Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa
File:                     RJWF226SIGJT1eKGE7d-61VRUJs.roa (raw, json)
Hash identifier:          v23IJHaHNa39RPud1NpNOkRJanYhfx0GEUwvXymYLVw=
Subject key identifier:   44:95:85:DB:6E:92:20:62:53:D5:E2:86:13:B7:7E:EB:55:51:50:9B
Certificate issuer:       /CN=88ea8d80288edda94d95b6308bf159a526c63745
Certificate serial:       01874E10C47E7A15A5CD0C759DD0C32B36B7
Authority key identifier: 88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa
Signing time:             Tue 04 Apr 2023 20:58:54 +0000
ROA not before:           Tue 04 Apr 2023 20:58:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     196695
IP address blocks:        193.3.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4e:10:c4:7e:7a:15:a5:cd:0c:75:9d:d0:c3:2b:36:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ea8d80288edda94d95b6308bf159a526c63745
        Validity
            Not Before: Apr  4 20:58:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=449585db6e92206253d5e28613b77eeb5551509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:cc:48:3f:83:5f:f8:92:85:0b:0a:89:bc:
                    8d:7f:7d:d0:20:2d:ea:c3:61:2f:0a:28:dc:76:3a:
                    24:fe:93:95:2d:70:f0:4f:ae:ab:f4:14:18:85:c1:
                    c3:2d:db:8d:ec:1c:93:09:c1:51:a7:b8:b4:c3:c2:
                    b9:29:d8:c5:fb:01:9c:6a:50:a1:29:f9:90:3e:9c:
                    a5:71:be:e3:6e:10:cf:47:7a:90:5d:76:7f:ba:07:
                    17:c3:70:f4:59:ca:16:01:4d:63:38:69:49:64:66:
                    8f:be:32:c8:d2:40:f1:9b:3e:62:90:ab:87:6a:c7:
                    e9:ec:20:51:57:0c:82:30:ce:7c:27:ba:9d:94:95:
                    b1:3a:e2:a0:70:2c:50:14:a2:ef:21:89:9c:49:c7:
                    e1:f4:5d:2b:28:32:75:da:6c:21:51:05:ec:db:7f:
                    1f:09:62:7b:4b:ec:5d:c2:67:c0:e2:9d:cf:ca:4a:
                    ca:59:bf:ee:05:73:2f:01:e0:c6:16:fd:d2:71:ec:
                    24:aa:41:0b:e0:04:45:57:e5:41:4b:ab:50:bf:e0:
                    4e:83:c8:8a:35:63:26:42:21:0f:fe:4e:d2:0e:8f:
                    c9:31:ee:07:c9:15:02:90:f0:9c:e8:41:ce:20:5d:
                    97:f7:9d:56:8a:99:2e:02:57:74:79:65:79:24:95:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:85:DB:6E:92:20:62:53:D5:E2:86:13:B7:7E:EB:55:51:50:9B
            X509v3 Authority Key Identifier:
                keyid:88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/RJWF226SIGJT1eKGE7d-61VRUJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:03:f8:79:bb:b0:82:b3:34:2b:00:15:54:f3:26:92:61:
         f3:57:8b:eb:2a:26:9d:d2:e1:0a:88:4e:2c:45:75:f5:06:14:
         ef:50:5e:db:ed:97:2b:eb:eb:4b:3c:a0:cd:d0:f1:5a:39:c1:
         cb:78:30:2d:eb:e6:e9:f8:dd:62:f3:e0:8b:56:4f:22:ae:53:
         6d:07:b4:3c:24:75:36:b7:17:94:db:71:1c:cb:98:45:86:c6:
         73:aa:a5:bf:92:a0:bc:7c:3b:f9:93:03:6c:c1:f4:74:49:b1:
         99:86:86:78:d7:a5:ea:94:90:ed:f3:db:f7:51:53:c6:52:86:
         47:cd:c8:67:5a:a4:64:a4:f2:df:f3:ba:33:1a:72:a6:d0:59:
         37:96:c5:c3:65:af:73:7a:50:92:b7:9c:87:2d:db:7f:26:5c:
         85:d7:b6:3b:01:51:ba:df:a2:7d:78:c8:9c:0c:ec:4d:9b:6b:
         97:a8:ac:a0:fd:a4:e8:9b:5c:e9:ca:c5:0f:cb:de:bb:50:3a:
         36:69:a5:42:14:eb:e8:03:96:58:2b:88:de:db:6b:3e:66:be:
         21:ee:de:d3:a8:a1:74:fb:02:e0:31:dc:1f:b5:19:25:b6:08:
         06:ef:74:e0:61:02:eb:ee:b9:5f:71:89:4c:e1:72:fb:41:46:
         d1:57:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----