Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/zU4YSONosoyNscZc8RlVjtnqmmM.roa
File:                     zU4YSONosoyNscZc8RlVjtnqmmM.roa (raw, json)
Hash identifier:          xHGLwAEPLE8Wb5a1h9VIwGcgNvmVTnf7i41nvZvA51E=
Subject key identifier:   CD:4E:18:48:E3:68:B2:8C:8D:B1:C6:5C:F1:19:55:8E:D9:EA:9A:63
Certificate issuer:       /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial:       01856F9DEDF325A708B232240EC515C76BFB
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/zU4YSONosoyNscZc8RlVjtnqmmM.roa
Signing time:             Sun 01 Jan 2023 23:14:59 +0000
ROA not before:           Sun 01 Jan 2023 23:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61157
IP address blocks:        5.1.120.0/23 maxlen: 23
                          2a02:e740::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:ed:f3:25:a7:08:b2:32:24:0e:c5:15:c7:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
        Validity
            Not Before: Jan  1 23:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd4e1848e368b28c8db1c65cf119558ed9ea9a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:7d:67:a9:27:a1:3d:58:fd:cd:0e:95:df:
                    25:54:f5:ab:f5:15:c8:97:9f:ab:f3:d7:64:96:8a:
                    72:6a:be:06:c1:1d:ff:eb:63:15:a1:da:74:c0:c9:
                    79:eb:10:a8:b4:dc:7f:e1:ba:f8:3c:eb:34:43:6c:
                    4a:9f:ca:55:85:5a:bd:7f:88:e6:7d:cf:d2:11:94:
                    ed:21:9b:cb:6c:37:c9:ae:af:2d:c8:98:94:db:aa:
                    58:0f:b9:22:b9:0b:7c:b6:2a:9d:96:74:c4:7f:a9:
                    fe:14:89:9a:7f:12:16:b4:de:75:67:f4:48:34:51:
                    55:c2:e7:2f:16:c0:ed:34:91:77:e9:af:ca:0f:84:
                    8c:eb:7f:1c:ba:7d:77:4b:d8:ff:ba:97:3c:2e:9c:
                    e4:83:33:a6:d3:d0:27:a6:4c:67:98:48:df:f6:0f:
                    a0:a5:d8:2b:88:35:e7:39:f1:87:1b:43:51:ed:5d:
                    70:cf:99:a8:19:ae:49:ac:eb:3a:f0:43:0b:ff:db:
                    97:c0:8f:cc:4a:94:07:40:e1:1b:0e:88:31:7f:b3:
                    a0:38:e0:d4:35:1b:68:0c:97:72:db:4c:3d:0b:15:
                    d1:bf:60:f9:79:41:a5:ad:ff:58:35:7e:25:7f:5b:
                    2e:0f:7c:86:60:ef:0b:b6:c6:b7:eb:0f:ab:f2:f5:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:18:48:E3:68:B2:8C:8D:B1:C6:5C:F1:19:55:8E:D9:EA:9A:63
            X509v3 Authority Key Identifier:
                keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/zU4YSONosoyNscZc8RlVjtnqmmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.120.0/23
                IPv6:
                  2a02:e740::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:63:8d:7d:fe:17:05:27:9d:0a:56:69:c8:8a:a5:fd:97:87:
         e4:96:dc:cd:06:8f:4b:a8:3e:e7:16:86:d5:b2:e2:55:24:91:
         dd:5f:65:3b:d5:3a:6e:fb:b1:65:19:35:4d:f9:3d:4b:5f:a1:
         3c:ef:d1:91:51:d9:c6:be:05:5c:f6:2d:dd:75:13:71:f1:ef:
         ce:ca:4a:ee:9d:89:77:99:b1:ea:f8:d9:13:ef:45:db:03:3a:
         a3:7d:25:c6:42:e1:82:14:9e:e6:e5:23:ad:e5:99:0e:4c:e1:
         6c:a9:12:d7:68:84:40:1d:cd:04:23:f9:f7:3a:e6:59:03:02:
         da:29:4a:34:ec:89:76:ed:15:a5:f1:eb:2a:77:5f:4e:3b:ec:
         6b:9e:c5:8e:8a:ee:5f:54:72:9e:ee:b0:38:07:4c:18:dd:4f:
         f9:28:48:96:41:26:0c:f0:5b:6d:98:43:58:01:a4:5c:92:f7:
         97:13:13:51:2e:79:bf:ca:60:58:fc:85:06:b8:65:4a:3d:4e:
         27:10:e6:0d:5a:51:45:aa:4c:15:55:ff:b4:45:b7:76:12:70:
         c8:9a:f0:08:c5:fc:df:3c:7f:a1:84:46:b0:6d:24:9c:d4:22:
         f5:27:f6:f0:22:99:85:27:59:9f:51:b6:d6:c6:a1:bc:90:da:
         37:c5:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----