Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LDa5iV5ceTwj7ErCSfX2JTrAnUc.roa
File:                     LDa5iV5ceTwj7ErCSfX2JTrAnUc.roa (raw, json)
Hash identifier:          SCxBTzJ9NIosDwX6Ss651i2p16A3P9qg1SPhfEaZkcc=
Subject key identifier:   2C:36:B9:89:5E:5C:79:3C:23:EC:4A:C2:49:F5:F6:25:3A:C0:9D:47
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       01856EAFD1C122E0A2C9767629A2A1451DC6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LDa5iV5ceTwj7ErCSfX2JTrAnUc.roa
Signing time:             Sun 01 Jan 2023 18:54:54 +0000
ROA not before:           Sun 01 Jan 2023 18:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210441
IP address blocks:        88.216.186.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:af:d1:c1:22:e0:a2:c9:76:76:29:a2:a1:45:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Jan  1 18:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c36b9895e5c793c23ec4ac249f5f6253ac09d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:7b:39:a4:ad:ef:cf:fd:0a:ed:98:74:b3:
                    34:b8:ea:6f:2a:0e:c1:44:b9:35:9c:5b:fb:4f:65:
                    af:8a:3c:5f:2e:b0:d0:75:d1:5c:9b:07:bd:e3:41:
                    e1:35:c9:07:58:81:9c:89:0a:09:dd:f7:ef:b1:51:
                    32:ab:53:f6:27:65:57:40:1c:ee:a1:a2:82:5f:f6:
                    2c:cb:8a:e4:3c:ec:a5:41:68:69:60:6c:a8:22:08:
                    6d:2f:6c:7f:05:68:da:55:1f:d1:13:2f:ad:31:9d:
                    04:8f:a0:5d:f5:37:98:f0:f1:7e:3d:9c:8e:44:fc:
                    0d:be:6c:57:96:73:73:e9:b2:ef:a8:ea:e0:82:d9:
                    f2:e8:e4:27:ea:b9:47:09:80:a8:4a:15:37:b0:55:
                    0a:33:7f:89:30:c4:43:01:81:ff:36:38:a9:3e:50:
                    a5:70:50:3b:0a:6f:e5:a6:af:44:bc:bd:ce:90:a4:
                    27:5a:78:fb:8c:4b:6c:1f:d7:d1:9e:c1:9c:79:fa:
                    0c:3e:86:6b:08:a1:8b:78:cd:67:60:16:d3:b2:c6:
                    bb:3a:de:57:8d:73:2c:ca:56:6a:92:ab:88:ce:70:
                    6f:6e:af:8d:5b:14:7a:0f:bd:8b:21:35:80:f2:e1:
                    ca:58:f0:34:b9:1c:6a:7e:1c:36:8b:17:ba:2a:ae:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:B9:89:5E:5C:79:3C:23:EC:4A:C2:49:F5:F6:25:3A:C0:9D:47
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LDa5iV5ceTwj7ErCSfX2JTrAnUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:ff:e1:71:e1:09:b6:86:d4:95:5f:8c:5f:86:75:e0:aa:
         82:ef:55:ba:b2:f9:5a:b5:e1:b5:74:b7:d2:7a:92:83:a3:59:
         c5:5e:ce:c8:fd:33:2b:0f:4e:ac:21:c0:b3:de:c8:9a:c6:1e:
         bd:84:45:5e:71:d9:be:d5:a8:38:bf:a4:28:c4:aa:1a:f3:c0:
         bf:1c:fb:7a:8d:4f:7a:ee:01:75:6e:78:bb:2b:e9:a1:ae:17:
         ad:35:1f:ee:4c:99:e2:fc:ce:9f:be:48:ee:d7:d1:e0:fe:6d:
         3d:92:01:f9:63:cb:a7:fa:a3:ed:7b:52:5d:6e:d3:d5:e5:f8:
         b4:8f:d6:49:03:85:52:30:b1:78:3e:01:7b:5b:c6:f4:c9:8e:
         56:6d:c5:a8:48:b0:70:9d:81:27:18:c4:5b:d8:96:c4:cf:31:
         2a:69:70:5f:fe:f0:98:26:94:aa:a8:e7:ea:b5:f2:d8:49:a9:
         ae:97:e8:c3:83:fd:bf:8a:6f:b8:6d:ba:72:ca:ba:1b:a6:b4:
         f4:67:7a:47:8e:a4:9c:96:0b:05:7f:67:af:8c:59:98:26:ba:
         bb:a0:af:fa:04:97:53:9b:a9:67:8d:2b:2d:85:ca:8e:94:64:
         ef:9b:b7:3d:9d:0f:ff:67:18:dd:9e:f9:d6:26:c0:e8:68:38:
         c0:ae:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----