Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/C55drPg3KnPhHWTD7aCfvkuOF9A.roa
File:                     C55drPg3KnPhHWTD7aCfvkuOF9A.roa (raw, json)
Hash identifier:          /INdbvXS2z6la9woedDhlTphOl+n3GSnh8EzekN8ZBs=
Subject key identifier:   0B:9E:5D:AC:F8:37:2A:73:E1:1D:64:C3:ED:A0:9F:BE:4B:8E:17:D0
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       01867900BEFF7EDFAD1AEAB8C2DBF743E532
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/C55drPg3KnPhHWTD7aCfvkuOF9A.roa
Signing time:             Wed 22 Feb 2023 12:02:17 +0000
ROA not before:           Wed 22 Feb 2023 12:02:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201612
IP address blocks:        194.0.26.0/24 maxlen: 24
                          2a02:850:ffe2::/48 maxlen: 48
                          2001:678:20::/48 maxlen: 48
                          2a02:850:ffe5::/48 maxlen: 48
                          2a02:850:ffe0::/48 maxlen: 48
                          2001:67c:1bc::/48 maxlen: 48
                          2a02:850:ffe3::/48 maxlen: 48
                          2001:678:24::/48 maxlen: 48
                          2a02:850:ffe6::/48 maxlen: 48
                          2a02:850:ffe1::/48 maxlen: 48
                          2a02:850:ffe4::/48 maxlen: 48
                          2a02:850:ffe7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:79:00:be:ff:7e:df:ad:1a:ea:b8:c2:db:f7:43:e5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Feb 22 12:02:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b9e5dacf8372a73e11d64c3eda09fbe4b8e17d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:58:1c:83:3c:65:f9:02:59:e2:fc:89:d4:
                    0d:b8:f3:1f:86:84:58:1b:c2:a6:77:c4:e3:bb:46:
                    c7:39:4c:1f:f4:ed:dc:17:5c:b8:dc:d6:52:fd:a7:
                    de:4a:af:0f:50:4f:24:2a:00:e6:79:df:3e:d3:94:
                    e8:14:d4:82:6c:a7:76:73:8e:2b:a7:8e:e5:f3:5e:
                    99:2c:00:47:50:55:57:06:e6:03:8c:74:5d:bc:51:
                    0f:c7:b0:3c:0a:f6:f1:43:41:9a:01:7c:b6:34:3d:
                    f3:78:37:23:55:f4:c6:94:4e:af:1b:68:b5:7e:aa:
                    93:8c:bf:e2:4b:a2:46:61:86:1d:2b:cf:d4:68:d1:
                    09:f7:95:37:54:94:a3:0c:a6:0e:c1:87:28:3d:d3:
                    7e:2c:88:c9:58:dc:9c:a8:4a:e0:0c:f1:20:11:29:
                    fb:f3:d6:7d:e9:34:61:2e:1a:d6:5b:96:5d:61:7b:
                    a9:40:b9:28:5a:3c:cb:bd:fa:65:e9:da:bb:d5:3f:
                    de:ee:38:1c:b6:30:ba:c9:21:f4:1c:b1:da:c6:62:
                    5d:82:55:54:25:d3:b6:eb:d9:bc:3b:ca:cb:36:91:
                    5a:5f:b8:fe:7a:ee:0f:76:cb:8e:47:80:b2:e1:41:
                    02:b8:92:6e:50:48:56:31:0b:ab:3f:f9:ee:04:1b:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9E:5D:AC:F8:37:2A:73:E1:1D:64:C3:ED:A0:9F:BE:4B:8E:17:D0
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/C55drPg3KnPhHWTD7aCfvkuOF9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.26.0/24
                IPv6:
                  2001:678:20::/48
                  2001:678:24::/48
                  2001:67c:1bc::/48
                  2a02:850:ffe0::/45

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:3c:2b:36:7b:a4:25:76:35:bb:50:3f:8f:a2:25:64:9b:
         3e:e8:fa:79:73:76:77:6b:c1:bc:c2:9f:6d:05:c9:3e:8c:fe:
         9c:d1:ea:32:c1:2a:1f:19:21:b5:f7:e0:ba:1c:65:92:bf:34:
         f2:bb:ac:26:a1:42:b5:34:a2:6f:41:4f:ef:86:c8:fc:66:2c:
         83:df:d1:3e:0a:ee:63:e2:2f:87:bf:a7:bb:12:f1:e8:ee:3e:
         2a:d6:94:6e:bb:0e:cf:28:cd:98:b1:04:8e:a8:49:b7:a3:98:
         96:e8:f5:fa:dc:4e:62:eb:7a:f7:c0:8c:9c:6a:14:5f:c0:66:
         aa:29:6f:1f:5d:ff:b3:0d:31:f6:25:f8:84:75:25:ab:80:66:
         f0:95:a6:8d:f9:89:05:7a:87:ac:ef:98:07:a0:02:ba:2b:41:
         08:c5:cb:43:b5:64:79:4f:10:84:cd:09:18:22:71:9f:62:e0:
         5c:45:e3:8c:68:ff:ff:e3:10:de:46:5c:3e:cf:24:02:c2:d9:
         b2:07:f6:88:c6:3b:f8:4f:d0:1c:0a:c4:5f:92:60:be:0b:5c:
         cb:cd:15:7a:14:88:ff:c9:ad:f9:a8:cc:cd:93:51:62:e8:3f:
         a8:8d:bc:ac:ba:2c:b5:6e:df:b7:29:cb:db:e2:ea:48:d7:9a:
         87:0b:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----