Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/EG-ZXnVTs0bANB-yxFJmayDfJZ8.roa
File:                     EG-ZXnVTs0bANB-yxFJmayDfJZ8.roa (raw, json)
Hash identifier:          40/kgcJ/Sk/7gACHTGPUDn2jTxRcwHrUmm+mbZIv6PU=
Subject key identifier:   10:6F:99:5E:75:53:B3:46:C0:34:1F:B2:C4:52:66:6B:20:DF:25:9F
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       01856E6668720B74B473D8E411D0BFDBEBA7
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/EG-ZXnVTs0bANB-yxFJmayDfJZ8.roa
Signing time:             Sun 01 Jan 2023 17:34:43 +0000
ROA not before:           Sun 01 Jan 2023 17:34:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211547
IP address blocks:        193.3.56.0/24 maxlen: 24
                          2a10:c5c1::/32 maxlen: 48
                          2a10:c5c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:66:68:72:0b:74:b4:73:d8:e4:11:d0:bf:db:eb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: Jan  1 17:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=106f995e7553b346c0341fb2c452666b20df259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:38:02:fe:4c:a3:23:a6:2b:c3:0f:59:ba:
                    5a:a8:38:95:de:8b:b6:a5:c7:c9:a5:98:87:ca:20:
                    ee:d4:47:9a:05:f0:e0:77:4f:8f:60:59:53:f8:bc:
                    b6:ea:f2:45:91:b2:80:03:74:a1:3d:43:16:68:53:
                    42:09:a4:52:ae:b4:0a:1e:3a:e4:6a:e7:a0:79:f6:
                    b9:e6:32:57:40:ea:a1:eb:56:26:85:02:5d:bb:30:
                    39:51:d6:de:b7:b3:a0:8f:a8:de:f4:95:ce:46:51:
                    36:f4:de:13:4a:0d:17:f8:2c:3c:d2:8a:ee:72:c1:
                    66:7c:38:a6:95:58:1c:8e:df:11:2f:f3:3a:1c:9b:
                    3c:6f:6d:6c:76:69:24:53:9d:d9:af:e1:b3:d9:01:
                    2d:7f:43:d5:e4:4b:eb:fb:d2:ed:f5:89:c2:42:85:
                    f4:83:67:78:60:00:91:e6:e8:0c:d9:b1:02:f0:fb:
                    26:82:73:d5:29:aa:46:ec:e5:db:7c:be:c8:71:1f:
                    56:38:fe:4a:46:b2:18:06:30:b2:b3:1f:26:33:7a:
                    54:ce:1e:a0:3a:be:79:32:cf:0e:49:53:7e:99:15:
                    f5:08:93:5f:9e:be:1e:bd:3b:99:00:ff:64:75:24:
                    da:2f:0b:db:42:44:8b:c0:2e:03:46:fa:d3:a3:a5:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:99:5E:75:53:B3:46:C0:34:1F:B2:C4:52:66:6B:20:DF:25:9F
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/EG-ZXnVTs0bANB-yxFJmayDfJZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.56.0/24
                IPv6:
                  2a10:c5c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:45:58:db:5b:d3:b8:0c:b0:64:94:ee:f9:77:38:d8:aa:
         e0:d3:66:f7:2a:d9:00:b4:dc:ba:78:2a:0b:ff:52:95:11:28:
         8e:7a:50:fe:fb:76:b4:04:60:ff:58:17:b5:0a:82:1c:91:70:
         a7:bd:b9:81:5d:62:36:e8:33:a5:af:be:bb:ad:58:5a:a3:30:
         c5:0c:1c:9e:f5:de:72:86:24:6a:f9:97:9c:3b:3e:82:13:3a:
         e6:5c:ff:07:4a:46:5a:7e:46:19:d8:84:7d:6c:b6:f9:a3:67:
         be:2c:33:18:a6:4f:92:c6:14:37:a6:c6:d9:69:e5:11:6f:02:
         99:37:df:52:40:04:a8:bd:6b:61:93:69:74:be:5b:26:5a:97:
         d5:77:b2:58:e5:5a:0d:16:13:28:1c:bc:41:34:ac:cd:c0:1e:
         ed:07:20:78:0e:dc:3b:82:28:b3:d5:77:1d:c2:a4:7a:81:7a:
         73:21:40:d9:c3:ad:cc:7d:02:ea:cb:c9:cd:be:1d:24:b6:29:
         ea:db:3f:c0:8b:d0:91:4d:fe:fa:26:31:22:57:26:e2:e8:5e:
         04:87:74:18:5f:56:38:c6:0f:2b:7c:98:6c:69:71:cc:6e:05:
         46:79:75:56:9b:84:21:3f:8d:d9:b8:ab:f6:4f:e6:d5:81:ea:
         35:01:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----