Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/FqnDzfoy_yEJ603JVdPUXvdMC9c.roa
File:                     FqnDzfoy_yEJ603JVdPUXvdMC9c.roa (raw, json)
Hash identifier:          IXCOWeUZNL2dOy8Vau8OnuTdtoXOPPW8rBUkrtTGtV4=
Subject key identifier:   16:A9:C3:CD:FA:32:FF:21:09:EB:4D:C9:55:D3:D4:5E:F7:4C:0B:D7
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       01870DF4E8DDAA226251D0F07A147AD24A17
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/FqnDzfoy_yEJ603JVdPUXvdMC9c.roa
Signing time:             Thu 23 Mar 2023 10:12:46 +0000
ROA not before:           Thu 23 Mar 2023 10:12:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211440
IP address blocks:        5.183.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:f4:e8:dd:aa:22:62:51:d0:f0:7a:14:7a:d2:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Mar 23 10:12:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16a9c3cdfa32ff2109eb4dc955d3d45ef74c0bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:52:36:c1:62:ca:e1:3b:11:93:f6:87:53:
                    2f:7b:16:49:9e:bc:44:4b:4d:96:8e:7d:c4:95:45:
                    a6:3d:8b:5a:f6:13:73:31:9c:29:6f:83:8e:0b:d9:
                    8f:f6:5b:2a:21:a4:58:d0:04:2b:9d:7d:fa:14:a6:
                    10:c8:a4:77:60:11:b9:8a:4e:5c:5a:39:ee:6d:4d:
                    5b:3f:e8:20:f8:93:ce:c4:5c:97:d3:88:d8:87:a1:
                    0a:48:83:1a:8b:18:5d:78:4e:7b:af:3b:e2:86:e0:
                    a6:63:27:d3:bf:b1:85:fa:41:36:47:af:01:c1:00:
                    8e:6d:20:db:09:b9:48:0c:38:6b:25:1b:ca:40:0d:
                    92:bf:69:ed:51:42:35:d2:bf:cd:d4:28:65:3b:36:
                    0c:e6:52:27:b1:5a:18:57:a7:69:89:e3:f5:cf:ef:
                    79:03:92:fc:80:51:f6:82:f1:21:3b:79:e1:1e:6c:
                    16:a9:1e:e3:d2:1d:91:e4:0a:d4:1d:82:6c:33:ed:
                    64:45:89:cd:85:27:16:6a:b7:1f:96:90:b9:01:ac:
                    0d:08:79:63:4a:58:11:9e:4b:75:48:4b:e4:1e:9b:
                    ef:5c:d1:d6:29:f2:38:d3:ae:60:05:a4:9c:80:1e:
                    fc:ec:fd:d1:7f:18:1f:fb:f7:36:84:97:71:cc:a3:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:C3:CD:FA:32:FF:21:09:EB:4D:C9:55:D3:D4:5E:F7:4C:0B:D7
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/FqnDzfoy_yEJ603JVdPUXvdMC9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:dd:b6:d7:bf:53:27:6c:2a:e9:74:e6:c9:e6:e2:b1:87:
         90:ff:42:b3:11:ae:37:ba:92:84:0f:85:88:b7:72:5d:ec:89:
         2c:b7:46:ca:15:11:2f:c0:40:f0:83:a1:72:db:c4:2e:6a:22:
         61:4c:ff:5c:50:e2:21:d8:fe:ef:64:6d:66:8b:80:58:a2:0a:
         50:60:ec:06:b7:36:1e:e2:d3:ab:1d:bf:4d:b6:87:bc:b9:c4:
         1b:ac:40:e4:89:a3:9f:4c:47:c6:4e:ec:f5:f0:ec:9d:95:45:
         51:99:22:1d:a9:c2:e8:18:e3:d9:8e:65:2b:69:b2:42:95:b7:
         48:4f:6c:cf:d6:9b:b5:0a:02:89:18:e1:56:bc:11:0a:72:74:
         09:e9:af:3b:e6:ad:75:c5:16:9b:ab:e2:ac:f0:9c:a4:f7:ba:
         f2:b6:8a:7d:4f:10:9d:e5:c1:f0:1d:ce:18:3c:0e:df:13:83:
         25:db:28:73:16:bf:cc:7d:c6:e7:3c:1b:15:5c:1b:80:c1:11:
         80:bb:c7:1c:f0:c8:86:70:74:de:44:ad:84:4d:29:8d:5a:62:
         e5:fe:0a:3d:21:87:b8:fe:f8:bb:4c:ed:24:f0:1b:31:a0:5d:
         bf:cd:2a:d7:42:0b:1b:b4:92:cb:2a:3e:3c:56:31:aa:0c:27:
         47:8a:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----