Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_KoyMy3cbJYI89Wi9gIvIy5GSPs.roa
File:                     _KoyMy3cbJYI89Wi9gIvIy5GSPs.roa (raw, json)
Hash identifier:          t5xbGX2ErqK1rP+WQemRnydJYNCqOIdxm5jMx+bFJAQ=
Subject key identifier:   FC:AA:32:33:2D:DC:6C:96:08:F3:D5:A2:F6:02:2F:23:2E:46:48:FB
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0187B1CBE426DF63684D3580CAEBB2FC2DC0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_KoyMy3cbJYI89Wi9gIvIy5GSPs.roa
Signing time:             Mon 24 Apr 2023 05:45:42 +0000
ROA not before:           Mon 24 Apr 2023 05:45:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211936
IP address blocks:        84.32.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b1:cb:e4:26:df:63:68:4d:35:80:ca:eb:b2:fc:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Apr 24 05:45:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcaa32332ddc6c9608f3d5a2f6022f232e4648fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:9a:12:87:76:51:4e:df:35:ee:ce:e8:0f:
                    38:80:a4:a7:c1:82:6f:da:32:35:7b:5d:ce:8b:a2:
                    f3:28:e4:2e:a2:91:c6:10:f4:ee:e3:3b:9c:b0:b9:
                    90:bd:64:21:a7:a5:e2:7b:e4:cd:1a:e8:98:15:c8:
                    d7:a7:29:0d:23:08:7b:a5:11:64:bf:da:b6:02:76:
                    40:e0:b7:22:70:2f:b1:2c:fe:a4:19:ee:8e:a2:b1:
                    c6:2a:e8:0b:6d:7b:7b:bb:8c:59:9a:5d:3c:78:bb:
                    83:3c:0f:da:81:c7:9b:a0:ee:64:a8:e3:dc:e3:21:
                    35:05:f7:7e:16:16:85:4d:94:aa:ef:83:30:51:32:
                    cd:c0:ed:5a:3e:92:e4:ad:e9:16:34:70:36:ae:62:
                    b4:8a:15:e7:46:a2:2c:68:a3:89:c7:17:cf:b5:ca:
                    12:53:23:20:17:08:f0:da:dd:30:c5:06:a4:29:48:
                    81:8c:26:ce:d1:ba:ec:73:6b:fa:b5:d6:c4:d3:76:
                    f3:99:ec:1b:9e:18:a3:65:f3:fe:4a:7d:02:ba:ea:
                    9a:92:ca:5e:18:34:0a:9a:36:ac:cd:99:1f:92:57:
                    42:d3:d2:e4:22:ad:38:f4:62:6f:8e:a0:a6:64:cf:
                    f4:5d:3a:36:8e:9b:01:e6:93:d4:00:fe:24:90:e6:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AA:32:33:2D:DC:6C:96:08:F3:D5:A2:F6:02:2F:23:2E:46:48:FB
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_KoyMy3cbJYI89Wi9gIvIy5GSPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:77:8e:0b:d1:e1:6f:f8:f5:e1:92:a0:de:d3:3b:b1:9b:85:
         c1:5e:22:78:90:5c:ed:c9:18:09:f9:aa:8f:67:4d:fe:25:f1:
         b6:5e:db:04:17:e2:27:a4:bb:1e:58:9d:1b:65:68:59:6e:05:
         21:23:97:1b:99:8b:91:dc:d0:c3:af:9f:55:fb:56:e4:6e:fb:
         5c:2a:99:e3:15:db:83:53:a3:23:0a:b6:e7:e8:69:fc:1e:90:
         b1:ec:70:67:d0:13:fb:7f:2f:80:90:05:87:3f:c0:c0:4d:6e:
         eb:34:53:0c:97:62:c8:56:c2:eb:57:2f:36:b7:a2:b1:cb:83:
         56:d9:c1:30:65:dd:c0:8e:a8:81:e4:8e:14:b4:8f:50:fd:c6:
         da:a9:78:80:f5:ca:29:d7:e6:8d:c8:99:0e:d7:d2:d3:79:7f:
         d1:3c:75:25:58:18:b7:cf:32:ac:c5:b9:58:13:35:10:87:97:
         2c:95:30:b2:4d:ee:0f:46:af:71:6f:3e:5c:6d:13:3c:a3:c5:
         ab:12:5e:0f:b8:02:4b:86:94:27:ea:78:dd:ad:6e:8c:76:9f:
         3e:8d:55:b4:09:04:31:50:d2:9a:e2:2e:e6:c1:cf:e0:64:c7:
         58:c9:82:4b:38:2b:0c:ff:7a:58:b3:fe:5e:77:51:49:33:4e:
         5e:95:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----