Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/HYhVRZu71RSpFM3Vuoalb8W_wv4.roa
File:                     HYhVRZu71RSpFM3Vuoalb8W_wv4.roa (raw, json)
Hash identifier:          X8yWU3CCaAsz4XLpQcgfAOElF7H14ki3BTJ+rQGlldM=
Subject key identifier:   1D:88:55:45:9B:BB:D5:14:A9:14:CD:D5:BA:86:A5:6F:C5:BF:C2:FE
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       0185706750D766C4C9188BEC04B3FF051F61
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/HYhVRZu71RSpFM3Vuoalb8W_wv4.roa
Signing time:             Mon 02 Jan 2023 02:54:57 +0000
ROA not before:           Mon 02 Jan 2023 02:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33083
IP address blocks:        88.218.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:50:d7:66:c4:c9:18:8b:ec:04:b3:ff:05:1f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Jan  2 02:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d8855459bbbd514a914cdd5ba86a56fc5bfc2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:18:0c:18:f8:e5:8a:9e:09:4d:1d:8d:b5:
                    f2:29:42:19:09:54:8d:67:3f:8b:3a:48:00:0b:6a:
                    55:ae:1c:75:72:07:09:ee:a7:7a:61:da:9a:7b:00:
                    e7:33:b4:4d:5f:54:dd:d5:55:dc:a5:cd:22:35:7d:
                    86:c9:52:58:89:1f:d9:1c:d0:e0:ee:d4:13:fe:63:
                    a6:19:5d:e6:54:89:56:ac:ba:d8:3d:da:35:1d:ca:
                    df:fa:e4:5c:ec:ab:95:c6:7f:2c:08:43:26:e2:61:
                    8f:32:c1:60:9c:a8:3d:e0:96:9f:37:6b:c3:0f:78:
                    78:56:f8:c1:9c:dc:4e:f1:2f:b5:da:40:d3:30:24:
                    74:44:4d:5d:5f:76:2f:1c:87:78:43:fd:fc:e6:ea:
                    60:d6:47:f2:be:b3:f6:55:eb:d4:e3:65:05:65:44:
                    8b:f6:bb:c5:6e:81:a7:91:e1:b5:25:4a:f1:e8:44:
                    24:a6:8a:40:92:3a:d2:17:70:28:60:74:6c:fd:fd:
                    29:49:8a:a5:0f:fe:22:2e:6d:38:6f:1c:bd:05:33:
                    c9:a0:94:83:03:6a:48:15:34:6a:e8:9c:48:61:c0:
                    6d:3b:89:57:2e:b8:98:fb:48:96:6b:a1:b7:09:59:
                    24:0c:e1:fe:2b:b7:7b:9f:b5:fe:94:ef:47:82:90:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:55:45:9B:BB:D5:14:A9:14:CD:D5:BA:86:A5:6F:C5:BF:C2:FE
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/HYhVRZu71RSpFM3Vuoalb8W_wv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:73:2d:5f:91:a9:76:8a:e5:f9:58:a8:75:a1:1e:3d:2c:
         a9:54:6a:3f:90:ce:b9:44:6b:e2:96:4d:56:1d:96:c2:90:65:
         bb:40:2f:cd:4c:d7:d5:ba:4e:bd:56:81:5f:c7:f7:0b:2f:51:
         0e:f0:fa:47:f9:34:72:34:4e:3a:46:c7:2d:a0:36:fc:8e:ff:
         39:58:6b:fa:4c:f5:97:89:d5:7b:3c:f7:d7:9f:89:bf:a6:37:
         4d:fa:c6:14:fc:82:30:9b:ff:31:49:a1:b1:bb:cc:22:52:35:
         6a:69:41:aa:42:6f:49:f4:18:48:f3:e8:2b:cc:fe:53:cb:92:
         d5:6d:9a:22:75:48:d5:d4:4c:71:96:63:dd:39:72:8e:eb:4f:
         fb:ee:47:63:b6:74:6e:55:73:21:f5:12:02:4d:4d:b3:37:0d:
         5f:39:79:3b:11:1a:b6:4d:b6:ae:e1:59:e4:3d:4f:b0:65:c8:
         a6:7a:b2:b3:c2:ba:f2:6d:ee:4b:9c:94:2e:96:9d:33:a9:a9:
         86:e7:fc:3b:23:0d:b2:56:2e:bc:bb:0c:1d:53:4b:af:69:5a:
         05:f9:0f:b3:95:5b:da:f4:a8:1c:3e:40:7e:bd:ee:90:f7:e7:
         cb:e5:3d:59:43:ce:f5:1e:62:7c:ca:51:85:0f:38:5d:9b:53:
         93:9a:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----