Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/5xBmL9h-cgpnafuSrROjG7kyuA4.roa
File:                     5xBmL9h-cgpnafuSrROjG7kyuA4.roa (raw, json)
Hash identifier:          0j/ALkkud7cKszFxfMMejTnhFjxDo2CUiTwWE2pGNAI=
Subject key identifier:   E7:10:66:2F:D8:7E:72:0A:67:69:FB:92:AD:13:A3:1B:B9:32:B8:0E
Certificate issuer:       /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial:       01856F1DC0C908BF8CB24D04293C37982D31
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/5xBmL9h-cgpnafuSrROjG7kyuA4.roa
Signing time:             Sun 01 Jan 2023 20:54:58 +0000
ROA not before:           Sun 01 Jan 2023 20:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50472
IP address blocks:        195.160.173.0/24 maxlen: 24
                          2001:678:760::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:c0:c9:08:bf:8c:b2:4d:04:29:3c:37:98:2d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
        Validity
            Not Before: Jan  1 20:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e710662fd87e720a6769fb92ad13a31bb932b80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:12:fc:cc:aa:32:d5:99:72:23:21:4f:8d:
                    57:4e:41:f1:ba:47:99:30:91:9e:6e:9b:a5:90:fe:
                    d5:b2:2d:c8:2a:23:c6:2c:e7:17:7c:d0:10:b7:83:
                    6f:7d:8f:b5:28:ec:fc:fa:5f:4e:ce:9a:b3:03:5a:
                    bc:6b:56:3f:5c:01:4a:e4:d6:2a:5e:0a:4f:46:7c:
                    6a:21:1a:c6:6b:a8:96:5c:d2:35:89:7d:fd:2b:d1:
                    8b:0a:6a:32:15:68:a8:27:bf:26:1a:99:09:fe:a4:
                    83:34:53:5e:22:4b:8f:68:ea:be:10:89:58:e6:0f:
                    0a:c9:56:27:2a:5f:3d:b1:8a:06:22:cf:01:78:e0:
                    b0:0c:9a:42:ef:89:af:09:e5:33:11:e8:0a:54:aa:
                    73:00:c4:cf:fa:ee:7b:72:57:fd:b4:6d:03:57:d8:
                    f5:b6:bc:d5:2a:96:d1:2a:8b:ac:e9:4d:da:62:5d:
                    f6:9e:02:1a:69:78:f5:b0:6f:be:35:47:54:68:10:
                    db:3b:bd:73:58:42:0a:63:1d:53:62:88:ea:83:14:
                    92:62:69:b6:f5:af:a6:e2:aa:ec:43:3e:8a:09:11:
                    54:22:14:42:93:b3:ec:2c:7a:ee:81:13:ec:8e:4e:
                    58:98:83:4a:9c:97:e4:da:10:8f:c4:80:08:79:53:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:10:66:2F:D8:7E:72:0A:67:69:FB:92:AD:13:A3:1B:B9:32:B8:0E
            X509v3 Authority Key Identifier:
                keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/5xBmL9h-cgpnafuSrROjG7kyuA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.160.173.0/24
                IPv6:
                  2001:678:760::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:82:45:69:18:9c:b5:ef:97:2c:26:2f:45:2d:ac:12:30:
         f6:68:9e:a3:8a:16:22:96:69:da:48:87:f9:e0:25:c9:c2:cb:
         d1:fd:ec:bd:3f:dd:4b:8e:5e:63:75:5c:7e:2d:9d:ad:4f:f2:
         9e:33:d0:b0:ef:12:c8:31:c2:4d:06:b2:dd:1c:5f:16:23:f1:
         e4:07:b7:ea:d6:0f:45:1a:b7:1e:d4:9d:28:1d:49:ef:50:85:
         d8:3d:17:f0:df:e8:ee:a2:3d:b6:5e:85:d3:f0:f1:2c:20:89:
         1e:32:bd:8f:4f:d3:18:b7:e8:26:de:8c:37:bb:59:15:87:fe:
         2e:26:bd:f1:b1:5e:f1:4c:52:52:13:02:da:21:1d:a6:e2:e8:
         71:46:e8:ca:48:17:22:dc:9c:08:38:21:52:45:9c:b6:7e:8e:
         32:76:95:73:8e:9e:03:ec:1a:ee:66:1d:2b:09:a8:bf:f9:12:
         a2:20:a1:b7:d0:4c:5a:e3:63:80:27:6c:57:be:b9:33:e5:1f:
         16:06:cf:dd:5d:df:1f:fe:d5:0c:bd:a5:15:fc:b2:8c:f0:ff:
         c3:bd:57:e1:05:3d:0d:dd:20:20:ba:62:18:33:9c:f0:d0:4e:
         24:69:05:36:20:8e:f6:bb:dd:0e:fe:52:56:3e:0e:40:6e:35:
         5e:39:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----