Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/5wXuk-IkchXM_v4PEgCTJIawLvc.roa
File:                     5wXuk-IkchXM_v4PEgCTJIawLvc.roa (raw, json)
Hash identifier:          EtPwpkiwiL2xaJdqBkB+Z0ie00/R9/h4drdAgOGs5HY=
Subject key identifier:   E7:05:EE:93:E2:24:72:15:CC:FE:FE:0F:12:00:93:24:86:B0:2E:F7
Certificate issuer:       /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial:       0185700B94641841E9B456B3D7DDA77F53F0
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/5wXuk-IkchXM_v4PEgCTJIawLvc.roa
Signing time:             Mon 02 Jan 2023 01:14:45 +0000
ROA not before:           Mon 02 Jan 2023 01:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207988
IP address blocks:        193.7.212.0/22 maxlen: 22
                          2a07:cc00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:0b:94:64:18:41:e9:b4:56:b3:d7:dd:a7:7f:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
        Validity
            Not Before: Jan  2 01:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e705ee93e2247215ccfefe0f1200932486b02ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:0c:fd:6e:5f:21:63:e4:4c:c8:84:97:bf:
                    7b:53:12:57:28:61:d0:0e:8f:8f:06:e8:ec:94:8b:
                    99:af:3b:00:db:a3:c3:28:95:97:96:89:83:b2:ad:
                    58:c0:25:32:c0:68:fe:2a:47:f9:a8:eb:a9:0b:08:
                    a9:2e:5a:4e:ab:4f:fb:54:4a:78:83:64:c0:f9:10:
                    b8:11:51:af:f6:d8:e3:80:13:fa:37:01:62:cc:c7:
                    db:03:30:9c:9d:90:8d:13:e0:3e:e0:4d:69:55:65:
                    0a:8a:b9:5c:1c:05:b6:7c:23:35:12:83:9f:7e:3e:
                    b0:e8:58:dc:ea:eb:88:db:2e:97:fd:73:56:45:15:
                    1a:86:88:2e:63:de:72:6f:32:50:a6:03:ab:94:b2:
                    d1:31:d6:9c:b7:46:73:4b:31:64:82:19:bc:1e:c8:
                    73:18:27:a1:ff:5f:21:00:3b:ee:2c:4a:a3:7e:4f:
                    c3:0f:5d:62:cc:7d:5f:35:4d:63:a1:f4:32:53:f7:
                    9c:9d:8d:b2:e5:30:2d:6d:f1:3b:b1:d3:b6:38:c8:
                    a2:5f:cf:98:f0:c2:6f:b7:78:e8:84:46:0e:4f:27:
                    f2:b9:b0:2b:5e:9b:9b:6e:29:9d:d1:5c:9b:79:89:
                    43:44:5c:4e:41:38:cf:1a:47:28:c9:10:57:c8:78:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:EE:93:E2:24:72:15:CC:FE:FE:0F:12:00:93:24:86:B0:2E:F7
            X509v3 Authority Key Identifier:
                keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/5wXuk-IkchXM_v4PEgCTJIawLvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.7.212.0/22
                IPv6:
                  2a07:cc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:93:02:af:f4:13:25:e5:d9:d3:d4:c6:3c:d3:21:41:ef:a5:
         2f:2c:2b:e8:cb:4f:0d:27:aa:27:51:c6:9d:ee:ca:16:02:b5:
         a8:67:ba:05:30:40:da:e1:93:0b:83:e7:31:f5:25:0a:63:db:
         58:6e:fd:74:ae:0d:96:ed:ce:81:9e:d8:25:13:67:fc:a6:c3:
         50:c4:6f:4e:bf:a6:1b:bd:60:c6:15:09:00:5c:b7:1c:71:9c:
         ae:ab:b2:a5:1c:e6:27:82:c4:d9:65:44:a4:15:40:23:de:18:
         10:27:54:1e:fe:33:89:ff:13:80:00:33:59:84:f3:69:e9:92:
         6c:4b:2f:2a:32:bb:31:af:33:cd:df:35:aa:cd:df:ae:f2:e2:
         0e:76:6a:73:ad:08:16:87:d2:1f:7e:54:a6:93:70:52:e8:47:
         0a:da:a6:5b:5f:68:0a:e3:a7:7c:f8:3e:09:71:d1:8f:3e:68:
         e0:9e:b0:8f:1b:1b:4b:26:e9:5f:a6:84:1c:59:0f:a6:3f:ba:
         65:e2:eb:15:ad:df:da:3c:31:3e:42:a2:9e:58:77:39:ad:9e:
         c4:fd:cd:da:9d:3b:e6:f7:79:8c:0c:6b:14:b4:bf:13:64:4e:
         81:63:89:b4:2c:ac:ad:2b:b6:82:b6:9c:9e:ef:31:bb:2e:ff:
         0f:32:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----