Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa
File:                     _NtGMu2I0HZGZ_ilUydFMx-UR_c.roa (raw, json)
Hash identifier:          JEeZgSxlXiJBZdNmlRnqCVDDSQVuTe1xh3DxU+gfq00=
Subject key identifier:   FC:DB:46:32:ED:88:D0:76:46:67:F8:A5:53:27:45:33:1F:94:47:F7
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       0188C610B44CC37017EFE767CFE7ACD5255A
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa
Signing time:             Fri 16 Jun 2023 21:16:03 +0000
ROA not before:           Fri 16 Jun 2023 21:16:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49614
IP address blocks:        109.105.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c6:10:b4:4c:c3:70:17:ef:e7:67:cf:e7:ac:d5:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jun 16 21:16:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcdb4632ed88d0764667f8a5532745331f9447f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:a9:ce:15:9a:5f:73:79:2e:38:40:74:d7:
                    61:07:bc:33:94:27:8e:da:8f:1c:a8:d8:62:cc:df:
                    70:a0:aa:b1:ea:99:6f:ce:25:06:a5:80:57:22:5b:
                    e7:91:4a:63:99:a5:24:38:27:30:b6:04:88:a1:9a:
                    83:97:a4:20:bf:41:89:8c:39:5a:af:d8:12:62:08:
                    c2:1f:0b:e8:5f:cc:80:e7:d8:c7:20:8d:3b:d9:ca:
                    9b:8c:b5:55:fc:fb:b6:2a:b4:63:0d:fd:5d:70:74:
                    5f:41:80:dd:c4:15:37:94:ce:c5:19:69:00:19:c2:
                    1d:ae:99:cd:39:83:85:5c:86:09:c8:c6:17:ea:6e:
                    db:bd:4d:b3:0a:52:a9:2f:33:13:7d:9f:ea:8d:0d:
                    e4:00:65:44:dc:67:df:56:71:06:54:4d:d5:33:e9:
                    e0:90:62:72:32:2e:c6:fe:bd:c2:47:43:0e:01:58:
                    24:61:a8:a8:73:d0:d8:72:45:7d:62:f9:24:e3:19:
                    32:5d:a6:cb:1c:61:61:9c:53:ae:51:70:ee:8d:ca:
                    23:d8:30:a1:06:3d:6b:7b:ee:f3:e6:cb:f9:3a:46:
                    37:72:35:68:25:33:72:39:d0:ee:bf:6c:11:2a:ee:
                    33:56:91:98:5c:a8:6b:ba:1d:4a:12:96:b0:c5:77:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:46:32:ED:88:D0:76:46:67:F8:A5:53:27:45:33:1F:94:47:F7
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/_NtGMu2I0HZGZ_ilUydFMx-UR_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.105.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:32:2d:c1:d7:65:50:9a:dc:5c:3a:e8:3f:c2:3f:dc:99:91:
         88:9e:3e:58:c0:cc:36:6a:b9:94:67:3f:e7:80:57:28:9a:ae:
         cc:9f:0c:d0:f4:45:96:e1:6d:56:1c:5b:65:a6:b1:4c:a3:df:
         62:44:7b:e0:6b:ac:7c:c0:07:4d:a2:3e:50:1c:dd:b0:b1:1b:
         bc:a4:b0:d6:5b:1e:18:a7:b7:8a:c6:cf:b7:a7:9f:5d:8d:26:
         cf:8d:92:d4:d1:c2:67:dd:4d:4f:0f:79:4b:80:e2:86:dc:00:
         b3:fc:8c:6e:12:8d:c9:fb:dd:d8:63:74:fb:11:a5:c2:52:f0:
         36:e6:ed:21:96:f9:58:08:d5:22:24:6a:ff:35:a1:c3:30:25:
         8d:19:dd:9f:28:15:fb:7d:83:9a:7f:f4:47:cf:a0:e6:3b:e3:
         64:3a:0f:53:19:b3:f9:2d:c0:2b:80:12:9a:75:82:8a:54:9c:
         a2:a4:6b:97:ed:b8:28:eb:12:26:d1:6f:a9:09:ce:ea:fb:ea:
         99:68:73:4d:a7:9d:66:65:c9:a9:ca:a8:c5:09:c5:32:d4:01:
         50:02:1f:6d:3c:50:13:b5:88:60:7c:f0:ab:ee:45:82:a8:37:
         06:ed:0e:c6:2a:b4:55:28:3b:b2:6b:cd:0d:f9:7f:d0:3d:d6:
         1a:0a:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----