Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa
File:                     5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa (raw, json)
Hash identifier:          I/DACBI6g0prSOPJYRacNHJTSBvV/WVcP8JvsfQZnXc=
Subject key identifier:   E4:99:78:22:37:2E:B9:AD:47:AF:0A:07:8D:94:04:9F:9F:72:61:64
Certificate issuer:       /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial:       01856E8B567C0156E89510AFB0F0532ACBEB
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa
Signing time:             Sun 01 Jan 2023 18:15:03 +0000
ROA not before:           Sun 01 Jan 2023 18:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57696
IP address blocks:        193.107.64.0/24 maxlen: 24
                          2a07:1780::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:8b:56:7c:01:56:e8:95:10:af:b0:f0:53:2a:cb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
        Validity
            Not Before: Jan  1 18:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4997822372eb9ad47af0a078d94049f9f726164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:75:0d:6b:58:63:a9:1d:2a:12:b7:62:bf:
                    79:67:0c:1a:f0:f3:55:b0:d9:e5:9f:76:e2:91:4c:
                    d4:c0:25:9a:08:ce:41:fe:ee:68:70:f3:cb:2f:b1:
                    c6:81:b2:3c:cc:ca:e4:05:d5:43:82:90:78:84:09:
                    e1:da:1d:9c:92:a6:e3:f1:51:74:5a:17:ec:18:c0:
                    e7:75:34:ca:0a:d3:4f:77:4a:c5:3d:c1:b1:84:ff:
                    ac:64:90:0d:18:62:29:ce:bc:7b:7c:be:1b:26:62:
                    a4:67:75:a6:f5:ff:cd:6c:d1:3b:f2:2c:53:c4:23:
                    14:bc:53:a4:77:f2:df:ed:25:8e:be:26:49:30:2f:
                    9e:93:79:f4:46:49:26:13:b6:cc:cf:43:34:e6:30:
                    6e:9a:69:d8:6e:84:2f:59:fe:24:e8:ee:4e:39:5f:
                    af:d1:78:f7:9d:76:79:fa:78:d7:2c:d3:4c:41:f9:
                    57:ed:84:2b:a4:ab:48:dc:e5:bd:f8:3f:f8:cd:d9:
                    60:1b:c1:b7:17:20:d4:7e:bf:a2:23:e7:3f:43:0c:
                    cb:9b:f4:7d:ab:ad:b8:ac:bf:ef:3d:ab:db:a0:c7:
                    27:4c:2e:8f:dc:db:b4:b8:75:a0:08:db:3d:a7:79:
                    07:2b:65:52:6a:92:73:cd:14:fe:e4:aa:49:08:f1:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:99:78:22:37:2E:B9:AD:47:AF:0A:07:8D:94:04:9F:9F:72:61:64
            X509v3 Authority Key Identifier:
                keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/5Jl4Ijcuua1HrwoHjZQEn59yYWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.64.0/24
                IPv6:
                  2a07:1780::/29

    Signature Algorithm: sha256WithRSAEncryption
         15:37:89:cf:fa:57:ec:0f:c5:1c:ca:d2:75:6c:f0:2b:9a:6d:
         93:0d:7b:61:3e:35:ff:85:72:45:68:a9:96:f6:cb:41:bd:fc:
         70:7a:af:b9:6a:07:1d:e7:1c:51:14:45:d0:e6:45:41:96:f1:
         7d:52:57:09:cc:00:b3:34:c4:30:11:e8:e4:81:c3:ee:66:bf:
         5d:ad:cc:57:65:5b:c4:f6:f6:14:68:f0:69:61:52:e4:10:26:
         ec:0a:84:3d:35:57:17:28:98:da:67:ca:64:85:32:f4:a2:fb:
         93:ee:04:56:eb:0e:b6:ba:8b:41:1b:65:f4:5e:49:5b:6c:f1:
         7f:bd:ae:e8:07:e2:de:92:41:ef:39:97:97:5a:28:77:a5:93:
         45:1e:4f:3c:82:93:33:c3:1a:e6:f2:35:de:1a:a1:ef:4b:87:
         98:01:fd:d8:a8:83:e7:a0:69:fe:0c:44:1f:1b:c1:5f:71:cc:
         b5:06:b2:c7:6a:92:2d:fa:5a:70:5c:07:fb:be:22:20:ec:88:
         6c:75:c0:72:e7:cb:a1:32:64:a3:cb:ce:35:bf:72:01:2e:ae:
         b8:f3:95:13:c7:d2:b8:7d:13:5b:ea:43:b9:8c:ee:5c:b1:ea:
         da:e2:81:dc:af:2a:86:ac:d7:89:1a:1f:49:6e:3a:21:82:4f:
         4f:c0:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----