Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa
File:                     mArvH0xGqbSTedOHfkY0kvYP7H4.roa (raw, json)
Hash identifier:          +aoArH3UQkLTjxY6GfecTcnlh4LizBUqNVahpLTDRXg=
Subject key identifier:   98:0A:EF:1F:4C:46:A9:B4:93:79:D3:87:7E:46:34:92:F6:0F:EC:7E
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0187B21350A568AEB2E689D6A5907F7F349A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa
Signing time:             Mon 24 Apr 2023 07:03:42 +0000
ROA not before:           Mon 24 Apr 2023 07:03:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399587
IP address blocks:        45.88.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:13:50:a5:68:ae:b2:e6:89:d6:a5:90:7f:7f:34:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Apr 24 07:03:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=980aef1f4c46a9b49379d3877e463492f60fec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:93:13:0e:55:ad:ce:53:1d:d7:c5:8f:c2:
                    85:d0:87:9e:80:9b:90:7b:b6:e7:b4:b5:36:72:9d:
                    a5:ab:ce:b8:e2:75:4c:d7:a0:4b:ae:3b:cd:87:0e:
                    e5:fa:94:50:81:18:df:aa:55:18:b8:7b:24:49:ce:
                    17:ee:e3:5c:25:da:00:13:bb:1a:2c:d0:25:f6:be:
                    df:20:eb:06:d2:3f:14:6d:1f:be:ae:83:ac:b1:63:
                    7d:a4:ec:41:18:39:7e:2d:7a:e0:bb:8b:6c:99:9c:
                    78:81:61:a1:5a:79:3b:54:73:c5:cc:88:86:b2:23:
                    e6:d6:a9:a7:3f:bb:c2:01:9a:5a:7f:03:17:da:dd:
                    35:1c:33:5b:eb:af:0f:f5:61:2c:c2:e8:a8:2c:6f:
                    c4:1b:fa:1f:14:93:05:6a:42:47:f1:fd:ba:6f:ab:
                    27:e4:7a:71:64:c3:1c:1a:7f:75:48:a1:29:1e:a1:
                    42:c2:f0:c3:55:e7:1e:e0:04:8a:0a:e5:7f:e0:77:
                    d2:81:58:d0:20:8b:cd:98:aa:07:ad:e4:16:a5:1b:
                    c8:73:94:29:1d:2d:7b:ac:c5:41:0b:69:c5:b7:b8:
                    14:3c:ff:eb:c4:f6:25:c2:b9:39:1d:d0:b7:62:6c:
                    64:61:d5:58:19:be:bf:9d:11:9f:24:05:13:56:08:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:EF:1F:4C:46:A9:B4:93:79:D3:87:7E:46:34:92:F6:0F:EC:7E
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mArvH0xGqbSTedOHfkY0kvYP7H4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:84:4c:1b:cf:5a:28:97:2f:af:a4:3a:98:d9:31:dc:cf:
         b4:5f:02:3f:0e:6c:f7:78:b8:94:7b:eb:42:69:55:bb:cb:cf:
         64:6e:ef:54:bc:6d:dc:c5:db:62:e9:48:86:0d:6f:6a:82:44:
         a4:5a:fc:80:0d:96:20:0d:9d:e1:c7:e1:48:97:ad:4f:21:47:
         57:12:45:d8:af:3d:91:78:20:7e:53:df:0d:0a:53:f4:38:68:
         18:e0:70:12:3f:06:12:c3:0a:36:c1:ae:90:0c:d3:9e:1a:b8:
         6b:e0:7e:50:68:bd:83:66:1a:0e:60:43:2b:67:7d:b2:58:55:
         54:ed:21:71:d4:a8:49:37:ed:f5:fc:8b:e3:8c:ab:1a:e5:2b:
         f7:fc:d6:e3:f7:68:da:22:7f:5f:ba:29:7d:ef:22:f3:06:75:
         18:41:f2:7b:b3:e7:95:ca:36:b3:bd:df:eb:ae:2e:07:08:78:
         d6:d0:8b:75:9e:b4:e4:51:4b:48:e8:5e:09:50:50:ff:84:c7:
         78:ad:39:60:ad:27:b2:76:74:a7:7d:2c:11:8a:a5:7b:40:4e:
         7b:68:75:f9:f1:2f:a8:59:ca:c1:3c:a7:94:75:54:6c:0e:06:
         98:c3:4a:e1:09:2e:76:f5:9d:71:5d:da:ee:d0:fd:cb:52:6e:
         c2:0c:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----