Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/_NeCQh8bPA_WeexvbkxjQ3VxVpU.roa
File:                     _NeCQh8bPA_WeexvbkxjQ3VxVpU.roa (raw, json)
Hash identifier:          v28L8UtZmS/I4DBxxN/MNTs+I2QIcAczWuPzt7xnfIE=
Subject key identifier:   FC:D7:82:42:1F:1B:3C:0F:D6:79:EC:6F:6E:4C:63:43:75:71:56:95
Certificate issuer:       /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial:       0186DC4E23983FA1A1CC322CE637A5F73D01
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/_NeCQh8bPA_WeexvbkxjQ3VxVpU.roa
Signing time:             Mon 13 Mar 2023 18:49:13 +0000
ROA not before:           Mon 13 Mar 2023 18:49:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50281
IP address blocks:        193.106.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dc:4e:23:98:3f:a1:a1:cc:32:2c:e6:37:a5:f7:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
        Validity
            Not Before: Mar 13 18:49:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcd782421f1b3c0fd679ec6f6e4c634375715695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:00:99:6e:97:db:2f:6f:12:f8:b2:d7:61:
                    cf:89:e2:2a:0a:fb:48:54:51:7f:af:d8:00:9e:0b:
                    b1:a0:2d:c0:43:6d:e8:ac:4d:9d:75:f9:4e:32:50:
                    01:44:64:b1:1d:27:b7:e3:f4:87:91:bc:ab:6a:33:
                    85:4e:e9:81:19:ab:c8:09:72:cd:d8:9a:42:17:7d:
                    00:0c:81:2e:a8:97:3a:26:f6:0e:e0:0a:86:fe:21:
                    be:0b:de:ed:b3:73:b4:b2:2c:27:ba:f2:41:cd:70:
                    76:b1:56:80:3d:ba:df:23:69:54:62:fa:4a:cb:f0:
                    92:0e:a8:89:cb:c2:5a:91:02:16:e2:56:35:dd:34:
                    5b:e2:ab:75:23:f5:20:f8:d2:4b:02:8b:bd:a8:d5:
                    28:18:63:c2:c1:86:31:ec:23:a7:3b:18:41:cb:28:
                    cd:09:da:66:e9:54:ed:ea:dc:05:d9:1c:71:38:97:
                    7d:b2:d3:31:38:46:13:c5:a2:5e:ce:ba:da:ee:7a:
                    39:07:80:af:c2:7e:e0:20:b8:ce:fe:94:e7:98:c6:
                    1b:5b:50:59:1a:f8:1c:13:85:11:cd:61:f0:88:47:
                    78:74:df:d6:fd:d8:4d:57:b0:09:6d:d2:09:0e:9e:
                    7e:bb:f4:89:a1:14:46:69:d2:27:fe:92:a2:e2:e2:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:82:42:1F:1B:3C:0F:D6:79:EC:6F:6E:4C:63:43:75:71:56:95
            X509v3 Authority Key Identifier:
                keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/_NeCQh8bPA_WeexvbkxjQ3VxVpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:df:6f:2b:f6:22:ef:b2:00:07:9c:a6:3f:20:3e:57:cb:
         27:47:47:9d:66:58:87:42:c1:d4:3c:53:89:07:67:80:33:37:
         c9:de:7a:d4:2e:a0:26:ca:f2:9b:eb:5f:d9:81:03:fa:9b:cd:
         10:87:5f:8e:df:8c:be:45:5e:31:72:53:4a:c9:7c:20:cf:01:
         fe:08:f7:81:d1:31:cc:14:81:28:c4:f2:26:3b:2b:18:67:15:
         46:61:50:a7:31:0e:50:0e:f7:cd:c3:a3:c4:a2:1d:27:11:62:
         79:d4:65:53:c2:4c:a9:3f:5d:fe:1d:e0:c8:dc:a6:c9:72:d8:
         8c:ee:64:2a:ef:d2:a9:30:dd:3b:d6:37:a0:ed:fe:d6:3d:b2:
         4f:22:f8:31:72:4f:19:da:61:e5:c9:e3:a6:95:de:be:02:84:
         56:04:b6:11:c8:9b:53:6e:9f:9d:74:f4:30:c0:69:d3:0d:91:
         fa:0f:aa:0f:9b:08:25:e5:8b:31:23:e0:bf:a8:b5:64:0b:9d:
         df:75:63:d7:56:38:71:fc:d3:06:8c:b2:98:2e:6c:8d:02:39:
         17:c9:e6:e6:76:cb:15:44:e4:9c:2d:26:96:ff:ac:4c:73:89:
         bf:fb:1d:de:ac:5f:ac:a6:e3:a1:fa:dd:08:a9:38:e8:d2:89:
         74:7c:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----