Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/5X3jLh7O-NvoRhCXcTGzNbHncSM.roa
File:                     5X3jLh7O-NvoRhCXcTGzNbHncSM.roa (raw, json)
Hash identifier:          U9DcI3Yr2UUMOptZyJJNUzzzx0mcwfsf5o7S12ExwCg=
Subject key identifier:   E5:7D:E3:2E:1E:CE:F8:DB:E8:46:10:97:71:31:B3:35:B1:E7:71:23
Certificate issuer:       /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial:       01857102C5A5D437207DD7391F8A36A2D94E
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/5X3jLh7O-NvoRhCXcTGzNbHncSM.roa
Signing time:             Mon 02 Jan 2023 05:44:45 +0000
ROA not before:           Mon 02 Jan 2023 05:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47995
IP address blocks:        193.164.16.0/22 maxlen: 22
                          2a0d:70c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:c5:a5:d4:37:20:7d:d7:39:1f:8a:36:a2:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
        Validity
            Not Before: Jan  2 05:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e57de32e1ecef8dbe84610977131b335b1e77123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:79:50:6a:c7:c7:d2:8c:16:32:4c:6a:32:
                    27:32:a9:49:40:15:69:83:6b:a5:3e:da:a4:85:68:
                    0e:4a:55:d7:61:67:9d:c1:a8:6a:4e:89:b8:7a:d8:
                    f8:eb:e3:41:85:75:71:7c:81:76:82:d3:21:b1:9b:
                    44:13:30:4e:af:e1:21:5a:66:57:8a:a4:8b:0f:0e:
                    14:40:46:c9:81:fb:41:4c:7d:da:e3:cd:99:30:61:
                    44:38:4a:dd:ef:ec:76:a9:9b:73:a0:d6:96:37:c5:
                    b3:57:ca:3a:84:76:13:81:d6:1e:1e:fa:b9:98:f6:
                    cc:61:80:d8:c3:6e:b0:69:15:5f:1c:20:75:97:cb:
                    1f:ed:e8:02:7f:c7:fd:d3:88:2f:a0:5f:71:8d:d9:
                    b2:f1:90:e8:37:09:90:e3:b5:9e:de:04:c8:ec:d5:
                    fa:06:8e:4a:53:df:ea:cc:d1:7d:9d:ff:fa:a1:61:
                    08:4f:92:44:ea:d1:0e:3a:eb:80:80:b1:f4:90:dc:
                    b9:d7:d3:4f:f5:cf:33:4b:a5:e9:c5:69:45:c2:da:
                    5e:07:09:31:9f:2c:7a:a6:d6:8c:3f:26:84:3e:fe:
                    1d:2d:dd:2a:8b:b4:2d:d7:ec:3c:61:6c:7d:d1:e8:
                    1b:0b:ae:f7:9c:be:01:c0:c6:aa:39:e3:42:17:c0:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7D:E3:2E:1E:CE:F8:DB:E8:46:10:97:71:31:B3:35:B1:E7:71:23
            X509v3 Authority Key Identifier:
                keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/5X3jLh7O-NvoRhCXcTGzNbHncSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.16.0/22
                IPv6:
                  2a0d:70c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:48:4b:b9:4d:b3:07:89:89:5d:20:93:d6:17:76:5f:69:31:
         87:d4:1d:50:60:2e:bd:a2:ae:4f:5f:67:c2:0d:b1:34:7f:3a:
         40:29:4c:5c:43:36:1d:8c:75:8b:84:6a:f5:ba:f2:ad:8f:e5:
         6a:c4:dc:81:c4:53:d6:08:d6:d2:ed:40:39:b0:64:29:11:d7:
         f8:60:fa:20:43:08:c8:b2:e2:55:23:31:9c:55:5b:a6:d0:20:
         48:af:d3:54:34:ff:a8:a7:60:84:0c:e9:1a:d0:c3:a7:31:d8:
         99:26:4f:eb:84:9e:6d:67:14:bd:1f:43:95:35:f1:2e:cc:a7:
         8d:24:41:8e:a5:aa:c2:3e:ef:3d:c3:02:7f:13:b3:78:c3:1e:
         b9:74:89:a2:0a:0e:fe:9b:cc:31:57:53:2c:ec:cd:f9:1e:18:
         6e:8a:47:1c:9e:26:b0:fc:a8:cd:72:3a:7b:a0:03:be:ae:65:
         aa:63:12:a7:5b:d5:1e:b2:99:93:7e:90:e9:de:dc:61:82:e0:
         a3:d7:6e:12:d5:03:d0:62:0b:c1:db:8b:75:f6:6d:40:ea:1d:
         7c:fb:db:93:ac:68:cc:aa:c2:32:ca:31:af:25:e1:be:80:03:
         d4:67:fa:64:4d:32:5c:36:9b:4e:0d:e6:3e:ce:6d:82:68:75:
         94:b9:87:86
-----BEGIN CERTIFICATE-----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