Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/CO2x57YJ19-Yq96XzRRvgr_PyVc.roa
File:                     CO2x57YJ19-Yq96XzRRvgr_PyVc.roa (raw, json)
Hash identifier:          kiNAiiP+W5XVVvNqxBBUIt3Gw6hecPiPrZeVqUa7hTk=
Subject key identifier:   08:ED:B1:E7:B6:09:D7:DF:98:AB:DE:97:CD:14:6F:82:BF:CF:C9:57
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       018573839B6AFB21EBDD537EE74ACF14A382
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/CO2x57YJ19-Yq96XzRRvgr_PyVc.roa
Signing time:             Mon 02 Jan 2023 17:24:42 +0000
ROA not before:           Mon 02 Jan 2023 17:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15652
IP address blocks:        79.133.196.96/27 maxlen: 27

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:83:9b:6a:fb:21:eb:dd:53:7e:e7:4a:cf:14:a3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jan  2 17:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08edb1e7b609d7df98abde97cd146f82bfcfc957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:02:57:1d:8e:2d:69:f5:57:56:11:90:94:
                    ba:44:3d:78:78:64:36:87:12:2c:c7:2d:d7:cf:e0:
                    0e:15:bc:e5:8a:e5:2b:31:ed:e7:a8:b1:6b:43:62:
                    39:76:fd:ef:1d:f3:9f:da:82:fa:92:22:22:4e:a4:
                    14:69:02:f6:11:2b:20:d7:fd:4f:de:68:f0:6e:0a:
                    a9:2f:1e:8a:03:93:de:1b:df:de:c5:5d:2f:40:26:
                    ea:af:83:fb:4d:15:38:14:18:e2:d2:19:e2:a0:2f:
                    b9:6e:fc:68:33:f7:a5:a0:9f:8c:e6:a5:bd:b3:4d:
                    60:57:4c:cd:1a:47:54:08:6f:be:e1:51:31:d1:78:
                    63:94:51:10:bc:27:84:ed:fc:3a:b1:f9:70:fb:92:
                    4f:81:1f:3c:eb:be:cd:02:0b:d9:25:e7:fa:01:35:
                    52:10:11:7c:1a:fe:5a:87:7e:61:1b:51:78:7c:83:
                    0f:d0:a5:b4:17:c3:76:59:42:c6:54:f4:29:81:c2:
                    08:e3:ef:40:29:b2:bf:a8:0f:5c:62:d7:da:6a:8c:
                    55:4b:d7:6e:8a:e1:b0:4f:16:cb:48:4f:26:c6:6d:
                    44:9f:e0:00:42:b8:ea:d4:db:99:ee:64:c6:8c:a9:
                    4d:e1:a9:d7:b2:17:12:b5:8c:75:9b:9c:ee:c6:05:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:ED:B1:E7:B6:09:D7:DF:98:AB:DE:97:CD:14:6F:82:BF:CF:C9:57
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/CO2x57YJ19-Yq96XzRRvgr_PyVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.196.96/27

    Signature Algorithm: sha256WithRSAEncryption
         52:37:e8:be:85:18:39:30:2e:8f:80:d8:ed:42:e5:75:ce:3b:
         e7:0a:b9:4c:23:ec:47:12:12:14:13:ec:ec:a1:44:fe:d6:49:
         8c:cb:19:fa:4e:c7:3f:05:7b:80:7d:f8:ba:f0:5d:28:55:e8:
         3c:34:3e:9d:d3:01:44:1b:7a:a4:44:19:4e:bd:79:2c:27:60:
         9e:34:c1:28:67:23:7d:c4:d5:8b:27:8c:fa:d0:10:2e:0c:9d:
         21:45:0f:54:5c:ed:aa:5e:ac:1b:6f:1d:ea:9b:49:1e:26:2a:
         0b:32:d7:62:0c:ac:c1:67:8f:51:cd:39:0d:12:a2:ac:fb:47:
         89:da:47:1e:2e:fc:92:29:e1:63:f4:14:64:86:0e:ed:57:4c:
         64:d8:a5:e1:d2:86:82:e1:a5:29:94:91:51:91:ee:1e:d7:d4:
         66:d5:00:74:07:82:a0:28:70:1c:ae:83:63:37:91:79:10:28:
         57:08:6d:cc:18:d4:4f:38:ff:52:ab:9d:6a:79:af:9b:fa:33:
         c8:72:c2:c5:d6:b3:73:6e:66:42:27:73:37:58:dd:aa:d4:cc:
         ed:14:2e:31:f6:37:2d:f6:06:b8:5f:62:77:de:7d:f3:a8:5d:
         27:33:61:2b:32:fc:8c:38:a1:2c:57:bd:9c:84:9a:6e:6d:96:
         99:6a:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----