Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa
File:                     83wrxsRymYYCumPQvQhiZaESyDM.roa (raw, json)
Hash identifier:          S77Npxs3NYUliyM4KmA25bcBETHyT+ssFhehZgZ9Lik=
Subject key identifier:   F3:7C:2B:C6:C4:72:99:86:02:BA:63:D0:BD:08:62:65:A1:12:C8:33
Certificate issuer:       /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial:       01865E4D6A5EA03A002CEF3F64C9862EF2FE
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa
Signing time:             Fri 17 Feb 2023 07:36:17 +0000
ROA not before:           Fri 17 Feb 2023 07:36:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39120
IP address blocks:        5.83.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5e:4d:6a:5e:a0:3a:00:2c:ef:3f:64:c9:86:2e:f2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
        Validity
            Not Before: Feb 17 07:36:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f37c2bc6c472998602ba63d0bd086265a112c833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:f6:02:47:81:08:ff:61:5e:43:8d:2f:d2:
                    3a:ef:a9:4c:9b:8c:22:54:df:eb:ac:11:6e:a6:ed:
                    16:0e:01:c9:05:4c:52:d2:b9:de:64:99:a5:47:d0:
                    1e:a2:f7:be:19:1d:b0:f9:ec:d2:9c:bb:aa:c3:60:
                    4b:2f:52:16:9f:0c:d7:dd:51:ee:74:2f:ab:2b:cd:
                    f8:6c:a1:b7:23:43:78:07:8b:33:75:35:a7:04:cb:
                    58:66:68:5f:98:71:cc:18:f2:73:b2:f3:0e:e7:71:
                    be:6c:2b:14:87:d6:c5:31:64:af:da:b2:91:df:b8:
                    29:e2:72:d5:b4:49:ad:96:bf:a3:d9:3a:a6:da:50:
                    bd:86:e8:cc:6d:d8:6f:9c:cf:67:b4:b3:83:03:03:
                    21:39:9b:a3:08:40:bf:cc:d9:b3:1d:3e:fe:25:0e:
                    c4:e9:60:d9:18:48:e3:ab:6b:7e:1c:08:fa:df:74:
                    25:63:a7:75:81:32:ea:01:fa:db:78:0e:17:03:f1:
                    af:1b:86:17:da:e5:2a:77:fb:a4:67:ae:98:a9:2a:
                    28:11:51:08:ed:10:0f:92:42:14:14:64:77:33:91:
                    21:22:08:05:cf:99:df:fe:14:a9:14:97:7d:48:d3:
                    3e:9b:d2:db:fc:af:0e:d6:b5:30:e1:5c:12:49:e1:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:2B:C6:C4:72:99:86:02:BA:63:D0:BD:08:62:65:A1:12:C8:33
            X509v3 Authority Key Identifier:
                keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/83wrxsRymYYCumPQvQhiZaESyDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:63:8d:ec:2f:b6:1d:6a:e4:5e:a8:1e:bf:09:8e:9f:dc:2d:
         3d:d7:9e:ec:ba:8b:6c:a2:ef:5d:46:63:bb:ba:e0:c9:09:58:
         f3:73:62:cf:71:0a:ba:3b:1f:62:a6:70:ab:ec:d0:c6:e4:36:
         f3:8e:30:06:83:c6:69:9f:3b:34:c1:4d:76:70:77:11:44:eb:
         a4:8b:eb:f5:4b:9f:9b:4d:7a:8f:85:cc:b4:0d:f7:25:ed:a8:
         9a:7d:ec:bd:cd:9a:f6:2d:5a:60:35:1c:d4:ed:b0:68:e9:00:
         2c:72:1a:1c:f0:3b:53:27:b8:01:2c:75:a4:a6:0a:38:f7:72:
         05:c8:62:aa:07:74:51:74:43:27:39:1c:81:83:ed:5e:a7:0a:
         c9:58:61:3a:22:fa:8b:da:4c:22:6d:f8:b0:c9:58:b0:d2:16:
         ef:df:6e:cf:b8:c9:4a:c8:cb:01:90:2e:5b:14:9a:1e:79:10:
         2e:6c:c3:81:55:42:99:ef:5f:a4:bb:92:2f:34:8f:d2:d5:3b:
         61:ce:0c:a8:ab:2c:b8:62:f2:57:a7:dc:96:7e:98:76:e3:ee:
         75:d2:ac:84:d6:4e:b9:d9:7b:4d:ce:0e:28:28:e3:2e:9d:5c:
         91:83:8b:03:b6:54:03:bb:9a:74:b7:d0:22:47:78:c7:a2:0e:
         69:63:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----