Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5fGNxmm5a3vUV9A00gYUln2aBE.roa
File:                     N5fGNxmm5a3vUV9A00gYUln2aBE.roa (raw, json)
Hash identifier:          uQiqRXw+/6lnru6yueITTe6/n7m8DNPkoVHucVdwfYI=
Subject key identifier:   37:97:C6:37:19:A6:E5:AD:EF:51:5F:40:D3:48:18:52:59:F6:68:11
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0188C4B6A36AC276C91EF55A4ACF89BE8308
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5fGNxmm5a3vUV9A00gYUln2aBE.roa
Signing time:             Fri 16 Jun 2023 14:58:03 +0000
ROA not before:           Fri 16 Jun 2023 14:58:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        5.105.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c4:b6:a3:6a:c2:76:c9:1e:f5:5a:4a:cf:89:be:83:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun 16 14:58:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3797c63719a6e5adef515f40d348185259f66811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:87:98:c3:43:d4:eb:e2:b4:18:f5:d6:0a:
                    a8:a4:27:7e:36:c2:72:e3:24:05:3b:58:51:31:39:
                    6d:ab:a2:1e:79:b4:fa:da:9d:eb:57:de:40:d3:b0:
                    f5:26:42:4e:ca:8b:d0:f6:43:9d:4a:2a:4f:52:9b:
                    08:a9:e0:54:b8:dd:5c:3b:08:33:1a:31:82:a6:9b:
                    a5:88:33:c3:20:ad:9d:6f:2e:d8:ef:8e:95:2e:2f:
                    ec:51:15:bc:90:2f:33:9d:e8:d0:03:1a:85:a7:68:
                    26:b0:e3:48:3a:01:b1:40:05:c7:c7:ad:12:7d:26:
                    89:06:33:39:b3:96:4d:2d:0b:84:b4:e5:d3:97:a0:
                    1d:77:e8:a6:87:bb:ab:ea:62:d6:8d:58:4b:40:1e:
                    db:45:a9:d6:9b:c8:d4:99:f0:b9:a5:7f:0f:b9:bd:
                    b0:c5:6b:f5:e9:eb:5e:69:6e:8e:f6:8b:fc:5c:f7:
                    34:ed:cd:d1:36:56:88:26:97:ad:98:f2:56:53:55:
                    1c:81:ea:da:20:e3:05:b9:a1:dc:96:a9:09:bf:ac:
                    5c:6a:5b:8a:1d:d3:56:e4:eb:71:40:da:eb:a5:8d:
                    e5:bc:77:c5:62:b3:b1:dd:1c:19:00:a1:57:91:c5:
                    8b:cd:29:90:08:9b:62:1d:e7:fd:7b:5d:0f:fd:55:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:97:C6:37:19:A6:E5:AD:EF:51:5F:40:D3:48:18:52:59:F6:68:11
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/N5fGNxmm5a3vUV9A00gYUln2aBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:13:8a:d2:fb:85:82:4c:91:b5:09:c0:b5:ef:b7:f7:52:8a:
         74:fa:c5:71:38:ab:2e:89:46:3b:7d:06:be:87:07:59:dc:32:
         dd:e0:04:63:7c:d6:36:54:00:1f:9a:3e:b0:b7:39:fa:64:45:
         4c:e6:e1:fa:3c:bf:a9:2a:f9:a6:ff:0b:d0:30:e9:5a:c1:f0:
         5d:2e:d5:d2:5d:eb:48:e9:9f:f9:f3:13:61:f3:da:05:0d:fb:
         82:74:d0:e2:d7:40:4d:3c:08:fb:89:56:a2:23:5b:10:08:85:
         55:40:bb:46:f7:12:d8:e2:35:f8:c1:94:75:74:5c:87:8c:f7:
         b0:51:97:08:de:59:42:5e:44:65:20:ef:e9:7e:10:9b:dc:a7:
         b2:a9:0b:e5:55:d4:09:29:fc:6c:51:82:69:88:f5:d4:cb:0b:
         90:1d:b3:8c:b0:61:be:98:42:e6:85:aa:b3:12:55:97:41:fa:
         da:de:80:ca:8f:f5:15:af:13:fb:b3:92:06:4c:20:22:57:36:
         ba:08:32:34:06:31:de:c3:c2:f2:aa:fa:9c:20:39:a1:ec:64:
         57:5d:a4:1c:a4:88:56:ae:a6:f5:10:7b:4d:19:a8:bf:5e:d9:
         3b:c2:0e:26:c1:ce:a9:dd:63:2f:a6:8c:12:fe:eb:92:72:b6:
         79:4e:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----