Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/VvyaJUZMfEfeI13nPCVQEkhB2ew.roa
File:                     VvyaJUZMfEfeI13nPCVQEkhB2ew.roa (raw, json)
Hash identifier:          LahhaTyUhAEDk5az7PC3NnIm6ZGCKFyfZPyw5IfE3gA=
Subject key identifier:   56:FC:9A:25:46:4C:7C:47:DE:23:5D:E7:3C:25:50:12:48:41:D9:EC
Certificate issuer:       /CN=2eeb616915d6e4ad39434e85da0e972b0e681d75
Certificate serial:       018663224CA5075F0AC67CDCB7B5F8B3F411
Authority key identifier: 2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuthaRXW5K05Q06F2g6XKw5oHXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/VvyaJUZMfEfeI13nPCVQEkhB2ew.roa
Signing time:             Sat 18 Feb 2023 06:07:17 +0000
ROA not before:           Sat 18 Feb 2023 06:07:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        5.57.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:63:22:4c:a5:07:5f:0a:c6:7c:dc:b7:b5:f8:b3:f4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeb616915d6e4ad39434e85da0e972b0e681d75
        Validity
            Not Before: Feb 18 06:07:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56fc9a25464c7c47de235de73c2550124841d9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:9a:0b:b5:cf:80:e5:90:bc:76:73:d4:3e:
                    ec:15:73:02:9c:7d:7d:51:a0:94:ca:f5:14:01:b8:
                    b5:b0:df:53:b0:1a:57:cb:2c:78:00:f9:0d:be:91:
                    79:a3:da:c0:2a:fd:83:12:1b:cd:0a:34:9c:28:0d:
                    00:55:73:78:60:3e:88:9d:83:00:c1:c4:a0:5a:23:
                    3b:e8:9a:50:ca:cc:f2:e4:30:e1:c2:4b:64:15:fe:
                    b5:77:f5:89:66:01:e0:a2:0d:c7:06:bc:5e:20:1f:
                    6b:bd:09:a5:57:f6:05:9a:05:64:1a:4a:1e:fc:d8:
                    69:e8:19:03:07:c8:4a:4a:a5:0c:24:1e:79:93:56:
                    75:98:ea:5a:08:7d:9b:b8:8c:f5:7f:1c:47:6d:fd:
                    92:6c:16:9a:f5:35:bb:62:ec:58:76:37:b2:a6:94:
                    d1:14:47:5e:0c:49:53:0e:45:3a:db:47:98:c3:e7:
                    5b:7e:e4:92:90:04:f8:f3:fc:9e:64:78:a7:46:cd:
                    16:e2:a8:86:9d:31:de:07:af:de:60:fb:b7:d7:d8:
                    a4:76:e6:fc:d5:84:4f:91:c8:8f:66:64:23:0b:c6:
                    76:0b:6e:6a:75:a7:07:16:76:35:85:72:f4:d7:ed:
                    96:8e:ee:b8:36:67:90:2a:56:b4:f5:a5:ab:e3:9c:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:9A:25:46:4C:7C:47:DE:23:5D:E7:3C:25:50:12:48:41:D9:EC
            X509v3 Authority Key Identifier:
                keyid:2E:EB:61:69:15:D6:E4:AD:39:43:4E:85:DA:0E:97:2B:0E:68:1D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuthaRXW5K05Q06F2g6XKw5oHXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/VvyaJUZMfEfeI13nPCVQEkhB2ew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/451b53-4152-4ce3-ab98-ebef8597452d/1/LuthaRXW5K05Q06F2g6XKw5oHXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:81:92:2c:9a:a9:81:22:98:0d:fd:e3:76:78:14:05:e9:
         73:56:f1:ca:58:6c:54:30:cb:98:14:49:d8:a2:bf:67:c2:50:
         98:91:5e:98:5c:89:29:c2:a9:9b:2a:e8:2c:b7:c9:f0:31:69:
         96:66:b1:6c:eb:33:24:b0:5d:cf:8b:24:c6:10:f4:cb:33:6d:
         a8:78:89:b0:67:34:fe:09:b1:46:4b:84:7b:b8:7f:14:eb:0b:
         da:9f:a8:6e:2d:0f:ba:59:92:70:67:d7:fd:23:45:4c:98:29:
         f3:a3:be:47:b9:1c:2b:23:c6:e7:7c:48:dd:9f:43:f5:0d:f2:
         e1:2a:40:2e:d6:4d:93:7d:63:e8:f7:80:ae:f5:c7:a7:4f:f4:
         1a:85:47:c8:08:61:a8:d6:ef:c4:45:97:94:70:7b:2f:27:f2:
         23:23:5d:7b:47:a3:0c:b5:7d:71:e0:f8:59:06:e1:36:8c:32:
         23:d6:1d:ce:8f:90:c4:59:87:ab:ba:6d:9b:7f:1c:02:da:47:
         52:7d:0e:29:f0:28:ab:67:8d:f5:df:94:ef:d4:50:4c:d8:c2:
         56:04:69:b5:67:62:90:a3:2a:c5:b4:57:c3:ec:26:e2:5f:cc:
         71:4d:01:42:2a:95:79:16:f5:fe:70:08:49:9a:f6:ec:0b:61:
         ca:48:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----