Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Ukm42XF5JBLDVFMqcCO8oiqBAdU.roa
File:                     Ukm42XF5JBLDVFMqcCO8oiqBAdU.roa (raw, json)
Hash identifier:          zTiNxBMi9Z5+rQCngEC7YMVXGtXJaCX+tTfKEPRPIXQ=
Subject key identifier:   52:49:B8:D9:71:79:24:12:C3:54:53:2A:70:23:BC:A2:2A:81:01:D5
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       0189F88CDE95F2D4A3E0A14F14B956BD1980
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Ukm42XF5JBLDVFMqcCO8oiqBAdU.roa
Signing time:             Tue 15 Aug 2023 09:35:28 +0000
ROA not before:           Tue 15 Aug 2023 09:35:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62343
IP address blocks:        94.139.36.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f8:8c:de:95:f2:d4:a3:e0:a1:4f:14:b9:56:bd:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: Aug 15 09:35:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5249b8d971792412c354532a7023bca22a8101d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:d0:5e:61:6b:50:1b:07:42:45:e3:41:49:
                    c5:a8:50:34:c9:72:50:b5:f4:63:36:da:ff:eb:cb:
                    b7:2e:56:58:c3:bf:9a:4f:93:69:68:f0:0f:33:0a:
                    90:14:6a:2d:be:25:39:29:10:07:42:2c:2c:3d:9a:
                    b8:a1:60:12:4c:fc:2f:d8:c3:28:1d:88:6a:80:46:
                    e5:67:ba:13:05:5f:e6:fe:0c:1f:e6:c6:37:04:1d:
                    2d:0d:91:6a:bc:bc:0f:b4:67:dc:15:3b:bb:ac:a8:
                    b3:49:f6:d9:4c:4d:5f:f7:46:45:2f:8f:a4:c1:89:
                    6b:cd:1a:cc:d3:81:e8:c8:3e:76:2f:38:e8:83:a5:
                    08:1a:65:fb:2a:b6:50:62:af:79:d3:9d:dd:2d:cd:
                    0f:0a:41:0d:c5:80:92:f3:6a:13:7f:cf:2e:c9:bb:
                    f6:5e:c1:a7:66:c3:d6:1a:51:2e:59:b1:93:c9:46:
                    23:c7:cc:44:c8:94:ec:a4:40:90:df:e3:04:d6:87:
                    f1:8e:e7:f7:74:74:41:b8:d4:95:53:94:d6:6d:3a:
                    ee:87:9f:58:1b:19:07:02:df:c5:d0:e5:99:60:17:
                    89:c8:f8:33:19:e3:09:ce:e4:fb:af:6e:b9:c0:cd:
                    5d:00:98:8a:0b:fa:a7:bd:43:01:09:8e:5a:83:5b:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:B8:D9:71:79:24:12:C3:54:53:2A:70:23:BC:A2:2A:81:01:D5
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Ukm42XF5JBLDVFMqcCO8oiqBAdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:6c:7b:24:ba:2c:ea:82:77:1e:dd:1d:49:34:a8:52:b7:
         3a:88:b1:c2:0c:56:c8:e7:90:f8:fc:5e:27:ad:a9:ab:9c:c9:
         5a:2a:4b:12:ac:0d:ca:04:d2:8b:bb:02:fd:71:46:e0:cb:5c:
         03:9f:c1:35:c4:fc:fa:4c:97:9b:e4:7e:a6:c7:66:bc:58:0e:
         5f:de:27:24:98:24:f1:da:43:9f:b5:e7:82:ed:97:e4:af:26:
         87:b5:a4:a7:53:ab:88:c1:76:12:2f:f6:17:58:29:7a:c2:b2:
         c0:c1:02:59:41:e7:b8:dc:99:af:0e:50:0c:03:ea:87:a2:62:
         aa:b0:09:0a:0d:61:aa:e3:a1:47:ea:17:54:53:1b:ab:d7:a7:
         05:54:71:b9:83:39:30:ab:2f:12:56:33:29:67:a9:dc:d9:01:
         82:f9:7e:3d:e6:c0:eb:9a:5d:df:97:0a:cd:dd:19:b4:d3:9d:
         34:4b:1d:b9:fc:54:9e:86:16:fe:f6:5e:77:46:65:3d:44:ae:
         2b:b3:ab:b7:25:75:f9:cb:b1:96:00:3c:17:20:8f:95:f3:ee:
         5d:5b:0b:52:aa:da:86:ea:e5:53:4e:2b:90:c5:fe:b9:a0:93:
         7e:d7:82:55:88:7e:48:82:1c:1d:92:70:f1:d3:3d:1b:e6:bb:
         8a:91:f8:99
-----BEGIN CERTIFICATE-----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