Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e7IRRsgEX03i6ypI4-y32z3a_5E.roa
File:                     e7IRRsgEX03i6ypI4-y32z3a_5E.roa (raw, json)
Hash identifier:          Lh8O3FH+q2QAfWmf2seO+cpDEPcGHviL8kax6bWLDdY=
Subject key identifier:   7B:B2:11:46:C8:04:5F:4D:E2:EB:2A:48:E3:EC:B7:DB:3D:DA:FF:91
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0188E36045F5D0E8EF727AFB401FE5FC04EE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e7IRRsgEX03i6ypI4-y32z3a_5E.roa
Signing time:             Thu 22 Jun 2023 13:51:57 +0000
ROA not before:           Thu 22 Jun 2023 13:51:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        5.105.38.0/24 maxlen: 24
                          5.105.39.0/24 maxlen: 24
                          5.105.79.0/24 maxlen: 24
                          5.105.91.0/24 maxlen: 24
                          5.105.90.0/24 maxlen: 24
                          5.105.92.0/24 maxlen: 24
                          5.105.93.0/24 maxlen: 24
                          5.105.108.0/24 maxlen: 24
                          5.105.223.0/24 maxlen: 24
                          5.105.222.0/24 maxlen: 24
                          5.105.224.0/24 maxlen: 24
                          5.105.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:60:45:f5:d0:e8:ef:72:7a:fb:40:1f:e5:fc:04:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun 22 13:51:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bb21146c8045f4de2eb2a48e3ecb7db3ddaff91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:65:d5:35:de:24:1b:51:9c:cd:98:05:1a:
                    65:03:0c:12:e5:77:14:43:0b:d4:88:06:06:23:02:
                    27:aa:33:2c:1d:c9:f2:d0:5c:8f:a7:5a:1e:5e:63:
                    37:7a:a8:ae:f0:9d:26:4c:df:f7:92:02:c5:8c:05:
                    c8:f8:3c:6f:af:53:e2:f4:9a:bd:2b:ea:1d:a4:3a:
                    21:26:ef:c3:86:6d:47:01:2a:5f:8b:7f:bc:7d:24:
                    32:b5:7e:07:c4:a1:78:bc:c4:70:82:5c:f9:9c:92:
                    bf:db:07:57:6d:31:95:73:c0:96:da:fa:cd:8b:45:
                    be:5b:d2:16:dc:9d:9e:39:6d:f8:81:9e:8a:9f:75:
                    8f:a1:cc:8c:6d:4d:8b:36:56:e5:d5:70:8d:3a:c3:
                    09:46:2a:b4:39:1f:ee:8e:98:99:f0:d6:0b:2c:d4:
                    77:1e:b0:72:8e:41:1f:5f:d9:e5:f6:04:e0:32:83:
                    85:16:86:43:0f:76:58:d2:4c:92:17:0b:6e:e0:20:
                    53:78:3d:dc:b2:d1:fe:7b:81:bd:0a:2f:f7:e4:18:
                    90:5a:06:cd:40:13:98:19:0a:d4:b8:7c:43:8b:fe:
                    9e:02:31:7e:11:54:9b:be:82:32:be:9d:ac:1b:51:
                    0e:39:99:f4:f0:e9:e2:9a:91:4b:e1:0e:23:06:79:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:11:46:C8:04:5F:4D:E2:EB:2A:48:E3:EC:B7:DB:3D:DA:FF:91
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/e7IRRsgEX03i6ypI4-y32z3a_5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.105.38.0/23
                  5.105.79.0/24
                  5.105.90.0-5.105.93.255
                  5.105.108.0/24
                  5.105.222.0-5.105.225.255

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:05:15:3d:cd:27:5c:e1:74:08:39:ec:62:6a:b4:5c:3b:
         2e:36:fc:08:62:b0:73:6f:93:63:91:7c:9d:7a:14:87:dc:27:
         ab:a7:7e:79:2d:38:a2:08:95:1d:26:0e:36:58:0b:82:cc:7d:
         be:e3:4d:f9:ec:95:fd:24:37:4b:b1:6f:9b:df:8a:c4:13:eb:
         58:72:c1:5c:81:e9:8f:1b:a4:fc:41:10:dd:43:b4:32:46:f9:
         ba:86:65:db:e1:d5:68:e9:2b:22:32:23:14:44:23:b5:56:e5:
         1f:6b:c0:fa:23:8f:26:76:c3:e3:a5:85:53:09:f7:c3:ec:e7:
         4a:28:1a:42:b7:bb:1d:b9:20:9c:a6:59:7f:8c:eb:a6:cc:a7:
         cd:3e:5d:93:eb:80:56:0c:93:87:df:da:3d:60:6b:c5:d4:18:
         7e:2c:4b:32:59:1d:1a:6b:f9:47:f3:e3:d2:ff:4d:51:2e:8e:
         58:5f:dd:87:7b:16:62:21:b5:2a:1f:5f:c1:e3:2c:11:54:52:
         3b:a7:85:51:1c:5c:66:07:a7:21:0f:7c:71:84:6e:20:de:c7:
         01:ef:eb:a2:cc:b2:fa:7b:72:da:2b:32:d1:80:bf:fd:3d:57:
         7f:7c:4a:52:37:1d:b8:c4:25:a7:2a:55:6e:a9:39:2a:b9:4a:
         6e:2b:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----