Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa
File:                     8ufELFNyYkfCRalcUDFcUPddnnk.roa (raw, json)
Hash identifier:          +reyzS/uthnpMJUXaeE9aeA3vZ515Pm1oQoYSV6290o=
Subject key identifier:   F2:E7:C4:2C:53:72:62:47:C2:45:A9:5C:50:31:5C:50:F7:5D:9E:79
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       01880F7163C46933099E89084ED6E2E448A4
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa
Signing time:             Fri 12 May 2023 10:11:09 +0000
ROA not before:           Fri 12 May 2023 10:11:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198949
IP address blocks:        212.159.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0f:71:63:c4:69:33:09:9e:89:08:4e:d6:e2:e4:48:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: May 12 10:11:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2e7c42c53726247c245a95c50315c50f75d9e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:bd:c7:f5:fe:ba:55:58:de:13:f8:67:dd:
                    39:63:9a:fe:df:bd:ed:1e:b5:61:70:8e:7d:24:ca:
                    b8:b1:24:6c:f7:89:e2:7f:63:12:60:ac:25:b6:46:
                    d0:89:96:d6:b3:c1:21:0e:c3:21:16:45:51:ed:4d:
                    e8:c4:52:69:42:d7:6c:d0:69:65:3b:c6:b2:9e:68:
                    59:d1:f8:8f:81:39:c7:fc:13:ab:5e:34:11:33:a7:
                    c4:2a:cc:84:8f:5f:32:4e:a7:a8:e3:98:15:f0:eb:
                    a8:42:39:c1:aa:1c:7e:af:b1:85:39:ab:cb:c8:4a:
                    d1:d1:62:92:fa:96:15:ce:f8:1b:46:eb:ac:46:2e:
                    f5:7d:4e:07:d7:cb:7f:2c:21:aa:8c:cb:38:9b:27:
                    b3:1a:f7:3f:e4:23:9f:07:26:7a:ee:98:0d:54:f6:
                    6c:20:9a:a4:eb:c7:2a:68:ba:6e:1e:e4:6b:43:48:
                    ed:97:bf:06:88:7b:99:04:fb:df:58:50:b2:5c:5d:
                    96:ea:81:d1:82:8a:9e:20:eb:82:2d:3b:54:c4:0e:
                    a1:0b:57:bc:40:8c:93:4f:2d:55:49:e6:e4:6c:92:
                    a6:8b:5c:03:c8:66:0d:6e:f9:27:f1:e1:39:95:54:
                    89:55:c3:44:18:7c:ba:a8:f1:09:ac:ec:be:27:08:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E7:C4:2C:53:72:62:47:C2:45:A9:5C:50:31:5C:50:F7:5D:9E:79
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/8ufELFNyYkfCRalcUDFcUPddnnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.159.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:02:f1:e1:c0:54:8a:16:a7:b2:63:86:06:ab:cf:e4:83:1b:
         5f:f3:4f:dc:53:a3:7e:31:2c:37:91:fc:e8:65:97:53:a1:11:
         e9:62:ff:a1:d9:82:70:22:b9:03:9e:13:38:36:cb:59:c5:f9:
         77:94:c9:a8:fb:aa:34:c8:98:e3:9f:7b:d0:e1:ef:67:de:6b:
         3c:08:d9:d4:49:75:89:40:50:ba:a1:16:3e:47:a8:8b:fd:9a:
         53:e9:ef:d5:77:04:d5:65:f1:8b:70:0b:08:e5:59:cd:46:a6:
         3c:ea:46:be:58:d1:41:77:4d:dc:59:e0:89:cc:39:fa:ee:b7:
         92:6f:2d:04:fe:db:77:07:84:6b:7c:84:47:d2:c4:4b:44:cf:
         6e:ed:e7:b4:70:9a:22:aa:0e:4e:d9:2e:32:ad:76:69:29:b2:
         32:50:bd:42:b2:3d:1e:58:4f:4f:b4:8d:c6:5a:6a:55:dd:1c:
         04:7d:fa:74:47:00:2f:1d:bc:3a:58:42:21:00:19:b2:a5:05:
         85:13:af:17:8f:b7:22:e0:2d:a3:86:c7:e8:04:07:28:ce:d9:
         ac:77:65:dd:3b:e2:4d:f2:8a:9a:73:be:92:90:be:99:39:e9:
         a6:92:2d:40:eb:13:c9:18:1c:a8:35:7b:ef:98:3c:18:84:84:
         e3:42:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----