Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Pm5D4koficPch0ygSFSh_N55GdI.roa
File:                     Pm5D4koficPch0ygSFSh_N55GdI.roa (raw, json)
Hash identifier:          qAOAWedDVXuhqunxIwd53kSv6k1oDPZQchu28oo1G2M=
Subject key identifier:   3E:6E:43:E2:4A:1F:89:C3:DC:87:4C:A0:48:54:A1:FC:DE:79:19:D2
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       01892569B01E68CDFB1FCDC5CEF6510589ED
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Pm5D4koficPch0ygSFSh_N55GdI.roa
Signing time:             Wed 05 Jul 2023 09:37:10 +0000
ROA not before:           Wed 05 Jul 2023 09:37:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        188.209.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:25:69:b0:1e:68:cd:fb:1f:cd:c5:ce:f6:51:05:89:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jul  5 09:37:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e6e43e24a1f89c3dc874ca04854a1fcde7919d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:6f:e4:09:fb:77:b9:c0:ff:43:a2:41:47:
                    46:e7:e6:39:bc:7f:40:5a:df:ab:16:06:1f:7a:32:
                    89:49:78:b3:a4:6c:0a:2b:28:c1:b1:b6:31:01:84:
                    f7:ee:7b:34:eb:40:0e:5b:4b:9b:b4:d6:c9:59:5f:
                    f8:5f:f2:0c:fe:6f:21:51:33:fb:80:e3:0d:12:5c:
                    2d:ce:b3:ab:bf:af:09:2c:75:d0:62:c4:38:13:e8:
                    f7:4b:67:be:76:80:52:36:90:a9:10:9d:31:73:6a:
                    a5:66:d6:9d:be:6c:c7:d8:24:88:fb:e2:a1:54:19:
                    18:4d:27:cd:9a:d9:53:96:00:44:a9:19:78:55:96:
                    f7:4c:f9:0a:4e:bf:bc:89:70:02:cc:51:7e:eb:30:
                    0b:96:a2:97:a7:d9:d5:54:99:36:b6:3e:ab:79:63:
                    f7:10:3c:1d:98:ab:91:1f:fc:66:40:08:57:6f:e5:
                    fe:15:e9:08:03:40:f6:80:22:bd:3f:b5:1a:fc:3f:
                    5b:b2:1b:7e:7f:7d:e8:3c:93:ce:c3:8f:8e:21:05:
                    03:3b:6b:84:d3:1e:3a:0a:1c:d8:3e:d0:1e:8f:71:
                    3e:d7:e6:49:06:a9:b9:67:da:2d:df:d1:dc:47:e7:
                    9d:68:c0:4f:21:6e:f8:da:1d:cb:c1:f3:07:46:49:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:43:E2:4A:1F:89:C3:DC:87:4C:A0:48:54:A1:FC:DE:79:19:D2
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Pm5D4koficPch0ygSFSh_N55GdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:51:ae:04:af:65:83:e8:47:ac:ed:a0:ea:7b:0b:0e:c0:
         62:7b:65:9b:df:27:eb:ed:20:17:d4:1a:0c:6b:47:d2:6d:de:
         71:ba:5c:9c:6c:79:be:f7:ef:a6:45:68:e9:6a:06:73:12:86:
         71:3c:d5:68:50:ee:5b:d3:8b:8d:e8:9c:f2:b6:ef:cc:11:14:
         32:45:26:ef:5c:80:f0:9d:76:f6:bb:45:4f:80:16:85:4e:4f:
         f7:c9:94:07:ae:43:4b:1c:f4:9d:44:ac:cb:22:d1:1f:47:1b:
         d3:14:c8:5d:20:45:b8:fe:a6:3e:43:6d:c3:51:05:e8:a5:84:
         a9:d6:3d:3f:b8:68:43:d6:06:75:c1:02:d2:a9:df:f9:49:c8:
         d0:d9:2b:6e:63:59:4c:cd:f4:7d:21:5c:76:f9:e6:d4:c5:81:
         24:36:74:31:8c:63:8b:96:d6:57:ff:23:f2:96:9f:18:fd:fd:
         ed:ea:a5:c3:f6:71:d2:ec:68:e6:2b:01:4e:d5:35:36:8a:96:
         ec:59:32:6e:9b:ac:7e:b6:ea:ff:69:c2:26:b4:13:27:c4:99:
         96:ea:98:b8:3f:4e:9f:96:28:f1:b7:20:b2:f8:be:81:6a:6b:
         da:fc:ab:35:5c:e5:7c:ff:19:7a:d5:ea:2d:97:6e:cd:6e:52:
         d3:7c:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----