Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa
File:                     V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa (raw, json)
Hash identifier:          36vQ+CYDy9QTixUbdmpLh+P51JEGbOeP6uNH3vGpmvM=
Subject key identifier:   57:94:31:CC:29:17:B9:27:CA:3B:1A:74:5F:DF:CE:54:1B:98:A1:51
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       018ACCBEE55E6E5ECD5BA72E007B196E6367
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa
Signing time:             Mon 25 Sep 2023 14:29:37 +0000
ROA not before:           Mon 25 Sep 2023 14:29:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9044
IP address blocks:        193.135.57.0/24 maxlen: 24
                          2001:678:e48::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:be:e5:5e:6e:5e:cd:5b:a7:2e:00:7b:19:6e:63:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Sep 25 14:29:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=579431cc2917b927ca3b1a745fdfce541b98a151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:22:c5:67:2d:98:ae:81:d8:76:80:c1:07:
                    fb:d4:ae:88:a7:62:ac:72:21:0d:1c:49:78:c3:37:
                    50:22:18:f7:71:40:fd:d8:ac:80:00:c2:11:ac:1d:
                    30:e1:42:37:5e:a0:4e:93:e0:c2:6e:07:1c:fd:ae:
                    fc:6e:85:0f:93:50:70:1b:03:e1:d4:e5:1c:7d:e1:
                    16:a4:10:d1:be:35:58:14:9d:f9:22:e9:c4:9c:58:
                    8f:89:88:ef:4c:67:84:16:8f:6a:01:64:57:c4:f3:
                    d0:a6:ea:28:96:82:f0:88:7f:ec:9a:30:4a:ca:4e:
                    1c:03:76:17:f1:c7:05:f5:71:88:a2:f5:17:81:9d:
                    20:98:46:70:55:ef:63:b1:ea:58:b0:39:2a:be:d9:
                    8c:d0:10:0b:fa:08:13:f5:73:2a:6a:4f:aa:14:7e:
                    84:88:6a:c4:1b:57:04:33:ba:b1:10:19:97:e2:04:
                    64:6c:d8:e1:51:b4:93:f1:89:9c:eb:7c:39:d9:e6:
                    97:38:2f:a9:f3:16:a4:c4:07:57:2c:18:51:e8:a8:
                    92:0c:a1:47:28:c4:00:64:0b:0c:38:28:63:8b:11:
                    ad:bd:40:d4:3c:e9:a2:4b:8e:d5:46:d0:5c:36:3a:
                    5e:3f:73:d2:fb:05:e0:9b:ca:72:bb:66:42:6a:d4:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:31:CC:29:17:B9:27:CA:3B:1A:74:5F:DF:CE:54:1B:98:A1:51
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/V5QxzCkXuSfKOxp0X9_OVBuYoVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.57.0/24
                IPv6:
                  2001:678:e48::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:32:70:05:87:71:c7:a8:a0:24:da:91:61:fc:f0:85:42:
         42:50:08:88:82:8b:57:52:dc:74:91:7e:7d:7d:fa:b4:73:29:
         a9:61:d0:a3:60:e7:98:ab:9c:47:ae:09:63:ab:93:12:94:16:
         81:7f:c7:46:fc:23:2d:7f:2c:e2:eb:23:2a:01:68:59:84:1f:
         00:de:ff:5f:5d:52:72:eb:21:98:25:4a:cc:83:69:e5:cd:9c:
         60:76:57:d7:95:91:e3:bf:c6:05:7e:d6:24:ee:42:89:e7:df:
         3e:ae:0a:92:21:b5:ab:a9:b3:3a:4c:39:2e:9b:fc:c5:af:b5:
         15:22:fc:75:a8:b6:29:47:ac:7f:2a:fd:4e:c1:b1:05:b9:71:
         3c:cd:22:61:fe:12:92:7a:53:95:a8:74:4a:82:19:52:39:8a:
         ab:1b:fc:9f:77:e9:35:3a:0c:29:05:12:8b:58:2a:aa:6b:e7:
         85:82:35:ef:88:07:6f:4d:99:46:4a:fb:d4:01:e0:73:9e:e5:
         23:bf:a4:19:ae:98:e8:ce:1d:f9:19:fe:e9:1e:c4:35:55:f0:
         67:f1:8d:66:b6:f0:5c:6f:51:97:92:44:1f:b8:7c:fe:86:06:
         11:c6:02:86:00:3f:50:23:58:30:fa:af:5f:77:1a:2a:04:01:
         66:fc:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----