Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rfN5_xUTmIt0YgrWz4Lj71kuwb8.roa
File:                     rfN5_xUTmIt0YgrWz4Lj71kuwb8.roa (raw, json)
Hash identifier:          hKhD/8MmE4h2QQeVTbz2hjAT//t+heS1mGUp+/dLzxc=
Subject key identifier:   AD:F3:79:FF:15:13:98:8B:74:62:0A:D6:CF:82:E3:EF:59:2E:C1:BF
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       018B2FB693061BCFC4EE906B8BE4B495CA40
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rfN5_xUTmIt0YgrWz4Lj71kuwb8.roa
Signing time:             Sat 14 Oct 2023 19:42:56 +0000
ROA not before:           Sat 14 Oct 2023 19:42:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199614
IP address blocks:        87.254.12.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:2f:b6:93:06:1b:cf:c4:ee:90:6b:8b:e4:b4:95:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Oct 14 19:42:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=adf379ff1513988b74620ad6cf82e3ef592ec1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:87:7e:2e:19:09:dd:59:54:b2:c8:6a:53:
                    42:0b:dc:0e:54:22:31:b6:9a:31:b3:44:28:41:b2:
                    5d:be:9e:e2:ea:d7:04:e2:dd:ae:b2:15:31:74:4b:
                    2f:eb:84:44:be:ce:ef:4e:10:55:97:c3:a5:46:64:
                    6d:26:54:f6:29:fe:8b:9f:1a:4f:57:18:a4:2f:6f:
                    2e:c4:f5:ce:48:00:c0:2a:0c:6b:ab:d3:a1:2d:a8:
                    81:97:35:5d:ee:4d:90:ca:01:5d:58:f6:aa:44:54:
                    1b:8c:6e:bd:f3:64:27:9c:8a:41:b5:df:2d:d5:ad:
                    0c:bf:5d:86:87:f0:25:68:23:52:d2:e0:50:b1:47:
                    14:b8:32:19:3b:82:4a:44:f0:6c:82:6f:cf:f9:69:
                    c8:87:b5:1a:e2:6b:7a:b2:87:e2:ca:99:07:f3:54:
                    f3:97:16:85:0c:01:6d:d9:d4:08:0d:78:21:8f:01:
                    62:27:97:7c:8d:d0:d2:19:75:d6:b3:4d:6f:1f:b7:
                    3a:c8:e9:ab:e8:b6:09:b4:15:5e:a5:63:2c:2c:80:
                    2b:b4:aa:d0:f0:12:6c:f9:0a:95:e1:30:87:60:a7:
                    72:ca:4f:dc:29:c8:7d:7e:a5:20:22:ee:1f:4f:45:
                    c7:e1:71:49:9e:aa:5e:a8:9a:94:f9:52:36:64:81:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F3:79:FF:15:13:98:8B:74:62:0A:D6:CF:82:E3:EF:59:2E:C1:BF
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rfN5_xUTmIt0YgrWz4Lj71kuwb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:56:7f:de:2f:25:ae:fe:21:63:ea:9d:72:fb:26:5c:1f:
         08:05:8f:e9:fe:15:6a:c9:9b:3a:32:64:6b:29:f3:b4:cb:32:
         33:74:5a:2b:6c:45:1e:83:55:61:8e:89:3e:a6:a0:ae:fa:cc:
         87:18:29:9c:0f:36:75:e9:67:9f:1d:c7:04:d6:0c:80:8e:06:
         49:3a:63:9c:6d:e7:69:9d:5e:9d:d2:f9:24:5b:ee:07:81:e6:
         03:fe:00:d9:3d:ec:fc:26:5f:98:de:28:89:d7:b6:e3:3f:d4:
         c0:9e:34:8d:c0:55:96:39:af:6c:d2:af:cc:37:88:92:de:e5:
         2c:bf:db:7a:a1:a6:90:ae:59:a8:9b:e5:5d:e5:fa:b3:6b:da:
         d3:d5:66:d0:b4:c8:b1:65:60:16:2b:2b:9c:9b:d4:59:41:2b:
         0e:5b:19:14:ce:53:ca:98:7b:ad:00:a7:f3:d8:a3:26:94:49:
         02:24:66:98:0c:d5:d4:6a:75:66:68:93:22:2d:bc:8f:cf:35:
         0b:7e:29:e8:45:b4:16:28:41:06:a6:89:61:06:18:b7:a2:01:
         51:f9:92:6c:0d:0c:35:40:6b:28:88:56:af:9e:c3:2f:84:1f:
         79:6e:b2:9e:6c:0b:53:d6:46:61:d0:da:34:fe:8c:4b:25:b4:
         eb:75:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----