Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qoWGxdJYxDkQ0gPAQRCyz0DD81o.roa
File:                     qoWGxdJYxDkQ0gPAQRCyz0DD81o.roa (raw, json)
Hash identifier:          pobZ3mDGtKSIlhej6asqC/3ESVyFstK3Xm0bJu57JdY=
Subject key identifier:   AA:85:86:C5:D2:58:C4:39:10:D2:03:C0:41:10:B2:CF:40:C3:F3:5A
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018794722555C41AA3F3CD286D8054819145
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qoWGxdJYxDkQ0gPAQRCyz0DD81o.roa
Signing time:             Tue 18 Apr 2023 12:58:41 +0000
ROA not before:           Tue 18 Apr 2023 12:58:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209043
IP address blocks:        217.113.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:72:25:55:c4:1a:a3:f3:cd:28:6d:80:54:81:91:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Apr 18 12:58:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa8586c5d258c43910d203c04110b2cf40c3f35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:23:3d:b9:e9:2b:70:59:d8:89:24:ca:f8:
                    57:f2:fb:8b:51:03:6f:ef:3a:67:a7:b4:54:cc:99:
                    bc:7a:66:6c:17:71:6b:cc:0e:f4:bc:4b:67:e8:97:
                    19:2c:0c:e7:90:60:58:fe:b5:e2:8a:ee:13:ee:24:
                    bf:14:d1:1b:1a:53:5c:7b:85:55:cf:52:f6:1d:d8:
                    11:32:74:53:f6:58:3c:79:b2:af:ce:98:48:a5:36:
                    79:23:d4:6e:68:f0:50:7a:b5:19:8a:d6:41:b5:4f:
                    9b:e8:80:ce:89:5a:06:09:62:f9:0c:61:ac:57:ec:
                    9a:85:3b:9d:20:80:6d:02:c4:29:85:c8:6d:b0:d6:
                    96:55:9c:03:55:96:11:4b:39:88:22:66:00:90:09:
                    49:d4:14:78:8f:a8:f9:bd:29:21:7e:e3:c4:45:d3:
                    4e:75:1b:0b:41:e7:91:9b:60:6c:92:ee:47:56:a6:
                    5a:a9:90:56:3d:e0:95:58:8c:4a:fa:a9:0f:c1:9c:
                    51:82:13:c1:9f:46:bb:93:c5:38:4b:29:dc:17:01:
                    ba:f9:c8:e0:20:11:0c:cf:b1:38:a7:66:75:7a:c0:
                    ed:47:5c:44:63:8d:55:53:f4:cd:8f:43:9f:15:4a:
                    25:e3:b1:b0:35:37:71:f4:b9:18:f1:ab:be:a7:45:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:85:86:C5:D2:58:C4:39:10:D2:03:C0:41:10:B2:CF:40:C3:F3:5A
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/qoWGxdJYxDkQ0gPAQRCyz0DD81o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:62:2d:ee:47:e7:ab:d3:e2:5b:19:52:9c:e3:e3:3f:16:56:
         a0:4b:13:75:77:11:6b:85:50:ad:2d:f9:d4:cc:e3:07:89:de:
         6d:11:4b:8b:f7:fa:91:f7:80:c8:27:20:db:5c:0c:1d:ed:15:
         a7:31:80:0c:13:4d:30:a7:da:2f:af:a2:cc:0f:ae:5a:cd:10:
         c7:7f:43:3d:f1:10:95:eb:25:9f:65:27:4d:36:fe:db:c3:5d:
         24:b9:66:4f:fc:af:dd:bb:9d:81:ce:49:8d:62:cd:de:55:f7:
         f6:9d:f5:0f:e9:09:a1:12:5a:06:0a:2d:b8:42:82:1f:54:cf:
         40:05:08:1e:72:c8:92:f5:d0:e5:34:27:66:2a:8b:0a:c5:81:
         dd:60:41:49:91:bd:85:67:b0:3f:19:06:91:d7:89:8c:ec:74:
         a4:e8:2b:fe:7d:9c:d5:95:d1:32:b6:cf:51:2d:f3:dc:dd:20:
         02:1b:6d:e5:da:92:16:22:40:ab:a3:95:8f:d4:ce:fd:90:d1:
         04:2e:dd:62:39:d5:3a:6e:44:05:f8:4c:b8:1d:ae:9c:13:b3:
         fb:67:0f:32:ce:ad:0d:a0:47:7e:c7:4b:25:2c:dc:76:19:2a:
         b1:60:00:41:80:18:05:10:09:b8:70:fd:38:35:80:cc:a5:64:
         9d:c4:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----