Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa
File:                     VZVeQfsEjZA67IK9WUda6H8U9cU.roa (raw, json)
Hash identifier:          ZkuZvJzk1QLqgQdjJvoIVDv8+LY1KQ38rZalAPwoqoM=
Subject key identifier:   55:95:5E:41:FB:04:8D:90:3A:EC:82:BD:59:47:5A:E8:7F:14:F5:C5
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018A1C52D3D2C7B79F36167B2362893A8721
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa
Signing time:             Tue 22 Aug 2023 08:18:24 +0000
ROA not before:           Tue 22 Aug 2023 08:18:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205175
IP address blocks:        31.13.212.0/24 maxlen: 24
                          2a00:1728:31::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1c:52:d3:d2:c7:b7:9f:36:16:7b:23:62:89:3a:87:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Aug 22 08:18:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55955e41fb048d903aec82bd59475ae87f14f5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:7e:fb:53:34:44:7b:c7:18:7c:5b:78:71:
                    de:68:72:68:b7:98:35:5c:73:59:1a:75:71:57:32:
                    35:83:3c:c4:0e:cd:5d:41:03:d2:03:c0:5e:6f:34:
                    2a:39:fb:18:06:84:f1:a4:33:d9:c1:e3:17:ce:4d:
                    e0:10:e0:fd:46:34:3e:6e:b6:81:87:c7:7d:53:6e:
                    fe:72:88:3c:20:63:b4:44:c5:dc:1c:44:9b:d3:e4:
                    af:5e:0e:a4:4f:16:f7:d4:25:bc:11:01:65:9a:c7:
                    0b:87:58:1e:11:bf:c4:b6:ef:e7:7b:41:da:f4:c3:
                    d0:a1:81:36:c8:f0:8b:78:fd:25:26:29:57:71:37:
                    a7:a4:8a:ee:31:b9:1b:0a:4f:13:90:1a:a8:07:3c:
                    34:36:10:33:45:54:8c:cf:ae:d4:c8:d1:9a:b9:a6:
                    7b:9d:28:12:d2:c1:a2:92:b5:13:0e:9a:bf:7f:e6:
                    0b:b9:61:df:a7:2e:40:f9:90:2d:e4:86:40:39:80:
                    2d:d9:09:77:6c:66:98:7a:53:af:c8:63:62:5a:09:
                    a5:21:70:26:62:d8:0c:2a:d7:e1:19:94:3a:2d:c6:
                    45:a3:ff:91:20:3e:56:73:8d:5d:32:2a:f5:e9:44:
                    e1:2d:7a:d6:67:40:01:e8:4d:be:e7:9b:08:dc:12:
                    5d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:5E:41:FB:04:8D:90:3A:EC:82:BD:59:47:5A:E8:7F:14:F5:C5
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.13.212.0/24
                IPv6:
                  2a00:1728:31::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:e5:80:88:d1:81:f3:b6:28:a2:8b:16:17:4b:b9:ad:4f:
         69:95:d0:8d:2b:00:68:53:b2:a6:6b:40:03:23:0c:e4:da:46:
         8c:6f:1b:6c:be:03:26:28:d6:ee:0d:2c:81:9d:4b:4a:48:ef:
         aa:05:34:d4:79:cc:5e:23:da:43:01:84:7f:5a:85:9b:fe:5f:
         c9:93:96:fd:a4:4a:e5:35:80:7f:9c:4a:d4:e7:3e:50:f1:7d:
         b9:07:e0:0c:cd:70:9e:11:cd:08:90:a8:6b:f6:84:05:8b:06:
         8a:b7:e9:41:99:cd:a1:7e:f0:6e:2d:b7:d6:93:06:aa:c4:91:
         d2:8d:1e:cf:3b:1f:f2:e1:fa:6b:5c:2d:51:b1:17:06:6b:47:
         4f:b5:71:47:af:be:34:d4:63:56:ea:03:86:35:38:15:ee:91:
         69:3f:e6:20:23:d3:9e:ee:e0:ee:12:e1:2b:fb:8c:b6:96:30:
         80:02:4b:02:6a:a2:38:98:c9:a0:1e:e0:64:3a:6b:99:29:f4:
         79:85:12:63:ba:58:ca:72:ab:0c:d9:26:e7:89:df:eb:a1:17:
         6f:85:5d:2b:3a:11:88:f3:05:10:a4:a5:6e:f0:71:ba:5a:b6:
         70:cd:f8:8e:3d:19:8e:5f:a7:78:bc:1d:40:31:72:cf:40:0a:
         89:5a:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----