Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GXnp8uPVZTy9p7eXC3_lIxaRUbo.roa
File:                     GXnp8uPVZTy9p7eXC3_lIxaRUbo.roa (raw, json)
Hash identifier:          hcTJVnXmlzEZbK+o895T0zuLzCcGcwBStA9RU8/bCZ4=
Subject key identifier:   19:79:E9:F2:E3:D5:65:3C:BD:A7:B7:97:0B:7F:E5:23:16:91:51:BA
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       018799D4EF1D7FB127ED598727DF448A779D
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GXnp8uPVZTy9p7eXC3_lIxaRUbo.roa
Signing time:             Wed 19 Apr 2023 14:04:41 +0000
ROA not before:           Wed 19 Apr 2023 14:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212728
IP address blocks:        85.117.241.0/24 maxlen: 24
                          2a09:ff00:8000::/37 maxlen: 37

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:99:d4:ef:1d:7f:b1:27:ed:59:87:27:df:44:8a:77:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Apr 19 14:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1979e9f2e3d5653cbda7b7970b7fe523169151ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:f7:7d:20:10:fa:54:c7:fd:d7:ff:c4:5e:
                    96:e5:77:34:70:ba:d5:68:db:aa:12:67:8c:0d:1d:
                    37:5d:cc:5a:4a:7b:a8:46:45:b5:de:64:ad:83:9d:
                    ed:4f:00:90:82:12:6e:8f:a9:b3:36:bc:3b:11:d7:
                    09:f2:1e:cb:5d:60:b7:9e:39:1b:18:94:ef:40:72:
                    14:88:d0:4d:7e:e9:ea:ef:d6:cf:ee:9f:95:ec:10:
                    bd:fc:7f:01:35:c4:14:88:17:74:7c:38:da:64:96:
                    09:8f:a3:8c:af:d2:6e:d4:a1:17:0f:78:1c:06:83:
                    ed:96:2e:22:59:ef:69:e0:02:3b:12:cc:72:c4:4a:
                    ca:f4:9d:a3:e2:49:0b:1b:32:77:a8:3c:ca:b0:cb:
                    af:64:ad:dd:c2:e7:bf:6b:70:e2:30:35:bd:5b:28:
                    59:48:5b:63:1e:cb:5d:83:ba:6c:75:4c:d5:07:53:
                    94:fa:dc:94:b8:74:a7:be:ba:d5:ac:53:d2:98:fd:
                    49:54:41:3e:0f:5a:04:e8:8e:64:77:62:71:6a:ab:
                    62:64:79:52:fd:93:a1:65:bb:1e:cc:6c:1d:e8:62:
                    0b:a1:18:f2:d3:fc:9f:71:d7:bb:9f:83:97:81:c6:
                    88:53:e7:92:9f:5f:9e:46:c0:c9:d5:35:1e:12:16:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:79:E9:F2:E3:D5:65:3C:BD:A7:B7:97:0B:7F:E5:23:16:91:51:BA
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/GXnp8uPVZTy9p7eXC3_lIxaRUbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.241.0/24
                IPv6:
                  2a09:ff00:8000::/37

    Signature Algorithm: sha256WithRSAEncryption
         83:ef:fe:72:fe:68:48:4e:8b:ea:66:14:4d:fb:4d:4f:f4:a7:
         2c:ed:b6:a2:3f:b2:db:56:68:2d:b8:c8:3d:35:d0:d4:d7:e0:
         76:4d:a5:bd:9b:b8:04:0b:fe:89:f2:d7:7b:89:ef:32:3a:1e:
         a0:fa:48:eb:6a:75:22:32:3d:79:d9:2d:9a:8a:b7:10:06:cc:
         08:52:56:05:72:17:02:aa:8f:18:c4:15:c5:66:fb:9b:db:96:
         54:82:e3:94:a2:c2:89:9d:c4:33:6f:fa:1b:78:ab:49:4d:e9:
         61:93:eb:88:9a:9b:95:71:b4:2d:68:b5:1c:09:18:88:ae:77:
         40:bb:df:ff:12:0f:d3:0e:64:6b:44:79:eb:6d:b4:86:af:8e:
         5d:8a:44:ff:c5:bb:d3:a2:ae:f0:9a:a3:8c:28:ad:54:21:4d:
         02:d1:6d:12:09:80:8b:f7:5e:fc:28:98:ac:a2:df:50:6c:82:
         c4:0f:6a:e6:7d:b8:ed:d2:71:46:e1:98:cc:bd:fd:22:6c:3a:
         d2:e6:7a:14:53:9f:34:30:ca:8e:51:6b:f0:f7:dc:34:e7:78:
         43:d5:f7:d0:92:77:58:b6:62:66:45:cc:57:46:35:6d:d2:e7:
         80:28:0b:2e:24:28:60:ed:78:c4:07:13:49:8d:4a:d3:b6:a0:
         bb:88:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----