Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/5dJIH4aOLY7N_gmrhsgrklXr1QM.roa
File:                     5dJIH4aOLY7N_gmrhsgrklXr1QM.roa (raw, json)
Hash identifier:          bSMIXa9iD9qsVBQ9+grUFxkVamM8kVm6kdVNeKTEGj8=
Subject key identifier:   E5:D2:48:1F:86:8E:2D:8E:CD:FE:09:AB:86:C8:2B:92:55:EB:D5:03
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       0186BB0391298395C6DA45263DA6634DDAEC
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/5dJIH4aOLY7N_gmrhsgrklXr1QM.roa
Signing time:             Tue 07 Mar 2023 07:40:18 +0000
ROA not before:           Tue 07 Mar 2023 07:40:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8823
IP address blocks:        94.154.2.0/24 maxlen: 24
                          2a07:2680::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bb:03:91:29:83:95:c6:da:45:26:3d:a6:63:4d:da:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Mar  7 07:40:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5d2481f868e2d8ecdfe09ab86c82b9255ebd503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:64:a5:d2:92:32:68:0d:5c:f8:90:57:9e:c8:
                    49:49:99:fc:af:2b:52:bb:e2:fb:ef:3e:d5:ac:2a:
                    ad:46:c3:93:4d:47:ff:71:31:8c:9b:4d:71:bf:c0:
                    05:96:7a:47:99:3e:a9:b6:13:41:a4:1f:1a:ad:08:
                    53:06:58:07:e4:f5:76:66:85:bb:4c:5c:1e:8c:c9:
                    cd:b3:36:48:ba:19:58:4e:d0:a2:c4:70:90:7a:0d:
                    ea:c1:18:df:78:c7:75:2a:ef:4f:83:3c:e2:94:38:
                    a1:09:7f:e0:31:88:d7:47:dd:00:ab:86:4b:6c:34:
                    8b:44:21:80:18:a8:3f:45:a1:aa:9b:44:bd:95:56:
                    d1:e6:9d:6e:65:3f:ac:b7:26:80:4c:e9:61:e9:cb:
                    29:9e:45:72:84:43:2f:bd:67:6b:ec:bf:4a:6b:27:
                    17:22:b0:00:9f:69:36:13:4d:9f:98:ba:ae:c8:c2:
                    3a:cc:71:7d:8d:63:eb:1a:f1:92:b8:e6:29:85:f3:
                    05:a3:7f:44:c5:ab:c0:78:71:10:43:8c:a5:67:5e:
                    9b:a6:be:58:07:ea:aa:25:b8:f0:90:2b:1a:9b:06:
                    d0:be:3b:5a:7f:b9:cb:f5:d2:fd:38:ec:98:2e:94:
                    d4:d5:4c:24:b3:3b:48:33:f2:c9:ce:56:23:4f:9c:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:48:1F:86:8E:2D:8E:CD:FE:09:AB:86:C8:2B:92:55:EB:D5:03
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/5dJIH4aOLY7N_gmrhsgrklXr1QM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.2.0/24
                IPv6:
                  2a07:2680::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:97:3a:8c:a1:58:78:67:60:7d:f4:ad:54:79:a1:1d:e5:
         a5:8f:b3:63:07:01:52:dc:69:40:dd:03:c8:f9:78:fb:cd:dc:
         5d:af:e1:e6:f1:5b:70:c3:d9:52:2a:79:27:6b:fb:78:8f:c6:
         a6:b7:23:7f:6f:9d:24:be:b5:44:52:dc:59:a7:59:60:2b:7d:
         15:f0:00:ac:fd:86:4b:07:1a:a9:1c:0b:b8:d8:9d:86:14:d1:
         77:f4:f9:f8:73:fe:43:70:28:47:c5:ef:37:9c:91:94:96:26:
         1b:a5:d4:73:00:7d:c9:86:0b:95:35:5e:63:8a:4a:70:42:59:
         0d:a8:fb:df:23:9d:78:52:20:29:68:9f:ed:17:f0:d9:69:18:
         65:99:8b:a9:e0:94:4b:53:71:5f:aa:8f:3d:30:1e:0c:0f:76:
         c5:2f:87:c2:b7:e5:49:c2:8e:29:bd:3f:3a:6f:8f:c7:67:72:
         64:e6:9d:1b:d3:be:d6:54:b6:50:10:df:e2:53:f1:a4:d0:5f:
         bd:1f:92:7e:92:1a:75:db:9f:75:22:37:e7:26:74:c9:61:6c:
         e2:5d:dd:fc:78:70:27:73:8d:ee:fe:c6:a8:14:98:ce:57:da:
         8b:0f:bc:2d:16:fd:ed:65:e3:d6:69:51:06:f9:bf:61:94:b3:
         92:39:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----