Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/5EGr-vgX80xls8iLpoJB5T0IyAc.roa
File:                     5EGr-vgX80xls8iLpoJB5T0IyAc.roa (raw, json)
Hash identifier:          JrEf8ckNhQTYVdv9bk1huZkuMfX/KmU0JG8fwlv4Kyg=
Subject key identifier:   E4:41:AB:FA:F8:17:F3:4C:65:B3:C8:8B:A6:82:41:E5:3D:08:C8:07
Certificate issuer:       /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial:       0188576A9D992B23B7FBF43ADE372B407F14
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/5EGr-vgX80xls8iLpoJB5T0IyAc.roa
Signing time:             Fri 26 May 2023 09:36:24 +0000
ROA not before:           Fri 26 May 2023 09:36:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210644
IP address blocks:        5.42.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:6a:9d:99:2b:23:b7:fb:f4:3a:de:37:2b:40:7f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
        Validity
            Not Before: May 26 09:36:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e441abfaf817f34c65b3c88ba68241e53d08c807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:9b:a0:51:92:a7:a3:72:a8:b1:1d:ba:d6:
                    30:17:8b:db:84:a4:17:ba:5f:d7:6e:29:a6:ac:3a:
                    e6:d9:cf:ac:3b:fe:53:6c:4e:71:c7:9b:27:49:fe:
                    d6:7e:61:f2:a9:2f:63:df:63:60:ed:7d:5d:88:a4:
                    7f:29:ce:98:bb:b5:6f:bc:c8:ee:d0:fe:89:db:a9:
                    63:94:b4:da:42:2e:9a:1c:41:ad:a5:7a:92:3c:05:
                    4d:c7:77:96:ea:dc:bc:b0:15:c1:06:6c:f5:a4:71:
                    73:85:92:0f:27:3d:f4:6d:99:f3:4d:78:a1:53:ef:
                    97:1f:24:ac:26:41:4a:b4:a9:1c:98:5a:53:bd:9e:
                    aa:62:ec:a2:80:ac:ee:b0:b3:6e:1b:b7:63:db:e4:
                    2b:97:3a:14:ce:a6:0e:b8:6e:20:75:3e:88:6a:1b:
                    b7:05:83:38:80:a3:ac:1f:f3:8d:65:d0:85:e3:ad:
                    61:08:38:0a:f1:e0:00:52:e2:65:fe:4d:5c:76:1c:
                    b7:b6:0f:78:c9:df:ee:e2:8b:a2:d9:01:87:c8:c4:
                    fc:79:de:2d:c6:fc:d7:b1:f6:38:c4:66:eb:3d:da:
                    e9:85:a8:15:6f:d6:19:5e:8c:7c:31:47:5b:96:c4:
                    25:0a:d8:e9:75:3e:c4:9a:ad:6c:46:0f:60:64:ce:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:41:AB:FA:F8:17:F3:4C:65:B3:C8:8B:A6:82:41:E5:3D:08:C8:07
            X509v3 Authority Key Identifier:
                keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/5EGr-vgX80xls8iLpoJB5T0IyAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.42.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:6a:e5:ce:1b:ac:3f:52:10:98:26:1e:51:a3:5d:5d:30:8c:
         6f:d0:8e:59:d7:e7:d4:2d:5a:01:bb:de:ce:f8:30:a7:aa:3d:
         c7:50:29:74:72:2b:e6:16:95:98:89:53:3b:9f:02:8b:bb:e6:
         bc:fb:2f:1d:dc:92:90:e7:66:0b:07:ef:6d:d0:8e:7d:a4:5c:
         37:b1:33:9d:44:4d:c6:77:0a:3c:18:d1:3b:cf:4e:d4:f8:95:
         6a:ec:e8:6d:e4:b2:93:85:10:c6:df:57:3f:f3:ea:f9:74:8a:
         3a:23:f7:84:76:24:f0:9d:a7:41:4e:6d:a1:18:c4:d1:b8:4d:
         e9:c8:61:68:be:10:21:d6:a8:08:05:fe:4e:35:cf:ea:f9:3d:
         b2:30:48:0b:68:e2:1f:50:36:8a:b2:c8:a0:56:39:3b:ec:ae:
         52:e7:db:94:b4:20:d8:a2:d5:c3:ee:f7:a8:a4:d3:42:e2:0c:
         cf:2c:98:80:eb:eb:01:0e:c6:cf:4d:85:f6:b1:f4:07:c0:76:
         49:2a:ab:a3:f7:09:36:74:03:d8:9c:0d:b9:c9:75:f8:d8:22:
         0d:5f:55:1e:6f:9b:90:ab:5e:71:f6:b9:a1:18:85:dc:71:4e:
         08:95:de:15:5e:4f:37:18:46:53:77:67:22:36:ba:f3:f4:a1:
         49:b5:ef:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhXap2ZKyO3+/Q63jcrQH8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjMwNTI2MDkzNjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDQxYWJmYWY4MTdmMzRjNjViM2M4OGJhNjgyNDFlNTNkMDhjODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU6boFGSp6NyqLEdutYwF4vbhKQX
ul/XbimmrDrm2c+sO/5TbE5xx5snSf7WfmHyqS9j32Ng7X1diKR/Kc6Yu7VvvMju
0P6J26ljlLTaQi6aHEGtpXqSPAVNx3eW6ty8sBXBBmz1pHFzhZIPJz30bZnzTXih
U++XHySsJkFKtKkcmFpTvZ6qYuyigKzusLNuG7dj2+QrlzoUzqYOuG4gdT6Iahu3
BYM4gKOsH/ONZdCF461hCDgK8eAAUuJl/k1cdhy3tg94yd/u4oui2QGHyMT8ed4t
xvzXsfY4xGbrPdrphagVb9YZXox8MUdblsQlCtjpdT7Emq1sRg9gZM7dmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORBq/r4F/NMZbPIi6aCQeU9CMgHMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvNUVHci12Z1g4MHhsczhpTHBvSkI1VDBJeUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBSpeMA0G
CSqGSIb3DQEBCwUAA4IBAQBnauXOG6w/UhCYJh5Ro11dMIxv0I5Z1+fULVoBu97O
+DCnqj3HUCl0civmFpWYiVM7nwKLu+a8+y8d3JKQ52YLB+9t0I59pFw3sTOdRE3G
dwo8GNE7z07U+JVq7Oht5LKThRDG31c/8+r5dIo6I/eEdiTwnadBTm2hGMTRuE3p
yGFovhAh1qgIBf5ONc/q+T2yMEgLaOIfUDaKssigVjk77K5S59uUtCDYotXD7veo
pNNC4gzPLJiA6+sBDsbPTYX2sfQHwHZJKquj9wk2dAPYnA25yXX42CINX1Ueb5uQ
q15x9rmhGIXccU4Ild4VXk83GEZTd2ciNrrz9KFJte+q
-----END CERTIFICATE-----