Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/C5iqZOCGs7yqVYWnrNmllt0riNs.roa
File:                     C5iqZOCGs7yqVYWnrNmllt0riNs.roa (raw, json)
Hash identifier:          7oiWUObMPqDozBPTiNHo7eJhroYIJbLjOzzMoYt2/XI=
Subject key identifier:   0B:98:AA:64:E0:86:B3:BC:AA:55:85:A7:AC:D9:A5:96:DD:2B:88:DB
Certificate issuer:       /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial:       0185708C91BD25DD0713DA557E54AB6AD764
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/C5iqZOCGs7yqVYWnrNmllt0riNs.roa
Signing time:             Mon 02 Jan 2023 03:35:38 +0000
ROA not before:           Mon 02 Jan 2023 03:35:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43061
IP address blocks:        77.94.128.0/19 maxlen: 19
                          2a02:d90::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:91:bd:25:dd:07:13:da:55:7e:54:ab:6a:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
        Validity
            Not Before: Jan  2 03:35:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b98aa64e086b3bcaa5585a7acd9a596dd2b88db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:bc:3f:b1:11:20:9c:d9:d6:d6:1f:2e:22:
                    0e:ec:de:91:b7:55:19:bc:96:ed:da:d0:67:a3:16:
                    22:9c:eb:20:c9:9a:da:98:7c:29:a2:33:21:09:2d:
                    d2:c9:9b:ca:d7:f4:35:7f:ae:28:78:96:c2:08:23:
                    5d:d0:af:53:85:65:04:73:8f:23:7e:aa:ed:bf:21:
                    ed:a1:e7:14:b4:b0:a2:72:fa:5e:19:a4:81:61:df:
                    36:a7:59:c2:c8:9f:b8:b0:bc:bd:59:33:a4:a3:be:
                    a1:85:1c:6e:0b:9b:54:1b:58:98:d5:9d:6b:d2:8a:
                    00:9b:d0:31:6d:d2:2d:86:8d:e2:d3:6b:e8:1e:d1:
                    6d:da:85:9a:a7:92:4d:b4:96:2c:ce:3d:fc:99:d7:
                    f4:b8:d9:92:03:55:e1:ce:0f:01:d1:88:d7:f0:41:
                    a7:c6:fb:49:ec:a6:27:cb:42:f3:41:6e:df:2d:40:
                    91:75:8f:70:0f:a1:e8:43:5c:6c:0b:9f:8c:7b:43:
                    2b:f4:69:3d:34:69:91:a4:d2:f2:fc:27:ee:a8:29:
                    ff:34:9d:c8:19:91:bb:13:f3:ca:19:63:24:ad:35:
                    1b:89:c2:b4:24:2f:70:f2:d2:ec:e8:5e:c8:50:5e:
                    68:0d:05:20:3f:e9:0e:ed:ba:3b:24:a6:21:54:a2:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:AA:64:E0:86:B3:BC:AA:55:85:A7:AC:D9:A5:96:DD:2B:88:DB
            X509v3 Authority Key Identifier:
                keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/C5iqZOCGs7yqVYWnrNmllt0riNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.94.128.0/19
                IPv6:
                  2a02:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:e1:54:88:44:b0:fe:e3:7b:c7:f5:c5:f3:24:d7:70:d6:
         a4:70:bb:85:6f:b1:94:79:93:68:1e:45:78:3f:10:e4:ff:e6:
         cd:8c:cc:e0:0b:08:21:77:f7:77:68:b6:e3:31:01:6f:eb:60:
         1e:cd:18:ac:0c:42:f2:85:7d:d1:4e:b7:85:10:2a:42:73:29:
         37:bc:08:15:b0:36:fc:40:f4:45:74:77:0a:80:24:1c:7e:70:
         c9:16:20:66:2b:67:e2:05:84:94:95:e9:46:36:49:e0:f3:16:
         20:57:8a:e8:af:2e:5a:69:df:19:87:1f:2d:2e:a8:a9:cf:ce:
         d0:e8:aa:ef:10:29:a1:3e:fa:12:e4:a9:e9:9f:16:f8:0d:da:
         2e:cd:67:3d:7c:ca:2d:88:ad:13:17:75:12:9b:41:ab:47:ab:
         a4:fc:98:50:b5:a5:df:9c:46:45:fb:ed:28:0c:11:e2:09:01:
         81:81:3f:7a:03:49:15:d8:53:8a:f5:8a:e2:d4:d9:ef:98:63:
         df:bc:b5:22:60:22:0d:b5:4d:75:1c:a6:36:0c:7a:d3:7c:77:
         6f:6f:53:fa:68:1b:14:88:29:24:1a:21:55:e8:55:7a:f1:54:
         51:3e:ce:27:c5:54:d2:17:37:33:91:33:20:a1:a8:a4:b6:48:
         2e:f4:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----