Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa
File:                     tceyzKS-nlxsHHy9q_O46ykO_rU.roa (raw, json)
Hash identifier:          tBjIiFqPmDHFNzPeKSU/Lu6FYH9ISk5xN1iYmiUcisM=
Subject key identifier:   B5:C7:B2:CC:A4:BE:9E:5C:6C:1C:7C:BD:AB:F3:B8:EB:29:0E:FE:B5
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       01856DD3F19F64686B82859B077821B4BF74
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa
Signing time:             Sun 01 Jan 2023 14:54:44 +0000
ROA not before:           Sun 01 Jan 2023 14:54:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9136
IP address blocks:        194.39.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d3:f1:9f:64:68:6b:82:85:9b:07:78:21:b4:bf:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Jan  1 14:54:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5c7b2cca4be9e5c6c1c7cbdabf3b8eb290efeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:10:28:37:fb:41:f1:d1:0e:0d:9d:21:49:
                    f3:32:95:ad:f2:8e:65:52:2c:8b:2c:7f:63:26:f1:
                    8a:4b:ed:b1:c7:88:34:53:eb:09:70:14:e2:e8:1f:
                    87:00:12:f3:cd:43:f7:e0:f5:3a:60:28:62:fa:f7:
                    d9:09:01:8e:48:2f:dd:c8:af:63:52:78:8c:82:bf:
                    df:7d:b6:45:4f:44:16:a0:53:52:9c:38:82:e9:a8:
                    2f:16:91:f1:60:83:3c:cc:3b:55:79:ec:c9:e2:90:
                    fa:47:48:bf:dc:62:7c:cf:bf:1d:31:21:b4:9e:2a:
                    d5:d7:a0:d4:c9:07:41:3c:af:c7:5a:7f:a3:d5:d7:
                    47:27:80:39:03:c0:e7:81:da:ae:29:34:38:23:f2:
                    59:ca:9f:00:86:3e:36:67:0d:9c:e0:34:7e:87:f9:
                    b6:f0:0a:5c:61:97:1c:06:db:1a:2d:a8:37:c5:15:
                    f6:fa:16:64:e5:7a:53:74:01:e9:26:36:c0:28:35:
                    bf:3c:c3:d6:75:82:1f:ad:8d:de:4e:0e:0e:6a:60:
                    8e:e1:d6:1b:ff:8b:d8:88:45:86:28:81:a6:d1:b2:
                    cc:24:19:91:1a:5a:83:c6:65:7b:df:3c:cc:b3:99:
                    43:3e:e8:75:79:7c:f6:7a:c4:86:20:7e:0a:bf:78:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:B2:CC:A4:BE:9E:5C:6C:1C:7C:BD:AB:F3:B8:EB:29:0E:FE:B5
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/tceyzKS-nlxsHHy9q_O46ykO_rU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:bf:c5:f1:94:cb:a5:28:b1:f6:ba:4c:04:28:11:88:ce:50:
         34:f4:4d:90:fe:e8:a6:16:87:bc:75:2f:5d:83:9b:11:56:74:
         f8:d2:c1:5a:26:6b:4f:b8:71:88:33:19:19:25:cf:00:f4:1b:
         c3:07:5d:50:91:be:d0:68:1b:93:89:86:25:79:f9:85:dd:e5:
         ce:91:7e:5a:d8:b4:78:db:94:24:00:96:09:3a:13:1f:ea:9c:
         a5:20:67:01:e4:3d:05:bf:30:98:c0:3a:ee:5a:73:96:15:0b:
         21:41:d6:39:f7:78:3e:8d:a1:b4:95:f4:99:d8:68:8c:c9:f3:
         ec:2e:8d:1a:b6:5c:06:36:45:26:75:7f:4c:79:04:91:f8:e5:
         88:99:d3:06:c9:e0:88:db:d8:93:8a:a9:78:aa:62:28:41:91:
         8c:ca:be:9a:d5:a7:1a:00:e6:b5:43:92:13:c0:11:b9:75:a0:
         79:42:76:12:7f:dd:5f:a5:b1:7c:36:26:a8:55:58:11:09:23:
         38:4f:dd:9c:0f:e4:9c:c1:aa:6b:0e:e4:36:8c:2f:f2:f4:28:
         6e:3b:91:38:6d:f5:07:dd:72:1f:e3:34:3b:6e:bc:19:ed:45:
         b2:9e:5e:08:5d:5b:f9:de:a7:0e:92:58:14:93:8d:f5:fe:cf:
         53:b6:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----