Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/jZgVny5yj3xeof0FPmyNwN2twgA.roa
File:                     jZgVny5yj3xeof0FPmyNwN2twgA.roa (raw, json)
Hash identifier:          LaKxPVef0bLlVQGIA5mlpelCAAtE6K3ZN+KXO+Pomy0=
Subject key identifier:   8D:98:15:9F:2E:72:8F:7C:5E:A1:FD:05:3E:6C:8D:C0:DD:AD:C2:00
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       018C493E7B4BB3D9E9CB123145EA3DD17FF4
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/jZgVny5yj3xeof0FPmyNwN2twgA.roa
Signing time:             Fri 08 Dec 2023 11:44:40 +0000
ROA not before:           Fri 08 Dec 2023 11:44:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57793
IP address blocks:        212.18.110.0/24 maxlen: 24
                          2a12:8400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:49:3e:7b:4b:b3:d9:e9:cb:12:31:45:ea:3d:d1:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Dec  8 11:44:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d98159f2e728f7c5ea1fd053e6c8dc0ddadc200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:26:ed:60:d8:e3:d8:7b:8a:3b:09:21:12:ce:
                    18:6f:50:dd:74:fe:3e:dc:99:5b:c1:60:13:45:42:
                    36:47:c9:84:9c:f6:7a:db:c1:c9:c0:3c:ac:c9:16:
                    84:98:f9:5d:a8:52:b7:0e:c1:15:ce:cb:9d:9d:62:
                    70:a6:94:9d:c4:b9:b5:9f:74:d9:e9:f3:96:e0:dd:
                    65:8c:c9:ed:50:38:4a:71:79:41:a7:5f:ba:47:3a:
                    ba:97:9e:c0:0b:8b:57:83:b3:27:1a:d3:1b:e5:6a:
                    03:33:95:5d:ed:61:43:53:c1:46:b5:30:4c:69:5a:
                    29:50:63:21:b1:a8:54:99:74:fb:d1:27:87:f9:be:
                    09:58:c2:18:d6:30:8c:6d:5e:89:80:33:dc:62:7b:
                    d8:a2:67:cd:66:a0:86:f1:db:9b:70:42:b3:75:5f:
                    58:35:20:6c:a6:72:40:49:b9:fa:7d:4e:b3:28:8d:
                    ca:56:87:46:26:d0:1e:a5:94:be:9c:5d:c7:82:ec:
                    05:f3:ca:59:1f:3e:aa:28:41:44:f4:d5:49:00:ff:
                    74:f4:78:17:2e:51:70:e1:53:0a:8a:50:02:bf:b6:
                    19:48:77:23:44:93:f0:e2:54:e3:06:86:8e:41:8f:
                    3b:7f:00:80:51:14:3d:70:e8:d5:25:04:76:ca:6a:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:98:15:9F:2E:72:8F:7C:5E:A1:FD:05:3E:6C:8D:C0:DD:AD:C2:00
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/jZgVny5yj3xeof0FPmyNwN2twgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.110.0/24
                IPv6:
                  2a12:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:19:de:b1:ef:63:42:f6:43:61:ec:41:06:7e:98:5a:76:
         ff:4a:60:4a:2c:3a:42:51:4e:5f:1f:fc:59:5d:03:ce:73:d6:
         b7:d9:1c:f2:66:80:b0:71:28:c3:0e:58:fd:5a:28:32:a0:0a:
         3f:07:10:0f:a8:4b:70:7d:ad:75:a3:52:e1:5c:e5:ea:78:70:
         d0:81:cb:db:5d:d8:33:e2:a1:04:1a:98:be:fe:31:82:a0:2b:
         e3:bd:d2:48:2f:5f:0c:87:b0:bc:a5:a9:76:1d:d9:8a:75:b3:
         2d:cb:f0:a7:fc:b4:74:d2:62:85:82:a3:a0:09:61:c1:1a:95:
         ea:a8:1f:05:7a:21:9c:7c:8a:c8:c0:82:a3:7b:c9:27:fe:9b:
         59:14:e3:6f:4f:a9:f5:26:2a:a4:3d:4e:03:24:46:fb:87:79:
         65:33:b4:cd:e2:75:53:f4:68:2b:77:0e:4d:30:ac:94:bd:43:
         eb:b5:d7:2e:ef:cd:24:19:db:bf:f2:dd:8f:df:b2:e2:51:c6:
         31:a9:9f:1d:c9:6a:17:b7:f1:a9:90:2e:ba:6a:1b:04:69:c6:
         6d:1e:2c:02:fc:e6:ae:29:36:d0:80:40:98:2f:2d:be:13:f3:
         82:88:5f:f7:b7:df:88:fa:80:4b:18:c3:9b:ad:f6:ef:ab:13:
         0f:ba:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----