Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5fTdYRydxJ_0PQJ-BYjHVV9q0v8.roa
File:                     5fTdYRydxJ_0PQJ-BYjHVV9q0v8.roa (raw, json)
Hash identifier:          q9deJvITdMLmAPqk6UzAZ5FT09B0hNRwhcKYHlEfQBM=
Subject key identifier:   E5:F4:DD:61:1C:9D:C4:9F:F4:3D:02:7E:05:88:C7:55:5F:6A:D2:FF
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018A8ADB1D6A70DBE9238A7B18E93A05DADA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5fTdYRydxJ_0PQJ-BYjHVV9q0v8.roa
Signing time:             Tue 12 Sep 2023 19:25:30 +0000
ROA not before:           Tue 12 Sep 2023 19:25:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399073
IP address blocks:        5.134.86.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8a:db:1d:6a:70:db:e9:23:8a:7b:18:e9:3a:05:da:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Sep 12 19:25:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5f4dd611c9dc49ff43d027e0588c7555f6ad2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:f2:5e:16:d3:82:55:85:87:51:6f:54:c2:
                    be:63:c0:25:da:6f:80:de:eb:26:04:6b:fb:7a:6d:
                    50:08:64:9f:47:c3:e9:92:86:23:b5:2f:93:e0:cc:
                    03:ba:15:60:5d:da:57:f7:79:b9:9e:63:bf:64:39:
                    5f:13:57:00:df:fd:5e:d1:9c:f2:83:2f:63:b2:db:
                    ba:db:7a:cb:9b:30:2a:39:d6:a5:2b:f5:24:d7:ea:
                    eb:59:7d:d1:20:41:87:72:1c:d7:2a:d2:34:af:bc:
                    c2:ba:7b:e4:88:d0:40:81:a4:7c:05:f9:0e:eb:e1:
                    f0:84:f8:53:98:47:7e:1e:1f:b9:6e:d3:9a:9e:4b:
                    9a:e1:41:6a:74:b2:80:22:8e:bc:b6:81:60:45:eb:
                    09:4e:71:77:8b:ef:40:60:71:89:f2:b7:6c:f6:c6:
                    53:52:06:cc:11:0b:6b:47:fc:df:e5:7b:9c:6d:7d:
                    3b:ba:ae:6e:2a:4b:51:29:a7:75:4a:4e:d1:fc:2a:
                    22:66:5b:68:4f:bb:ff:24:7d:e2:c4:54:74:20:ce:
                    c4:80:68:c0:db:62:ac:5f:82:f4:40:ce:5b:49:37:
                    4b:1c:82:89:56:96:c4:7d:7c:75:49:85:01:aa:4c:
                    c4:e0:05:90:e8:17:3b:f5:80:32:f9:e0:b7:7f:87:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:DD:61:1C:9D:C4:9F:F4:3D:02:7E:05:88:C7:55:5F:6A:D2:FF
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5fTdYRydxJ_0PQJ-BYjHVV9q0v8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:fc:bf:0a:4b:7d:e4:ff:62:e2:5c:e7:45:1d:a8:c0:ae:
         75:f1:81:e2:ac:15:40:d8:f9:96:db:c7:9a:81:83:d1:92:61:
         2e:45:e5:89:b9:90:7c:85:a6:5a:9a:ba:4a:fe:1f:df:5f:90:
         08:3a:0c:e2:40:26:d4:8b:b2:55:56:e4:1a:19:ce:3c:49:2b:
         63:34:d3:73:e7:a2:52:18:63:05:d4:ae:5f:b7:29:55:aa:69:
         00:5a:9e:d8:87:5c:52:4b:cc:d9:a8:80:80:97:ba:c8:f2:71:
         96:9d:51:91:7a:07:eb:86:85:6b:96:0c:c8:6d:0d:98:01:2e:
         4a:2b:52:16:75:4f:6b:36:54:cd:4c:a7:63:14:1f:0f:25:63:
         07:ea:21:51:9d:fb:21:ba:b7:bd:ff:1e:07:44:61:16:dc:bf:
         89:28:8b:ec:96:91:1c:4f:9d:98:1f:eb:3a:a8:10:07:c7:fa:
         0e:7a:cb:64:4a:03:bd:84:63:a2:6d:b2:cb:c8:40:62:15:0f:
         5e:4c:12:b3:ca:aa:2a:42:1d:79:65:2d:84:aa:c9:0e:c7:d5:
         aa:5e:aa:c7:29:a4:d1:d9:48:17:76:ca:bc:50:57:be:41:89:
         8b:72:d8:68:6d:8e:85:4a:42:f1:7d:9f:72:e1:28:db:78:06:
         8f:c7:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----