Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa
File:                     _gnCeElZzWQ_O0MG5AvOtwK-J8o.roa (raw, json)
Hash identifier:          lhTzYI1bTfVZSh+ees+59gJsySLXmJvkdZlu5J7EvGM=
Subject key identifier:   FE:09:C2:78:49:59:CD:64:3F:3B:43:06:E4:0B:CE:B7:02:BE:27:CA
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       0187830FC66E96B1B12DA348D1C620F89AF6
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa
Signing time:             Sat 15 Apr 2023 03:57:41 +0000
ROA not before:           Sat 15 Apr 2023 03:57:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        46.175.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:83:0f:c6:6e:96:b1:b1:2d:a3:48:d1:c6:20:f8:9a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Apr 15 03:57:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe09c2784959cd643f3b4306e40bceb702be27ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:81:f3:60:d4:b3:39:1e:96:ad:7e:91:e8:
                    7c:74:a3:8e:95:f0:cf:e2:ca:06:34:f5:cd:e1:d3:
                    4b:b3:68:f3:00:cb:9a:04:ee:11:e2:74:07:16:28:
                    11:2f:cf:37:29:e8:f6:f6:8a:2c:19:ec:b1:5f:fe:
                    84:65:ed:c5:c2:53:ec:a9:d5:fe:72:6f:29:fb:25:
                    18:54:cd:45:38:15:e4:bc:af:62:56:b6:a6:77:f1:
                    27:dd:9c:72:60:1d:fc:94:80:6f:90:0a:72:73:12:
                    5e:f2:3d:3f:35:b4:34:fe:ad:6c:92:b9:f6:19:1d:
                    22:59:bb:4d:31:1f:cf:53:ce:cc:9d:b0:db:fd:ae:
                    68:6b:f7:df:a6:26:79:1d:5b:0b:0b:e9:11:d5:3b:
                    51:7d:9b:a4:64:db:c9:94:36:0b:87:5b:3a:e2:26:
                    fa:74:7d:e3:b6:44:9b:07:d5:82:cf:3e:7f:da:7a:
                    95:37:1b:d2:e6:96:26:37:24:41:4b:d2:3f:16:01:
                    c0:a0:4b:d9:51:4f:9b:bc:72:ea:bd:16:6a:02:a1:
                    c7:46:11:4d:3e:5b:e3:82:2b:bd:1d:47:c9:1b:b9:
                    87:ad:f2:f4:f8:11:ee:68:63:ec:f1:d7:6f:64:26:
                    62:c1:74:c3:0b:96:c4:cf:5f:a0:b0:26:b0:a6:ca:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:C2:78:49:59:CD:64:3F:3B:43:06:E4:0B:CE:B7:02:BE:27:CA
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:be:dc:5e:67:c7:cd:48:e9:9f:b1:2b:a9:15:93:ef:d8:
         4d:7b:ae:3d:76:12:32:b5:c4:98:ad:47:15:37:2a:bc:08:42:
         4e:55:8a:ba:ac:87:14:8d:a7:90:74:0b:0f:1c:cf:ea:b4:5c:
         80:eb:44:f6:ce:e0:ac:a0:19:2f:f9:b0:f9:7c:ba:24:56:e2:
         ce:02:b3:01:dc:4c:7b:18:d8:6a:8c:ce:00:14:11:1b:24:93:
         7d:0d:97:f7:b9:55:8f:68:54:3b:7a:ad:ed:98:8f:0b:0e:39:
         22:8b:5d:04:62:09:c6:9e:a9:1b:0c:07:a1:99:9e:09:42:98:
         70:35:d6:ed:65:a2:85:fe:be:41:9f:20:bf:fb:aa:c9:51:fc:
         d8:16:ba:ff:39:5f:3d:57:5d:36:a8:1b:74:bc:b0:31:03:8e:
         c4:36:b4:16:ae:14:7e:69:14:d4:42:54:e9:6b:ca:82:8c:91:
         4a:da:94:3e:fe:31:f5:00:76:96:92:33:20:fc:49:b8:f2:01:
         82:26:cf:f4:a8:68:98:21:3e:c0:5d:60:57:03:c7:52:59:22:
         b8:36:99:ca:a5:2b:23:b3:c9:6b:87:b4:a8:34:7c:73:60:2a:
         9f:a2:25:bc:17:ec:84:15:0b:78:2e:85:a8:bb:69:46:c9:93:
         68:13:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----