Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/JqdwCW0ZHX1Ui1sdRyRhqWo78Fc.roa
File:                     JqdwCW0ZHX1Ui1sdRyRhqWo78Fc.roa (raw, json)
Hash identifier:          rMBjfzOOquSkp8BYvD8NxgMq9lTU8XNK5pVfT4zY0h8=
Subject key identifier:   26:A7:70:09:6D:19:1D:7D:54:8B:5B:1D:47:24:61:A9:6A:3B:F0:57
Certificate issuer:       /CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
Certificate serial:       0185718C213408A7DE12B52E7A42798C2A0C
Authority key identifier: DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/JqdwCW0ZHX1Ui1sdRyRhqWo78Fc.roa
Signing time:             Mon 02 Jan 2023 08:14:46 +0000
ROA not before:           Mon 02 Jan 2023 08:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        193.5.44.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:8c:21:34:08:a7:de:12:b5:2e:7a:42:79:8c:2a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
        Validity
            Not Before: Jan  2 08:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26a770096d191d7d548b5b1d472461a96a3bf057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:a2:76:97:b4:42:74:f9:f0:08:13:6d:77:
                    9d:ab:4b:2b:7c:9e:79:ec:ed:9b:01:3d:a9:0d:50:
                    9a:a0:f6:d0:0d:98:23:92:bc:7f:a4:18:8b:60:45:
                    36:3c:c8:d5:f4:69:0e:37:89:62:88:af:6d:e5:73:
                    60:9b:df:09:33:99:4d:d9:8e:fb:1c:e1:4b:15:46:
                    11:38:69:2d:b8:60:79:27:ad:3f:46:f8:a8:bf:58:
                    bd:5d:48:3a:f4:ed:42:8a:a0:87:2e:6f:3a:1e:11:
                    e3:ba:1f:65:2e:1e:15:8a:cf:47:f6:a1:d5:57:38:
                    b0:44:4d:54:5c:2c:76:22:01:5d:8a:b3:68:78:84:
                    c8:8f:e2:cc:ba:a9:0f:b7:02:f2:bc:73:ec:d8:d4:
                    c6:38:07:d9:b7:68:ca:33:de:cc:18:a5:9f:22:9b:
                    ed:ab:c7:ca:99:67:a7:2d:f9:f1:39:4b:d9:cb:88:
                    2b:ff:78:57:4b:f9:f4:ef:f8:c2:42:86:43:01:ec:
                    14:7a:b0:09:b5:45:e8:8a:dc:62:f1:28:45:3c:ea:
                    c1:cf:97:25:e0:27:25:f6:01:82:29:83:10:3d:4e:
                    08:40:69:13:81:aa:a3:60:4f:20:d9:5a:1e:57:86:
                    f1:67:80:d2:1a:c3:f7:e4:de:35:4b:bc:14:e1:eb:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A7:70:09:6D:19:1D:7D:54:8B:5B:1D:47:24:61:A9:6A:3B:F0:57
            X509v3 Authority Key Identifier:
                keyid:DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/JqdwCW0ZHX1Ui1sdRyRhqWo78Fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:4d:a4:6b:aa:f9:38:9a:d5:b1:eb:77:80:37:3e:11:8e:
         ef:70:26:f5:ed:55:b3:cb:98:71:3b:9c:d9:00:2c:e1:a3:d8:
         c0:63:9e:99:20:a9:43:34:50:fc:a4:4c:7e:f5:d8:e1:b4:38:
         f3:55:a9:03:b6:d5:7f:fc:b6:85:70:ba:4c:79:8c:6d:82:a6:
         c2:87:3c:db:0a:38:4d:67:a2:53:01:35:7a:45:76:d5:03:3d:
         83:ca:ca:ca:2f:72:9f:d5:63:e3:63:b7:d9:90:1a:65:17:3c:
         11:52:fa:da:6e:08:16:c7:39:69:54:85:9d:7f:22:6f:70:67:
         78:07:81:57:34:f7:2f:b6:45:de:50:3f:d3:e2:41:eb:b9:e4:
         37:06:2d:13:c5:1a:6b:03:f9:85:05:95:93:4d:58:e7:8b:a0:
         d8:6c:9a:43:9d:e4:32:09:d9:6f:5c:f9:e7:ad:63:6b:07:83:
         56:93:7d:e1:78:24:d4:41:66:31:cf:73:ea:0a:69:25:19:40:
         3e:d9:0a:1a:a4:3b:36:66:8a:6a:0c:ce:8f:aa:1f:74:d1:db:
         c6:69:11:6b:05:11:70:7d:b6:a5:38:77:20:43:39:0b:4b:0a:
         6c:08:db:f4:01:a0:b7:c9:21:24:21:2f:c0:37:84:d0:5a:59:
         3b:fe:a6:16
-----BEGIN CERTIFICATE-----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