Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DT28W0zEuZBjNo6s7ZRSj0jWOkM.roa
File:                     DT28W0zEuZBjNo6s7ZRSj0jWOkM.roa (raw, json)
Hash identifier:          oMoiEaYVAk8Ihkbbbcm4sFkItCCx5QYgA3CulpZR01o=
Subject key identifier:   0D:3D:BC:5B:4C:C4:B9:90:63:36:8E:AC:ED:94:52:8F:48:D6:3A:43
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       01865D0C370F94C45097D9BD2C028DF2479A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DT28W0zEuZBjNo6s7ZRSj0jWOkM.roa
Signing time:             Fri 17 Feb 2023 01:45:26 +0000
ROA not before:           Fri 17 Feb 2023 01:45:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        5.34.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5d:0c:37:0f:94:c4:50:97:d9:bd:2c:02:8d:f2:47:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb 17 01:45:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d3dbc5b4cc4b99063368eaced94528f48d63a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:30:3e:78:65:df:88:9e:93:11:30:4a:a4:
                    45:fc:63:b4:37:0f:e7:cc:a5:e1:61:35:b3:fe:82:
                    03:65:db:62:b1:44:7b:81:60:ec:f3:27:1e:81:7c:
                    96:29:13:54:27:ec:d7:c8:8b:dd:77:39:03:7e:cf:
                    e4:5c:00:c4:7b:33:e7:54:ef:c0:5c:82:77:69:d6:
                    28:4c:bb:fb:c3:f1:03:4b:2c:95:01:c4:f4:c2:38:
                    11:61:97:43:40:4d:3e:e0:9a:74:01:11:97:b1:b9:
                    0f:10:11:68:b6:ec:61:5f:6b:ab:5d:55:ce:21:b3:
                    32:1f:0b:5f:1b:79:38:e6:f5:8e:d2:f2:d1:7d:06:
                    98:a3:95:e8:e1:1e:eb:80:c7:14:7b:76:f0:d1:f3:
                    b4:67:a7:71:9d:39:13:6a:81:17:9c:30:5b:b5:ae:
                    e6:7c:4c:7f:47:18:3b:b3:55:38:fd:69:99:5d:a6:
                    05:e4:d2:ab:c2:2d:5f:5c:eb:73:f0:25:2d:d8:86:
                    e9:73:b8:fc:f6:ff:54:8f:a9:cc:71:2d:1c:ab:6a:
                    30:b4:10:2a:32:5a:3c:9d:4c:1f:b3:89:44:ef:7e:
                    f4:7c:42:96:b0:ff:f0:b3:9d:e6:e7:69:f1:bd:1f:
                    6a:23:df:af:7a:f9:b8:e5:25:28:fd:06:b2:ea:3b:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:BC:5B:4C:C4:B9:90:63:36:8E:AC:ED:94:52:8F:48:D6:3A:43
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DT28W0zEuZBjNo6s7ZRSj0jWOkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.34.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:71:71:99:3f:e7:4e:3f:9b:b3:ed:12:6d:4a:46:5e:fb:7b:
         cc:f6:f0:b6:44:d6:c5:2d:d6:45:e2:ba:b0:4a:27:a8:f7:3c:
         c3:a3:51:17:eb:55:4f:1d:c9:e4:2f:41:ed:a9:09:4e:5f:dd:
         7a:2d:72:f2:aa:53:1e:03:46:b6:e0:7e:78:8f:cd:e1:f7:00:
         f8:5f:cd:02:3c:26:9f:0b:08:9c:0e:68:79:66:d8:4e:09:62:
         f2:c1:82:c8:78:83:a4:ff:b8:4f:2d:46:fe:a7:ed:9b:ef:36:
         69:8d:18:59:36:a4:22:30:3d:29:00:09:5c:ef:6c:8f:b6:7c:
         3b:f5:f3:2c:4c:80:0c:a7:d4:d3:cf:27:3e:28:68:c4:89:44:
         23:13:b6:26:58:ed:68:d5:10:c8:30:22:68:ef:a2:19:7b:5a:
         84:e0:ba:f0:67:a8:9a:24:dc:ec:55:86:08:1f:e9:ea:9e:6b:
         bf:12:70:da:44:d9:bb:7e:d8:2f:78:d0:c6:3c:e8:29:67:fc:
         73:2f:73:2f:6d:a7:42:99:50:06:de:4c:b6:1e:91:23:94:9b:
         00:24:58:26:0e:2a:ac:2e:2c:1a:1c:9c:e7:27:39:0c:c5:ad:
         06:c9:fc:78:79:a7:cb:9a:68:a5:24:20:ed:99:78:4d:c0:13:
         69:59:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----