Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa
File:                     wJEfgXDMNZd8dBaynvD3U-UZBjE.roa (raw, json)
Hash identifier:          e0VQ5oCi3jEIy569zbbpDqqVYXcwXnJDuVBGev6YzEA=
Subject key identifier:   C0:91:1F:81:70:CC:35:97:7C:74:16:B2:9E:F0:F7:53:E5:19:06:31
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       01856BCA3A7611D0E183A3E3E5193D2915AE
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa
Signing time:             Sun 01 Jan 2023 05:24:53 +0000
ROA not before:           Sun 01 Jan 2023 05:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5405
IP address blocks:        94.103.180.0/24 maxlen: 24
                          2a11:4140::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ca:3a:76:11:d0:e1:83:a3:e3:e5:19:3d:29:15:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Jan  1 05:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0911f8170cc35977c7416b29ef0f753e5190631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:85:d9:e7:18:e7:02:45:76:4d:3e:72:c3:
                    98:d7:30:22:89:a5:1a:a5:40:cd:a3:07:61:1a:0c:
                    57:10:cc:54:07:dd:f8:ad:cd:4d:2b:e7:0c:5f:b4:
                    f0:76:ce:2d:ff:42:e5:c2:d0:d9:37:80:46:ef:a7:
                    c2:80:56:53:a1:57:68:dc:06:f4:e2:86:8f:1e:48:
                    46:e9:a9:db:b3:e2:71:59:b5:e3:1b:0c:af:5f:5b:
                    b7:76:40:e8:87:be:c6:b9:bf:42:87:23:95:6d:61:
                    b3:0d:42:8c:8f:68:3a:b3:2a:e6:e9:97:f1:27:a3:
                    37:7f:ad:e9:0e:14:c4:35:7e:56:17:d8:09:6c:7d:
                    85:7f:69:40:38:3c:5e:1c:a8:b1:25:44:30:c7:0a:
                    9a:cd:c0:70:3d:6e:fe:90:ae:e2:48:03:66:6b:d8:
                    5c:01:cd:eb:c1:1b:ac:c5:d1:4a:47:f1:60:8d:68:
                    76:41:ba:d1:e5:23:a2:2a:2f:55:e8:82:49:af:80:
                    ef:52:dd:cd:25:36:0c:72:3c:3e:0d:5c:17:99:ad:
                    bb:82:9d:40:e4:09:92:80:09:bc:c2:2f:8e:0a:8e:
                    c1:34:17:c0:b5:d1:20:1a:1a:b1:0e:be:7e:41:4a:
                    bc:40:48:57:24:5a:f5:47:04:3b:3d:18:5f:87:de:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:1F:81:70:CC:35:97:7C:74:16:B2:9E:F0:F7:53:E5:19:06:31
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.180.0/24
                IPv6:
                  2a11:4140::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:82:5a:a6:e3:7e:1d:42:f4:ed:dd:a0:48:4d:03:6b:9b:
         f5:49:fd:32:5b:35:3e:ee:71:60:24:b3:18:aa:ca:7a:09:ae:
         a1:93:53:1f:74:2c:38:ef:fc:7c:1f:2d:58:71:fe:e6:3d:25:
         59:95:37:0c:80:5a:96:b7:c0:47:a4:ae:32:c0:8d:49:49:9d:
         09:f3:f9:ac:c2:d3:32:05:56:53:0a:6a:e1:af:a5:73:63:39:
         5f:b1:8e:4c:0a:69:fa:63:bd:29:c2:db:bd:b1:4f:87:bf:9e:
         09:e3:b8:df:8e:30:a9:f7:64:ec:fa:2b:07:86:37:ed:b0:88:
         b2:fd:57:80:e7:3b:d6:1f:b9:58:71:cd:6e:da:bd:d8:fa:0d:
         bf:44:cb:56:9e:7a:db:f0:5a:e6:be:c1:9f:91:ca:e3:d7:a7:
         c2:9c:fe:4d:78:29:8f:b7:b0:93:42:3c:41:26:b7:16:91:5e:
         aa:86:c5:83:6e:59:59:8c:72:a2:27:b8:16:ba:ae:3f:e3:e9:
         b9:0d:42:7a:29:0f:c9:e5:a5:d8:47:a3:6f:d0:84:ea:be:9e:
         cc:0a:ab:f1:cc:60:e9:24:5e:ae:99:c2:40:33:36:19:d4:58:
         5b:d2:7b:d3:07:e9:3e:86:04:8e:c7:a5:cd:8b:33:99:d0:b2:
         64:03:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----