Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FkyLSdyW5dxHLgqTEB9HYudleis.roa
File:                     FkyLSdyW5dxHLgqTEB9HYudleis.roa (raw, json)
Hash identifier:          6yhiDG8XI9jyAT1Uze39O68VOI0pxposr/EmcLCUwvY=
Subject key identifier:   16:4C:8B:49:DC:96:E5:DC:47:2E:0A:93:10:1F:47:62:E7:65:7A:2B
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       018C53A87EEE95D543E532A177A40D02BDC6
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FkyLSdyW5dxHLgqTEB9HYudleis.roa
Signing time:             Sun 10 Dec 2023 12:16:40 +0000
ROA not before:           Sun 10 Dec 2023 12:16:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205646
IP address blocks:        151.244.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:53:a8:7e:ee:95:d5:43:e5:32:a1:77:a4:0d:02:bd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Dec 10 12:16:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=164c8b49dc96e5dc472e0a93101f4762e7657a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ce:6d:79:d0:40:24:14:bf:6c:bf:b2:0e:4f:
                    1d:4f:28:08:e0:d3:52:34:ca:9a:f8:b8:0a:71:f1:
                    16:dd:af:35:07:b1:46:e7:77:9b:ce:1e:5c:f7:7c:
                    9b:3c:06:d9:c4:21:9a:37:de:84:90:e5:8c:f1:f9:
                    08:f3:7c:2f:7e:d2:e0:94:69:fd:0b:fa:ed:32:07:
                    7a:cc:51:5f:22:f9:d5:57:88:9b:c1:20:ac:57:6f:
                    61:df:e7:4e:bc:c8:a7:a5:cd:c8:60:0d:53:65:91:
                    fe:76:3e:a6:43:c9:1a:8d:72:6e:74:ce:3c:5f:86:
                    d7:0b:50:5e:e6:ed:e6:f9:c4:a8:2b:7b:2c:37:53:
                    8e:ca:9c:59:11:99:32:75:b6:76:60:c2:5e:68:30:
                    bd:9a:c1:aa:42:6c:48:fb:70:cb:7f:2e:04:cf:2b:
                    41:93:74:3a:fb:f6:1b:7a:dd:b9:b2:46:a0:5b:93:
                    7c:47:05:88:ee:80:34:25:0c:26:b0:a8:88:3d:62:
                    e0:d2:59:a3:a6:5d:3a:1c:2a:15:bf:c8:76:c2:62:
                    a3:7f:0f:40:b5:98:0b:2c:be:9a:99:97:0e:26:f3:
                    15:00:14:0b:94:22:dc:9e:af:c9:d4:fa:28:2b:9e:
                    f5:be:c5:18:6e:b4:35:dc:c2:9f:ec:3c:ae:01:4a:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:8B:49:DC:96:E5:DC:47:2E:0A:93:10:1F:47:62:E7:65:7A:2B
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FkyLSdyW5dxHLgqTEB9HYudleis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.244.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:96:db:a0:3e:52:24:6b:60:fd:8e:c3:5a:72:c5:13:f4:e5:
         39:1e:05:ab:77:63:e6:61:54:fb:fa:a8:7a:8e:4b:13:9d:77:
         74:51:d5:9d:6a:b0:b8:93:76:42:4a:57:c0:60:04:2f:3a:dc:
         49:75:94:66:e1:b1:ac:54:6b:0c:18:bd:f0:39:9f:e1:52:61:
         8b:19:cf:a4:ae:a1:4a:d2:b1:55:2a:83:82:f6:0e:62:5e:6d:
         98:74:d2:77:82:8e:27:ed:b1:2b:65:9c:f6:89:4b:77:cc:f5:
         30:29:ce:7b:8d:75:db:23:9d:8f:04:84:8d:dd:ae:c6:44:c4:
         0d:e4:3d:72:88:82:bd:14:66:35:1c:cd:68:18:8d:ad:e6:3b:
         83:5c:53:bb:a8:25:c2:f4:1d:59:86:d2:59:fc:9f:cb:29:d2:
         57:37:01:94:36:00:07:7c:22:3c:94:dd:a9:6d:7b:40:ab:92:
         bb:85:79:ab:53:c8:fe:6e:21:a1:71:9c:82:a6:5c:a2:d5:09:
         ac:1b:cb:a8:a6:3f:3b:82:74:53:a7:49:92:f7:c0:7b:de:03:
         2e:ea:f2:77:a0:de:00:32:d3:84:cd:c5:a1:b7:7a:58:9c:a8:
         09:23:99:6f:7b:91:34:0f:56:19:0b:98:8a:fa:b9:d6:3f:13:
         88:5a:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----