Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/8uh5dVkx0cz1QAq8nQwDmbvkB1c.roa
File:                     8uh5dVkx0cz1QAq8nQwDmbvkB1c.roa (raw, json)
Hash identifier:          zdziIEBAkXsya8Qb4XjTOzmGJGoDKjWg+sRlCHvmiTA=
Subject key identifier:   F2:E8:79:75:59:31:D1:CC:F5:40:0A:BC:9D:0C:03:99:BB:E4:07:57
Certificate issuer:       /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial:       0185714C38B4B6C25911A65314D17C5C88BC
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/8uh5dVkx0cz1QAq8nQwDmbvkB1c.roa
Signing time:             Mon 02 Jan 2023 07:04:58 +0000
ROA not before:           Mon 02 Jan 2023 07:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209097
IP address blocks:        5.182.144.0/22 maxlen: 24
                          2a0e:5c00::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:38:b4:b6:c2:59:11:a6:53:14:d1:7c:5c:88:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
        Validity
            Not Before: Jan  2 07:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2e879755931d1ccf5400abc9d0c0399bbe40757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:0f:e9:b1:4a:0e:19:e5:2f:f9:75:ee:5f:
                    29:80:ff:b9:22:0d:77:4b:84:59:c0:e1:34:8a:ec:
                    0e:3c:58:c2:13:a0:21:2c:01:07:72:76:55:05:9b:
                    e9:45:c8:b9:8d:bb:a0:72:44:03:9a:29:07:32:e3:
                    f8:53:e1:88:5f:11:63:bd:c4:f5:2f:05:5b:2c:48:
                    cc:b6:ce:a0:a5:cc:62:79:e2:05:7e:5d:4c:eb:08:
                    10:6a:02:98:57:f8:2b:ee:56:1a:cd:97:56:f9:5e:
                    7c:d8:37:03:14:59:01:4c:67:fd:45:96:0a:c5:35:
                    9d:a3:64:f2:14:f3:7b:16:78:55:10:1b:1b:c3:d3:
                    ac:45:42:b8:3c:49:05:f5:97:b5:14:31:8b:37:b4:
                    a5:f8:77:c4:a6:c6:cf:21:ab:79:db:2b:c4:b0:1e:
                    21:0a:7f:9e:3f:a3:8a:8b:d7:aa:81:42:b0:ea:4b:
                    ef:f5:b1:4b:97:37:90:58:50:15:75:fc:9b:72:d9:
                    84:6b:42:43:5e:71:3d:5e:74:14:eb:ee:6b:e0:e8:
                    d5:96:bb:9c:6d:65:ba:fb:01:07:b8:22:88:49:f1:
                    04:da:d4:91:0d:cd:1c:d4:92:59:9d:dd:da:36:50:
                    49:2a:88:14:31:00:37:dd:0b:94:94:0a:46:7a:4c:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E8:79:75:59:31:D1:CC:F5:40:0A:BC:9D:0C:03:99:BB:E4:07:57
            X509v3 Authority Key Identifier:
                keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/8uh5dVkx0cz1QAq8nQwDmbvkB1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.144.0/22
                IPv6:
                  2a0e:5c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:80:96:f3:dd:68:91:78:19:57:08:9e:66:43:4d:97:15:39:
         a0:8a:95:14:45:15:64:09:8d:2f:a8:c3:8d:50:3a:47:ac:9d:
         c8:11:91:f7:1c:7e:e5:ed:1d:e5:8b:fe:1a:88:53:24:d7:d7:
         e6:88:7b:ec:a9:ba:78:67:43:cd:be:0b:18:36:25:39:31:01:
         6f:b4:29:e4:20:cb:9b:f5:a2:16:b7:e7:fa:85:7e:97:eb:c5:
         36:72:da:cb:1e:c4:5c:c8:bc:97:9d:a5:4c:63:4f:a9:5e:27:
         7f:a4:87:57:99:7d:54:eb:c9:91:da:b0:a0:40:4c:5c:66:b6:
         a6:e4:95:2a:0e:fd:83:93:89:d9:1d:19:26:b5:25:70:8b:e6:
         ff:3f:b2:1e:8f:40:43:1e:6c:a2:eb:b6:de:ef:95:03:08:3d:
         d7:e8:9c:0c:10:4e:ae:28:6c:96:34:dd:42:24:25:c1:40:33:
         ef:d9:d2:1c:de:35:f9:da:e9:3d:ec:58:4c:24:dc:21:fb:ca:
         47:28:b8:c1:a6:df:a1:6c:17:08:c9:1b:37:41:92:92:ed:ea:
         81:a0:2d:1c:33:ba:f9:b3:cd:91:7c:01:11:27:24:c3:00:d0:
         73:56:e7:79:da:7d:17:bd:bd:15:cc:d9:30:dd:0b:38:71:dd:
         a3:a0:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----