Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa
File:                     b-cNxyWcLqJobpxvLipzhGof5VU.roa (raw, json)
Hash identifier:          0vN1h/6xQz8igPjvpJ15ROciWVxCh8ik5ALW8srY9B0=
Subject key identifier:   6F:E7:0D:C7:25:9C:2E:A2:68:6E:9C:6F:2E:2A:73:84:6A:1F:E5:55
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       0188C30C03C9A89897D67F87842211A058AB
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa
Signing time:             Fri 16 Jun 2023 07:12:04 +0000
ROA not before:           Fri 16 Jun 2023 07:12:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        212.30.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c3:0c:03:c9:a8:98:97:d6:7f:87:84:22:11:a0:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jun 16 07:12:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fe70dc7259c2ea2686e9c6f2e2a73846a1fe555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:a6:86:2f:45:9e:84:32:be:2e:90:36:7c:
                    f8:8b:66:ac:3d:bc:75:db:6e:a7:ba:75:7c:20:07:
                    4b:37:84:6b:63:68:c0:c4:33:5c:cc:8f:7a:64:c5:
                    d6:c5:28:fa:16:14:9b:07:f1:4f:d2:06:04:2f:11:
                    f8:f0:24:a3:1e:83:8c:4f:6d:ea:9d:35:d9:80:85:
                    16:9a:f6:66:e3:ae:6a:0d:16:07:0c:ea:a7:4f:5d:
                    6b:8c:eb:48:ee:64:db:30:f9:53:8b:55:e5:41:53:
                    a8:ee:85:f6:4f:4f:b0:54:8b:39:f7:ea:0b:d4:30:
                    6c:7c:54:04:f1:51:ed:8d:a7:71:41:1c:a0:74:ca:
                    c8:53:38:dc:4c:3c:1d:48:1a:d5:d1:26:5d:dd:3d:
                    3b:7a:0d:a5:47:2d:0f:fb:7d:a3:bd:d0:e8:03:34:
                    e0:dd:d8:aa:02:08:28:86:eb:a2:84:8f:3a:1c:f5:
                    fb:08:e6:01:1c:b6:2e:f8:cd:ec:cc:e2:dc:d4:d9:
                    6b:b0:84:4f:4d:ae:94:a5:2f:05:a5:4f:14:36:19:
                    79:b4:4c:c5:41:3d:31:1f:4a:48:41:98:16:a5:a8:
                    5a:5b:21:74:31:c4:1a:08:83:dc:41:7d:d7:c9:4a:
                    b2:82:6d:76:7d:74:60:af:d7:05:a5:00:d4:b9:0f:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:0D:C7:25:9C:2E:A2:68:6E:9C:6F:2E:2A:73:84:6A:1F:E5:55
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.30.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:20:15:6b:31:fd:ee:bb:14:f8:3e:df:69:c6:58:4b:07:
         1c:d5:2d:b0:60:8c:a8:ec:7f:08:b4:06:b7:e6:2e:ef:a7:60:
         ed:ac:0d:3e:2d:77:55:58:c4:36:90:eb:ed:d4:fd:e1:8b:85:
         d6:aa:25:e2:03:a3:c7:0d:7e:7f:58:50:f5:ec:34:a9:f4:e3:
         e0:e6:a7:b1:b4:4e:d4:1d:75:bd:55:b1:19:a6:02:bf:12:c6:
         86:35:13:01:69:ec:50:74:65:99:06:a8:9a:f9:6c:14:1b:8a:
         b9:9f:5a:07:78:f0:ec:2f:cc:02:30:01:d8:84:a7:81:dd:20:
         e1:22:6f:50:b6:fa:4b:4b:d0:0e:58:69:90:a2:e0:fe:cb:4f:
         17:12:2a:a7:74:73:37:df:3e:1f:2d:38:23:17:de:64:78:d7:
         2f:12:0f:a8:3c:95:65:a1:1b:01:ee:21:d8:0c:18:f5:d5:b2:
         11:27:ab:71:d4:76:5e:a3:1b:76:0a:6f:3d:f2:61:5b:01:bd:
         c6:74:64:f5:5b:9d:e4:3d:d7:4f:4d:bc:4b:ea:4f:53:6b:38:
         a0:f4:2f:a3:27:d8:5d:7d:72:18:54:e0:5a:8d:68:22:d1:8a:
         c6:bb:22:9b:b6:d5:87:a4:ec:d6:e8:d4:32:d9:77:54:08:27:
         9b:24:59:a5
-----BEGIN CERTIFICATE-----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