Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/1-94EQijVzSDavWZJmDBTyTRhET4.roa
File:                     1-94EQijVzSDavWZJmDBTyTRhET4.roa (raw, json)
Hash identifier:          /xFAiixeviQpHuAr24iob9Zg/6HbmRBlHv1q+IolD98=
Subject key identifier:   FB:DE:04:42:28:D5:CD:20:DA:BD:66:49:98:30:53:C9:34:61:11:3E
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       01856BC0FA77637D248627532C56D21D05DD
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/1-94EQijVzSDavWZJmDBTyTRhET4.roa
Signing time:             Sun 01 Jan 2023 05:14:47 +0000
ROA not before:           Sun 01 Jan 2023 05:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48817
IP address blocks:        193.22.15.0/24 maxlen: 24
                          2a10:db40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c0:fa:77:63:7d:24:86:27:53:2c:56:d2:1d:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Jan  1 05:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbde044228d5cd20dabd6649983053c93461113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:b6:39:d2:3d:44:29:01:fb:4f:e3:a5:ff:
                    3c:8a:96:da:d8:3c:be:b7:a7:d1:26:c8:30:17:07:
                    bf:a0:6b:83:2b:a2:f0:be:71:f0:1f:06:1b:c6:80:
                    43:9f:56:92:87:7e:c5:e7:03:eb:06:34:70:9e:b5:
                    7d:b7:dd:32:34:9c:26:c9:3c:ea:ce:6a:97:83:3f:
                    43:45:7c:35:84:65:82:07:8f:9d:46:03:3b:d3:d3:
                    8e:24:79:92:fe:33:cd:87:be:d2:18:e9:f4:a9:9e:
                    dd:39:83:e3:2f:c9:8d:80:e9:cc:0c:c8:53:32:69:
                    6c:d0:6a:3b:24:99:90:63:af:58:0d:36:f4:16:b3:
                    f9:a5:86:73:ea:32:b5:45:70:f3:5e:43:28:cc:53:
                    d4:74:9a:17:d5:f9:a1:34:3d:fe:90:53:e3:fd:d5:
                    b1:a1:d6:bb:54:9b:96:98:e4:35:5c:ef:e9:29:fa:
                    91:f7:69:a4:f7:58:cc:af:4a:7e:f9:c1:93:4e:4d:
                    cf:08:b8:fb:b2:89:a6:4b:7a:d1:43:da:44:53:29:
                    48:f2:11:88:76:a1:0e:91:6f:4b:2c:a7:30:0b:d6:
                    ce:92:b7:d8:03:03:ba:d7:ef:9e:4a:82:5a:4d:b2:
                    c7:0c:7a:37:30:7c:34:cc:bf:25:4c:80:d5:65:d7:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:04:42:28:D5:CD:20:DA:BD:66:49:98:30:53:C9:34:61:11:3E
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/1-94EQijVzSDavWZJmDBTyTRhET4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.15.0/24
                IPv6:
                  2a10:db40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:f7:f2:c2:0d:93:ce:4a:a4:03:ba:b4:c4:83:61:43:62:
         90:c0:83:d6:75:ba:d6:f1:ca:8f:d3:71:e1:98:1d:f0:81:b7:
         c8:75:cd:87:0a:79:45:5c:07:13:03:f2:28:cc:90:54:59:b3:
         8e:6f:47:37:95:bb:f8:09:5e:6e:4d:be:1d:64:f5:db:35:c8:
         64:54:35:0c:28:e5:61:f0:d5:cb:0f:9f:e0:c8:07:a2:87:b4:
         2d:a3:c2:88:80:06:7e:52:01:fd:6e:ef:c1:08:64:66:84:09:
         7c:0a:f4:ea:d7:39:12:d4:e0:e8:e2:85:d9:c0:fe:37:34:41:
         71:63:ce:f6:c3:6d:d5:c8:56:25:08:2d:24:e0:26:fa:e0:4b:
         85:88:c6:a1:a5:bd:31:d6:3e:8c:88:a8:37:38:79:dd:3a:02:
         33:fc:d2:94:8c:99:ef:e7:52:17:5f:4c:2a:de:70:27:0d:f0:
         34:a4:c7:82:2c:7a:8f:00:0b:12:b8:2c:b4:78:74:18:66:44:
         85:6d:60:2b:bd:cb:20:bc:b8:80:e7:b3:d3:91:35:ad:57:e6:
         d8:86:97:0d:e6:ef:90:29:e5:ea:b6:a1:c1:0b:5a:5b:ab:d3:
         bf:ac:3c:84:bf:ea:9a:50:3c:74:c4:ab:87:f2:41:8f:0d:7a:
         65:49:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----