Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/e3cc-Xo53TZU07jOmF8a4Bj_fMk.roa
File:                     e3cc-Xo53TZU07jOmF8a4Bj_fMk.roa (raw, json)
Hash identifier:          sgVO8go/tUNJRh1l/TRI/EF8Yo4PwxG+0LLrslI0KSI=
Subject key identifier:   7B:77:1C:F9:7A:39:DD:36:54:D3:B8:CE:98:5F:1A:E0:18:FF:7C:C9
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       01856CB84D70F28439EDA5E1A988B781B3E7
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/e3cc-Xo53TZU07jOmF8a4Bj_fMk.roa
Signing time:             Sun 01 Jan 2023 09:44:55 +0000
ROA not before:           Sun 01 Jan 2023 09:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398962
IP address blocks:        176.125.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:4d:70:f2:84:39:ed:a5:e1:a9:88:b7:81:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 09:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b771cf97a39dd3654d3b8ce985f1ae018ff7cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:15:a4:0c:f4:88:e3:44:f8:51:a0:8c:9d:01:
                    7b:94:98:6d:44:82:a1:52:92:78:b6:37:81:95:0c:
                    70:29:58:34:bb:33:66:b8:96:48:6e:23:63:7c:ae:
                    fc:5a:5d:df:cc:63:33:77:2b:84:05:06:1e:f8:36:
                    73:a6:d5:20:d0:48:1f:56:37:68:1a:0f:bb:44:35:
                    dd:6d:1f:90:5c:07:70:21:aa:de:08:34:c4:93:f9:
                    4d:62:64:01:b5:72:36:b3:8f:26:83:08:91:b3:20:
                    98:7a:4b:b2:99:95:78:0a:84:f1:b8:a4:cf:cb:25:
                    98:b0:7a:74:a5:12:ed:7a:c1:5e:be:6f:b1:4c:46:
                    85:fb:4f:5b:04:b5:80:ab:ed:aa:94:7d:94:b2:4a:
                    91:e1:ef:ea:3f:53:c3:f2:ef:d4:f1:39:c5:42:f1:
                    45:80:18:4b:21:db:7e:e8:d6:29:8c:08:64:53:39:
                    b9:10:d8:db:36:92:16:1b:17:7b:d8:29:7a:ab:44:
                    55:a3:e6:37:a6:42:98:3c:df:b5:3d:53:20:87:e6:
                    1d:d5:d5:b5:a2:42:59:94:f8:90:76:5e:dc:18:2e:
                    78:42:e4:d7:70:ab:d1:ab:ed:4d:63:12:6d:4f:be:
                    41:9a:a3:7e:2c:3a:a4:1f:b0:28:7f:7e:9e:74:94:
                    c7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:77:1C:F9:7A:39:DD:36:54:D3:B8:CE:98:5F:1A:E0:18:FF:7C:C9
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/e3cc-Xo53TZU07jOmF8a4Bj_fMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:66:e8:48:c6:fe:a5:b2:8b:94:3c:94:07:8c:3b:90:2a:
         ab:0c:3a:77:37:34:4c:aa:39:f8:d3:bb:2c:35:82:fc:ce:0e:
         de:68:cc:5f:46:08:d4:f4:c6:92:28:d6:90:7b:86:fe:5f:39:
         9d:2c:8a:e5:fc:74:97:0b:0c:6a:c8:27:a3:52:e0:54:91:7a:
         ef:72:6d:dc:19:72:e8:62:89:0d:e9:d5:29:03:c6:c8:f1:bb:
         ee:8d:35:f3:95:be:87:1f:81:6a:2a:ed:8c:95:18:3c:8c:fc:
         57:41:d4:af:e1:f6:05:11:ef:90:0d:ee:34:a8:fd:d7:12:29:
         47:76:25:3f:9d:c4:85:f9:7a:36:f1:21:07:b9:25:21:62:a8:
         ee:14:09:e7:be:b0:3d:d6:40:e2:70:22:c5:86:3b:7c:40:65:
         59:30:80:7a:56:f3:2e:07:85:38:50:f4:9f:27:62:51:5e:b9:
         71:b0:c7:2a:32:d1:4b:d7:2d:f3:45:76:6b:b5:d3:73:6f:96:
         9f:e4:16:5d:2c:b2:8e:76:52:1c:c8:74:40:41:60:b5:fc:e3:
         10:9f:09:a3:06:c4:1a:3c:be:6e:f2:39:2d:5b:b1:13:79:cd:
         09:d7:b2:e3:56:e9:5c:b4:ae:bc:2e:b3:92:69:03:0f:eb:b1:
         f5:f8:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----