Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WwDUlkHqigVHaNLrrwOC1zNNJKM.roa
File:                     WwDUlkHqigVHaNLrrwOC1zNNJKM.roa (raw, json)
Hash identifier:          TBfTxFFW/HIizMuIFYcqImJi1c9jrJk0nl6CnPk+hDs=
Subject key identifier:   5B:00:D4:96:41:EA:8A:05:47:68:D2:EB:AF:03:82:D7:33:4D:24:A3
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53E49FE3F71F0387E070DDD42D6DCF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WwDUlkHqigVHaNLrrwOC1zNNJKM.roa
Signing time:             Sun 01 Jan 2023 07:55:15 +0000
ROA not before:           Sun 01 Jan 2023 07:55:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        5.183.207.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:e4:9f:e3:f7:1f:03:87:e0:70:dd:d4:2d:6d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b00d49641ea8a054768d2ebaf0382d7334d24a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:59:9f:2f:a7:d9:bb:d1:b7:c4:bc:3d:34:
                    e3:9d:97:dd:ca:17:cf:d1:8f:2a:5c:b3:2d:12:60:
                    3f:9e:bb:91:33:46:fe:e5:84:3c:c1:a4:38:ee:99:
                    de:0b:12:ea:62:2b:38:fa:67:41:b4:07:e4:52:2c:
                    f3:e5:68:be:cb:82:28:bd:5a:71:85:e7:8b:39:13:
                    36:67:a6:38:09:f1:1a:8b:7f:17:77:d4:5a:9b:a1:
                    36:51:2e:d2:6f:b8:f3:f7:d1:12:72:d7:fa:b7:3c:
                    93:b1:4a:8d:45:85:73:b4:14:e0:c6:46:87:9c:d0:
                    66:ba:22:d5:41:d0:a7:f1:a8:bd:9a:97:e3:16:1a:
                    0a:dc:ad:68:b7:d7:60:30:11:e1:e1:7d:f5:42:cd:
                    3c:20:74:2b:f2:6f:8f:6d:b7:be:9b:a4:b3:64:b9:
                    48:75:35:61:35:5a:aa:fb:03:53:91:4f:8f:36:c2:
                    22:a7:3d:01:11:d4:df:cd:43:1f:85:5b:20:60:7d:
                    01:d8:f9:ff:29:df:bd:2f:58:90:27:51:2d:af:07:
                    28:3a:33:02:8c:15:9d:23:6e:c2:22:37:08:eb:20:
                    2a:8c:1c:7d:8d:8e:f0:8c:97:1b:aa:be:55:8d:01:
                    17:cb:02:f2:57:a7:92:2e:f4:b6:78:49:e4:2d:12:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:D4:96:41:EA:8A:05:47:68:D2:EB:AF:03:82:D7:33:4D:24:A3
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WwDUlkHqigVHaNLrrwOC1zNNJKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:4d:e6:84:5b:83:79:3a:62:58:fb:44:60:3e:5e:4e:e1:
         c5:84:3d:35:84:70:db:15:bd:66:7c:48:4f:41:b6:18:c7:a1:
         c0:b9:a3:69:05:34:14:8d:08:cd:d5:a5:ad:d5:df:05:93:2b:
         68:a0:ab:5c:bc:e0:3f:76:4a:42:2a:df:2b:96:04:0b:ec:90:
         d6:a7:4f:3b:13:fe:00:88:f5:bc:11:66:20:69:98:86:47:24:
         c2:35:36:87:60:bb:e3:62:24:d7:93:f9:5c:e8:6f:85:8f:19:
         27:37:2a:27:33:0b:7a:08:88:82:63:9a:da:b8:20:13:91:b3:
         53:e0:2a:4e:25:d7:ef:26:6a:c7:f4:1f:24:76:0c:18:38:96:
         f6:52:0c:5e:3b:58:63:6b:26:d3:2e:6c:bc:c1:d8:bc:94:84:
         7d:8a:15:38:b4:23:4b:d7:e9:b0:fb:a6:55:41:de:ab:19:26:
         84:ed:d7:e5:75:93:1e:62:db:d8:46:72:ba:12:b2:ab:ec:d3:
         32:cf:57:0f:2e:b4:2f:98:a8:21:12:0c:cb:4a:d6:51:22:c3:
         b0:c4:1b:35:6d:99:34:a8:59:33:cb:98:0b:a9:2f:ee:06:8f:
         7a:a8:55:7c:f8:49:54:43:11:16:11:c7:00:09:86:d9:d6:be:
         53:bd:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----