Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/LjcFF9g9JUCgF_7gZMGa6_JyRDI.roa
File:                     LjcFF9g9JUCgF_7gZMGa6_JyRDI.roa (raw, json)
Hash identifier:          2mJ0e4WFY+hdhbmD+Rs2vdQwtWyzFh4MwxEfKmk2Lkc=
Subject key identifier:   2E:37:05:17:D8:3D:25:40:A0:17:FE:E0:64:C1:9A:EB:F2:72:44:32
Certificate issuer:       /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial:       01856C1371E5066BF1F3024097ACA4A80744
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/LjcFF9g9JUCgF_7gZMGa6_JyRDI.roa
Signing time:             Sun 01 Jan 2023 06:44:51 +0000
ROA not before:           Sun 01 Jan 2023 06:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58233
IP address blocks:        5.56.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:71:e5:06:6b:f1:f3:02:40:97:ac:a4:a8:07:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
        Validity
            Not Before: Jan  1 06:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e370517d83d2540a017fee064c19aebf2724432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:b7:ab:09:55:e3:84:6f:52:4f:e8:d9:dd:
                    e6:c8:ae:f6:84:04:04:b8:ec:3c:2a:1c:e2:63:11:
                    80:a0:6f:cd:8d:bd:2e:b2:53:d5:d3:f9:1f:03:4b:
                    19:50:8c:fa:5e:0c:d8:06:b4:4d:bc:d9:a9:5f:bc:
                    e9:e3:70:9d:e5:67:3d:b1:d7:47:5e:f8:02:e3:14:
                    6e:22:23:f1:26:99:c4:86:60:b1:aa:c1:a0:26:a0:
                    a0:44:e3:7e:c8:e6:6b:e8:e5:8a:46:a2:fb:28:7e:
                    ef:d5:1e:46:94:8e:f8:fc:2c:d9:1e:80:8c:51:f6:
                    f7:69:9c:36:67:58:e6:00:98:e6:da:97:93:22:bf:
                    76:a5:8b:f1:bf:25:72:ac:ce:aa:68:91:70:8b:96:
                    25:aa:c9:cc:38:c9:6c:a1:af:3d:f3:b2:48:b0:0f:
                    51:2d:e0:2a:ad:41:4c:5e:78:c0:05:55:da:f4:e4:
                    03:0f:5d:33:b0:80:28:90:a8:ad:e7:29:2b:0e:1f:
                    2e:62:54:4a:81:6c:f2:36:77:e0:a7:b9:6f:d0:e3:
                    5d:42:3f:a4:5b:c4:0a:a5:56:99:e8:76:58:42:d1:
                    20:33:6d:c6:8f:b5:28:89:50:75:e7:1a:55:36:b9:
                    cf:f3:33:74:f0:68:3c:05:9c:42:90:2f:7f:f7:91:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:37:05:17:D8:3D:25:40:A0:17:FE:E0:64:C1:9A:EB:F2:72:44:32
            X509v3 Authority Key Identifier:
                keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/LjcFF9g9JUCgF_7gZMGa6_JyRDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c3:83:35:36:82:2e:a7:04:a9:cf:e1:35:a5:dd:1c:2f:d5:
         dd:ff:d6:a0:dd:f6:1f:56:3a:66:cc:94:46:69:80:57:35:c5:
         82:ef:c1:e2:7e:b2:8d:74:b6:03:f4:06:20:6d:e3:63:44:ba:
         2a:f5:3c:03:68:96:84:f9:bf:8e:be:69:fb:08:0e:9a:d8:e8:
         5e:b9:e3:e9:4d:d2:31:8e:c6:e8:d6:8e:10:f1:e9:2e:36:6b:
         56:fe:2f:b3:3d:c6:e7:ef:50:4b:d9:69:33:9f:5d:ce:fa:05:
         e1:2a:0d:cf:40:e7:0e:1d:77:0c:0d:1b:38:97:d2:10:e3:9b:
         47:91:42:b8:58:07:e1:b2:c4:ec:95:15:8a:9c:bf:83:ac:c3:
         31:01:ad:2b:96:46:9b:08:e8:64:dd:2c:4d:5e:00:e9:b9:2a:
         57:d0:55:a2:f4:d8:81:ed:11:0f:c3:14:1a:52:47:5c:f3:15:
         65:b0:f3:34:49:ea:bf:9a:60:69:21:1d:32:ad:1f:8f:b3:4a:
         02:f5:a7:47:37:9e:35:a0:c7:64:86:13:85:55:b3:6e:11:20:
         51:d8:47:5c:9b:79:53:ac:67:2c:ff:77:a2:be:98:44:61:61:
         62:43:df:c5:de:09:05:9a:13:38:5b:b9:34:53:c5:90:9f:43:
         18:77:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----