Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/Qct91JIYv61sZcD8PyEEPyuMlPI.roa
File:                     Qct91JIYv61sZcD8PyEEPyuMlPI.roa (raw, json)
Hash identifier:          AN4PwVscGBoyxgBHx33PexUN5aayNHKFZ+oF8S1wBrI=
Subject key identifier:   41:CB:7D:D4:92:18:BF:AD:6C:65:C0:FC:3F:21:04:3F:2B:8C:94:F2
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       018571D7B02BD39F7A4A976F4EE53F62060E
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/Qct91JIYv61sZcD8PyEEPyuMlPI.roa
Signing time:             Mon 02 Jan 2023 09:37:18 +0000
ROA not before:           Mon 02 Jan 2023 09:37:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25717
IP address blocks:        193.221.70.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:b0:2b:d3:9f:7a:4a:97:6f:4e:e5:3f:62:06:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Jan  2 09:37:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41cb7dd49218bfad6c65c0fc3f21043f2b8c94f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:88:4a:68:8e:db:b2:5b:bc:7a:17:b7:2a:
                    a2:6e:9d:4e:d9:f7:e0:0c:7a:58:a4:ef:f8:f8:ec:
                    da:3c:2c:97:db:fd:13:e3:29:83:a0:5c:02:06:21:
                    e0:26:d6:9d:c4:02:b1:38:5b:a2:72:af:e1:eb:70:
                    23:e4:12:44:63:23:63:d6:a9:cf:7f:f1:4e:48:58:
                    2b:8b:98:25:42:7f:c5:a1:d8:0e:f1:4e:ff:26:51:
                    02:1c:21:4e:31:c6:39:33:7a:bc:ef:fa:6f:67:d7:
                    c5:58:70:d1:eb:67:6d:8d:ee:e7:92:2a:d8:13:8b:
                    53:93:64:1b:b2:25:55:ee:2f:29:90:04:71:51:f8:
                    d8:3b:97:88:b4:13:ae:af:f1:77:b1:e2:4b:82:cc:
                    f0:e0:a9:a2:d4:37:25:14:af:3a:19:9b:c8:d0:96:
                    74:ac:e7:8a:c1:c2:13:3d:1d:d6:9d:35:6e:87:51:
                    09:2e:a9:0d:bc:e8:c0:5e:18:28:48:8a:e3:47:08:
                    86:49:ba:31:86:54:82:9d:2c:10:6b:55:fd:de:90:
                    9f:78:75:95:b1:f7:65:d0:f7:44:51:67:5f:f7:5b:
                    be:75:ae:f9:e0:d0:e4:c7:8a:cc:a4:a2:93:57:ac:
                    ec:a2:89:10:44:1c:66:07:5c:5a:eb:8a:66:4f:63:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:7D:D4:92:18:BF:AD:6C:65:C0:FC:3F:21:04:3F:2B:8C:94:F2
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/Qct91JIYv61sZcD8PyEEPyuMlPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.221.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:23:8d:f4:8e:82:c1:11:22:8e:33:31:d0:11:54:03:92:
         ad:f9:a8:e7:77:53:06:8f:62:e0:ca:85:05:39:49:e1:f8:e6:
         ff:c1:ee:4a:36:c3:2a:cf:ea:e4:eb:76:a6:41:aa:16:7e:d7:
         a4:b1:9d:30:89:0e:02:d7:73:61:37:cd:40:ad:54:dd:58:a5:
         e1:f4:b3:fe:b9:78:6f:eb:1b:b0:7c:da:b3:ec:b8:de:69:73:
         f0:b4:02:32:0c:c9:07:bc:6d:7b:df:e1:bf:f6:60:71:38:36:
         f2:a0:06:fd:6c:aa:cf:5d:54:f4:54:37:72:61:47:a9:dc:28:
         96:a4:a7:56:d8:3f:75:6e:18:64:dc:a2:c7:31:52:d0:db:a7:
         72:2d:ca:96:fc:e2:f3:68:46:d7:af:f9:1b:06:11:03:db:bc:
         3b:e1:db:98:2e:7a:3b:2f:63:42:12:dd:1e:dc:7d:84:55:9c:
         dd:b5:bf:88:18:4e:4c:f1:b7:1a:ef:55:a2:6e:2a:79:f2:9b:
         d7:96:bf:1c:2f:79:9e:0a:3e:9b:e1:a6:18:85:97:ec:b6:76:
         e5:11:52:98:2a:0d:d9:3e:50:3f:72:54:c0:39:c7:ce:ea:25:
         76:92:7a:9e:60:7e:93:68:5c:2a:14:1c:96:59:38:ed:b9:32:
         20:d5:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----