Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/I9yzpb5Nj0BT1aLqNwP-tmCxMos.roa
File:                     I9yzpb5Nj0BT1aLqNwP-tmCxMos.roa (raw, json)
Hash identifier:          yazRHL3gpUnkly0502OuHG4A2enLADUUJgrkJVqdj/s=
Subject key identifier:   23:DC:B3:A5:BE:4D:8F:40:53:D5:A2:EA:37:03:FE:B6:60:B1:32:8B
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       018B163C5B22DBC9BFEC360D30E4A9FDCF6F
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/I9yzpb5Nj0BT1aLqNwP-tmCxMos.roa
Signing time:             Mon 09 Oct 2023 20:58:56 +0000
ROA not before:           Mon 09 Oct 2023 20:58:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58026
IP address blocks:        104.167.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:16:3c:5b:22:db:c9:bf:ec:36:0d:30:e4:a9:fd:cf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: Oct  9 20:58:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23dcb3a5be4d8f4053d5a2ea3703feb660b1328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:52:2c:15:f5:bc:d7:ab:6d:58:7c:ba:37:
                    bf:f0:a2:5d:2c:15:81:fe:91:b1:21:a5:58:2e:1a:
                    50:86:f8:51:9e:70:6f:e9:7e:cb:30:74:4b:b2:f4:
                    4d:33:ab:bd:f7:be:cd:df:77:db:58:7e:80:cd:a7:
                    ab:70:d0:25:16:27:a1:93:9b:c6:1e:3b:a6:f6:12:
                    57:d9:f7:ad:cf:b0:20:4b:e0:45:e1:51:17:96:a2:
                    bd:c0:9d:90:1c:a8:46:4e:f3:d5:32:c6:a3:0c:6f:
                    10:5e:a3:17:fe:b9:9d:f6:e5:a5:31:57:4b:fb:0f:
                    d6:ec:44:3b:dc:57:16:d5:e8:7f:03:9e:3f:a2:b5:
                    7b:d0:29:db:66:b5:ee:b1:77:be:aa:77:b3:f4:87:
                    2f:6f:05:89:ed:78:a4:d7:c6:8f:bc:44:e0:23:b8:
                    ac:72:52:c6:b0:de:c3:a8:fc:17:35:c1:50:51:a2:
                    52:77:74:5a:55:70:41:7e:19:9a:5f:3a:80:d8:b0:
                    8d:fb:e3:2e:e8:52:01:54:71:f1:55:36:8b:f5:a1:
                    ad:8b:d6:27:06:a3:d3:d6:62:25:bd:f4:cd:a9:0f:
                    dd:6c:81:25:4a:8e:fb:c7:af:4d:b9:dd:06:61:25:
                    0d:6a:3c:d4:de:93:a7:11:9e:41:32:02:12:49:14:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DC:B3:A5:BE:4D:8F:40:53:D5:A2:EA:37:03:FE:B6:60:B1:32:8B
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/I9yzpb5Nj0BT1aLqNwP-tmCxMos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:35:c4:f5:36:e3:aa:3d:dc:20:04:38:98:4f:89:6c:48:09:
         71:59:02:f3:e3:6f:90:b0:bd:3e:79:b4:25:78:a4:96:1e:f1:
         21:5a:7d:68:fb:fc:90:18:b7:31:d9:fe:10:d0:0e:aa:25:fc:
         8c:32:8c:a8:7c:08:56:1f:e8:70:59:cf:c3:60:cc:c3:d6:93:
         93:8b:32:3a:0f:7f:8f:ea:02:b5:fb:78:6c:05:de:36:e2:99:
         19:04:f3:da:46:f4:3f:36:09:7c:48:d5:38:14:ad:ac:34:69:
         ce:8e:d8:75:31:b1:de:e1:1a:9b:f2:09:da:cb:d6:ea:9a:a9:
         ac:1f:ef:e9:4b:43:5e:e9:63:b5:58:be:b6:db:c8:99:05:b4:
         a9:27:c0:12:de:fe:cb:56:26:b7:3a:1a:d4:a5:5e:66:6c:65:
         35:1e:f0:ba:a4:78:50:48:4c:79:80:ff:12:5a:b5:7a:0c:64:
         a2:f1:f3:67:dc:45:64:fa:28:5f:19:b5:84:78:59:32:e0:aa:
         88:a8:da:62:93:e3:43:c5:0d:93:0d:dd:00:94:e8:0f:d4:d2:
         05:f4:25:11:90:f1:33:30:ee:4b:31:44:99:30:33:40:86:7f:
         53:5e:2f:c8:7e:3e:19:45:2e:5e:d6:b1:31:d0:08:ff:23:b7:
         cd:e4:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----