Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/4UbeU2_CYty0ZoLIKDau_pdpgXE.roa
File:                     4UbeU2_CYty0ZoLIKDau_pdpgXE.roa (raw, json)
Hash identifier:          cSrpYhvml4lyRh1P4NU7uf3htVvsToFOUc8NibItQnE=
Subject key identifier:   E1:46:DE:53:6F:C2:62:DC:B4:66:82:C8:28:36:AE:FE:97:69:81:71
Certificate issuer:       /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial:       018987F924092A36928716AB7C40A6A0C528
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/4UbeU2_CYty0ZoLIKDau_pdpgXE.roa
Signing time:             Mon 24 Jul 2023 12:56:39 +0000
ROA not before:           Mon 24 Jul 2023 12:56:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198002
IP address blocks:        149.255.64.0/19 maxlen: 19
                          2a03:1180::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:87:f9:24:09:2a:36:92:87:16:ab:7c:40:a6:a0:c5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
        Validity
            Not Before: Jul 24 12:56:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e146de536fc262dcb46682c82836aefe97698171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:b0:61:0f:88:07:57:9e:59:1c:d7:8f:88:
                    8a:39:8f:55:49:c0:58:a9:4f:90:1b:fe:24:4e:2a:
                    e0:9b:65:40:37:17:da:39:df:20:20:70:11:19:b5:
                    51:50:f8:91:a9:fc:97:54:b2:14:d8:51:c8:7c:26:
                    2f:1d:8b:e6:67:36:58:61:6c:56:d5:d6:b8:e5:f4:
                    be:18:9a:81:ac:00:6f:cd:16:74:20:aa:2a:cf:52:
                    37:c0:95:b7:5a:41:4f:65:39:e6:9a:d7:6b:f8:21:
                    1c:74:e2:5e:2b:8c:a6:5b:e3:d9:ce:29:39:71:a1:
                    3d:49:99:a3:98:81:e6:e0:6e:ba:44:70:67:37:16:
                    fd:c3:2b:05:bd:d1:7b:59:47:39:1f:e5:ea:6f:2e:
                    9c:70:26:f8:fa:00:8c:83:e2:2d:ba:7b:c5:1c:3d:
                    27:25:e8:aa:6d:8a:0a:d2:c3:44:63:d4:31:cf:46:
                    c3:7c:21:fd:d5:08:76:16:4b:06:2f:e7:c2:f9:5d:
                    48:63:9f:59:e1:a8:91:10:bc:51:92:75:64:59:d1:
                    63:36:99:1c:bc:b2:b1:8f:bf:6f:e0:e9:6e:75:3f:
                    8d:aa:c2:96:f7:e5:f3:45:95:a3:bf:a4:7f:1e:3b:
                    6c:5e:2d:e8:00:09:9d:fe:0c:43:3a:31:b0:49:bf:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:46:DE:53:6F:C2:62:DC:B4:66:82:C8:28:36:AE:FE:97:69:81:71
            X509v3 Authority Key Identifier:
                keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/4UbeU2_CYty0ZoLIKDau_pdpgXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.255.64.0/19
                IPv6:
                  2a03:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:4d:76:df:9e:3c:7b:ea:50:40:e8:ab:e9:e4:b4:e9:65:
         65:19:34:e2:d0:59:11:98:08:1c:83:b3:e9:05:2e:f2:0d:79:
         9a:c4:03:7f:a4:91:7f:64:36:1a:d7:82:5c:dd:74:d6:27:67:
         3c:6d:d7:c0:22:3b:e8:97:5e:89:16:9d:fd:02:b9:eb:0d:e9:
         9d:11:d8:4d:24:51:64:99:d6:61:da:6a:51:b7:29:63:31:45:
         bb:15:02:24:31:76:f7:d1:57:3f:06:7d:07:97:25:99:d7:c5:
         5b:df:07:cf:57:4f:6c:b3:7a:ee:fd:c4:11:9a:89:9b:3f:9e:
         18:70:22:ee:a5:a0:13:27:b0:b2:90:c5:c3:d6:a7:ca:42:cc:
         77:99:77:df:4f:b8:dd:b4:72:44:d8:5f:75:82:d1:12:5c:34:
         bc:4a:e8:54:98:2b:2c:61:9a:0b:76:f2:5d:b0:fa:5d:ae:90:
         df:23:ca:01:c8:10:89:f2:1a:51:5e:92:78:96:2e:43:84:57:
         09:ad:2f:02:ac:43:9b:e3:d6:3d:a0:5f:7f:69:cc:08:b6:58:
         3a:d9:61:f8:c2:a0:e2:1c:a0:bc:4e:c6:43:90:64:ff:a8:d3:
         f9:41:61:a4:5f:bb:fa:de:31:c9:4f:c2:f3:fb:51:50:5c:58:
         bc:91:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----