Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9cXp-W3z6_bHUnGdorrpGPlXy2I.roa
File:                     9cXp-W3z6_bHUnGdorrpGPlXy2I.roa (raw, json)
Hash identifier:          4aX0Uewk2N0FVRNFVuIFxqNngWvrqjROuFBgKjAhpa4=
Subject key identifier:   F5:C5:E9:F9:6D:F3:EB:F6:C7:52:71:9D:A2:BA:E9:18:F9:57:CB:62
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0188328BFA637E44ACD7CFB351E5B1D0E76A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9cXp-W3z6_bHUnGdorrpGPlXy2I.roa
Signing time:             Fri 19 May 2023 05:46:54 +0000
ROA not before:           Fri 19 May 2023 05:46:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        84.32.244.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:8b:fa:63:7e:44:ac:d7:cf:b3:51:e5:b1:d0:e7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: May 19 05:46:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5c5e9f96df3ebf6c752719da2bae918f957cb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:11:23:d4:88:52:af:53:6b:c9:b0:c4:be:
                    32:5f:af:ab:f8:33:68:bb:0f:1b:28:9d:29:e5:cf:
                    67:2d:04:eb:af:01:6c:48:32:36:be:3b:86:66:8f:
                    04:dd:cf:d3:cd:7b:ca:4c:9f:0c:49:8d:65:c8:39:
                    00:43:68:21:1a:0c:95:e0:ab:5c:24:7c:77:16:ec:
                    aa:d6:6b:ed:43:84:e0:f0:a9:9e:68:66:a2:fb:d7:
                    cb:b4:c0:be:5a:22:0f:a0:f3:60:d0:ee:79:32:38:
                    53:b4:bf:58:6a:92:8c:26:41:f4:79:de:1a:d2:bc:
                    bb:f9:83:87:8f:1a:f8:24:fa:06:70:b9:f3:b0:36:
                    a5:eb:d3:2b:bd:a8:53:5c:5c:0d:20:a9:f5:ac:b4:
                    ee:ee:27:4e:df:f6:f8:a6:6a:a7:8d:16:00:c3:5c:
                    6c:12:cb:a5:67:95:6f:2e:46:c4:2a:c7:12:aa:23:
                    db:8d:45:ac:fc:46:cb:a9:6f:b9:ed:de:64:95:42:
                    14:d3:61:c7:d6:0f:a9:a7:6c:f7:9a:a0:eb:3c:7f:
                    91:12:36:77:29:ff:fb:ef:e5:89:29:81:ad:13:ce:
                    e8:45:ea:43:23:ee:9f:f2:c9:c4:2c:f7:2a:68:c4:
                    6b:3d:3b:53:96:57:b9:60:36:20:0b:6f:c5:6c:32:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:E9:F9:6D:F3:EB:F6:C7:52:71:9D:A2:BA:E9:18:F9:57:CB:62
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/9cXp-W3z6_bHUnGdorrpGPlXy2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:19:14:02:f6:0a:bd:f9:21:39:b3:1b:b5:a3:6b:e2:6a:
         84:32:22:ac:fa:ee:e9:68:58:30:cc:df:13:43:d2:3a:aa:e4:
         5b:d0:5a:fa:74:7a:bd:1d:ae:cf:13:2d:53:d4:10:6f:65:97:
         9e:9f:c5:55:5e:44:fa:43:63:86:ec:c2:65:fb:1b:30:64:3c:
         73:88:19:34:69:d8:42:2c:6f:e7:ab:5e:ce:ac:c7:87:35:f3:
         6a:db:b6:af:4f:fe:61:6a:96:14:66:37:99:c8:28:70:26:68:
         cb:b5:5b:38:50:b3:f5:16:3c:87:31:22:93:d3:c6:21:47:48:
         3e:ef:30:28:fd:3f:89:75:c6:05:d9:a4:60:0d:ce:30:28:d0:
         94:4f:88:39:1c:aa:a9:8d:e2:46:04:ae:3c:6b:13:4e:b7:90:
         00:32:24:38:35:15:5d:42:f4:cf:00:86:36:ba:e9:13:60:8f:
         43:d2:ce:3c:2f:82:58:d5:ba:c1:29:d9:f2:7a:24:66:b5:b3:
         01:1f:c2:eb:4d:a1:ab:66:bb:7a:38:90:66:50:cd:1d:3e:62:
         96:0d:30:21:fc:fc:7d:a1:5b:f9:cb:78:12:d5:97:e1:7e:bb:
         a2:09:a4:c5:9a:bb:d6:59:9f:09:26:94:02:d7:75:33:02:d7:
         38:0a:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----