3a:1b:7d:c6:cb:e5:78:57:60:
                    8d:16:1c:1e:03:03:b5:fa:db:a8:b1:6f:bb:d6:15:
                    b9:a9:b3:c5:0d:c8:ef:9c:f6:70:84:6e:9d:ee:f6:
                    61:b0:47:6c:7b:47:19:58:23:f4:9c:b3:16:08:19:
                    01:14:b0:b9:b5:e2:09:5f:83:bb:2f:fd:15:40:ad:
                    c7:5a:67:4b:b1:34:b9:60:91:e8:00:fb:e5:2c:0f:
                    c8:9e:b0:9d:51:70:b5:f7:a0:20:30:45:5c:7d:9b:
                    28:c6:ab:0b:2a:d3:5d:22:e2:57:09:19:15:51:ca:
                    50:2b:38:1e:fe:b9:72:f3:e0:d8:79:3e:9d:b3:55:
                    57:ce:66:40:9f:d6:60:08:dd:fd:da:f2:51:59:0a:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:8D:EC:F1:79:7B:2E:16:22:28:C1:D3:2F:13:4A:59:A3:69:44
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/33iN7PF5ey4WIijB0y8TSlmjaUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:a8:6b:7b:14:61:6f:4e:b4:7d:02:ad:c7:a4:1f:78:e0:
         5e:b6:5b:ff:fa:b4:0b:d2:f6:e8:da:0e:c7:82:3d:d2:0a:c7:
         11:7e:89:57:36:7c:2a:d0:21:2b:a9:e0:30:99:3d:b3:b7:3f:
         da:e8:cb:99:65:d8:3c:b7:5b:f4:af:80:94:07:a5:9e:df:12:
         75:d1:ff:3b:12:a2:ce:34:59:fa:7d:1c:59:95:ed:a3:06:84:
         0d:a7:d9:b6:d8:88:c9:cf:18:81:df:a1:3a:0c:5f:6c:f1:ca:
         d5:2f:0d:a6:b8:5c:de:1b:93:ed:f3:10:ef:40:14:73:1a:17:
         40:00:fc:df:7a:cc:c0:c4:5e:90:5a:d6:5b:b4:0d:3f:5f:18:
         1f:d9:f5:c8:59:4a:d9:f4:51:4c:0c:2f:0a:b7:38:c6:41:42:
         48:6b:c5:04:01:5e:dc:3e:72:96:3a:33:b3:21:4d:a0:be:75:
         84:8a:60:18:17:6f:51:88:61:9d:b8:46:f6:d5:5e:cf:2c:ef:
         7c:6e:a5:a8:da:3e:02:7f:78:e8:5b:b9:7f:20:2e:7f:e0:db:
         fc:03:28:bf:83:31:02:1d:5b:73:a3:8d:c0:71:f3:4b:67:42:
         35:b5:af:92:c8:64:2b:e3:d9:db:9b:0e:c4:41:58:27:34:54:
         f4:64:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----