Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k8pp-0P86jslfzkM6FCjU5RCnCI.roa
File:                     k8pp-0P86jslfzkM6FCjU5RCnCI.roa (raw, json)
Hash identifier:          arw0VNnN0DFbdbf7sjy0LXfmsOi5CCEFbGlqguiQNjk=
Subject key identifier:   93:CA:69:FB:43:FC:EA:3B:25:7F:39:0C:E8:50:A3:53:94:42:9C:22
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018A26F191C61D3F43A057DAF22A8DCCFB3B
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k8pp-0P86jslfzkM6FCjU5RCnCI.roa
Signing time:             Thu 24 Aug 2023 09:48:00 +0000
ROA not before:           Thu 24 Aug 2023 09:48:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        217.113.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:26:f1:91:c6:1d:3f:43:a0:57:da:f2:2a:8d:cc:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Aug 24 09:48:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93ca69fb43fcea3b257f390ce850a35394429c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:56:53:6f:30:49:c3:91:ee:36:00:ec:8a:
                    2c:e4:a2:4b:7b:ee:38:1c:31:59:c2:d6:d1:90:92:
                    0f:46:91:a6:b7:f7:ef:1b:7b:e3:52:e2:cd:3e:d1:
                    3c:64:ca:96:2f:e8:bf:54:c9:e8:4c:05:20:2c:a7:
                    e2:ca:e5:db:00:6e:0c:fa:15:e5:d9:96:2f:93:64:
                    67:99:09:c4:6b:ef:31:57:49:13:1c:e1:59:a6:97:
                    65:c9:f7:88:9a:c8:f3:23:0b:0c:e6:e9:f0:97:50:
                    f7:07:bb:4e:66:56:35:80:5a:af:07:f6:2a:c6:1b:
                    b0:b3:d1:f2:c0:45:d4:97:92:80:bb:39:82:df:81:
                    a0:25:15:e3:6a:73:9c:74:bc:d6:20:08:6f:a9:77:
                    2d:25:cf:e4:ce:3d:52:fd:ca:8f:79:64:bf:d4:14:
                    87:18:e0:e8:97:8b:15:cb:4a:84:ef:78:38:4f:11:
                    0a:69:1a:75:f5:30:da:77:91:3f:ee:fd:56:fe:49:
                    be:fd:c7:1e:e7:22:1e:a8:ff:6d:bf:2e:d8:be:81:
                    cb:8c:22:8e:c4:8c:da:78:a8:27:a9:30:b7:6d:ea:
                    b2:e6:2b:ce:83:d7:2b:22:ff:81:10:a2:1a:a1:b4:
                    96:c6:fa:d8:f5:c9:0a:4c:db:49:b4:9e:d2:92:0d:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CA:69:FB:43:FC:EA:3B:25:7F:39:0C:E8:50:A3:53:94:42:9C:22
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k8pp-0P86jslfzkM6FCjU5RCnCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:75:2b:d4:00:f5:f8:1b:18:8f:3b:ea:6d:b3:ba:12:90:
         64:e5:4a:0e:03:82:d7:d3:e2:8a:87:50:fa:02:c1:6f:74:9e:
         0a:65:67:07:2c:50:7a:3e:54:6f:37:9e:2b:50:e6:35:57:55:
         6b:62:90:c2:fd:3b:b9:33:86:28:a6:e6:18:41:75:af:ef:ed:
         1f:7b:a6:ea:19:7d:1e:b7:47:d9:54:39:3a:58:14:53:57:51:
         89:03:1a:94:5b:39:54:7f:18:01:74:d4:47:60:e0:79:40:81:
         0a:9e:0e:1e:58:7e:b6:3f:e2:56:2c:47:6e:e3:13:1f:73:58:
         c4:48:dd:a7:d3:34:71:f2:ad:4a:53:c2:8e:36:1d:d5:39:39:
         9f:20:aa:fe:47:ed:fb:5e:4e:2c:74:ca:32:9b:0f:dc:ed:f5:
         a6:83:69:45:7b:1b:1c:70:06:72:4c:e9:8d:8c:c8:32:ad:25:
         74:1f:da:5f:f1:99:a9:ab:90:2e:59:d6:4e:7d:bd:1e:70:ca:
         65:d9:bd:07:70:89:5f:f3:55:4d:a0:12:a0:4b:d7:55:0b:b2:
         6a:4f:df:c7:74:97:a8:ab:eb:87:c4:79:0a:a7:96:77:68:34:
         8a:5b:9d:43:f2:52:db:f4:da:60:ba:32:14:71:dd:63:b1:66:
         e8:03:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----