Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z15bOQsvkwXeOolg1S4aU2mzh0k.roa
File:                     z15bOQsvkwXeOolg1S4aU2mzh0k.roa (raw, json)
Hash identifier:          GvjwJV6m11o86KACL+NrKsA2PoPPiUcwzj73nuITIKA=
Subject key identifier:   CF:5E:5B:39:0B:2F:93:05:DE:3A:89:60:D5:2E:1A:53:69:B3:87:49
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018ACC07CBDB65FA1F15DD7C68B663C3FB8A
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z15bOQsvkwXeOolg1S4aU2mzh0k.roa
Signing time:             Mon 25 Sep 2023 11:09:37 +0000
ROA not before:           Mon 25 Sep 2023 11:09:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137502
IP address blocks:        213.248.254.0/24 maxlen: 24
                          213.248.255.0/24 maxlen: 24
                          2a01:618:407::/48 maxlen: 48
                          2a01:618:402::/48 maxlen: 48
                          2a01:618:405::/48 maxlen: 48
                          2a01:618:400::/48 maxlen: 48
                          2a01:618:403::/48 maxlen: 48
                          2a01:618:406::/48 maxlen: 48
                          2a01:618:401::/48 maxlen: 48
                          2a01:618:404::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:07:cb:db:65:fa:1f:15:dd:7c:68:b6:63:c3:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep 25 11:09:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf5e5b390b2f9305de3a8960d52e1a5369b38749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:f0:81:c6:dd:e9:af:28:f5:a5:d5:b8:30:
                    87:c8:eb:8c:91:8d:74:dc:cf:d1:5a:e3:ca:6b:4f:
                    04:9e:8f:77:c8:a1:8b:4f:6c:9a:62:7e:5a:ee:d1:
                    25:e6:26:38:6c:d9:d2:09:77:8d:81:4e:81:bf:53:
                    f5:fe:c2:1c:3e:f0:ae:51:4f:bd:7a:2d:f1:ed:3a:
                    89:e2:c9:44:65:72:ac:5a:18:a1:37:5b:be:b3:56:
                    6b:37:6b:b2:79:90:ab:1b:4c:27:f9:0c:9c:c1:c5:
                    c3:d0:e5:41:6d:64:11:e6:24:51:53:07:5c:76:1c:
                    2f:5b:d9:7c:55:bc:3e:22:7d:14:e1:ac:88:56:f6:
                    5c:d1:34:6c:31:a1:01:4e:2f:c2:e1:4a:61:af:e2:
                    ea:88:5c:63:94:22:64:fe:3c:2d:f2:bf:87:ed:52:
                    ed:3c:b1:cb:24:84:01:10:90:59:83:be:ed:a7:1f:
                    5b:04:9d:66:25:c0:ae:05:ef:81:6e:c5:5e:b5:3b:
                    b6:ce:d9:a5:2d:73:79:93:d2:6c:74:a1:71:98:f3:
                    39:3c:1a:1b:ca:43:1f:5a:70:f3:9f:f0:db:25:e9:
                    fa:f9:4b:f5:a0:6b:44:40:bc:4d:6f:34:a2:1d:39:
                    8f:26:43:7d:01:8f:cf:a4:c6:ad:de:95:04:85:96:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5E:5B:39:0B:2F:93:05:DE:3A:89:60:D5:2E:1A:53:69:B3:87:49
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/z15bOQsvkwXeOolg1S4aU2mzh0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.254.0/23
                IPv6:
                  2a01:618:400::/45

    Signature Algorithm: sha256WithRSAEncryption
         68:07:fd:00:6f:9c:04:dd:08:f3:56:79:21:76:2e:29:74:1a:
         53:71:ce:0a:b5:c0:cd:66:1d:2d:41:d5:8d:32:fd:9d:e1:99:
         9e:f2:63:58:a8:6b:b0:ed:7f:8b:11:aa:c4:a0:74:3d:41:ef:
         21:9a:06:d6:26:fc:dc:76:f2:61:8d:e1:aa:17:ef:31:2c:98:
         f2:b0:51:ca:9d:21:b9:ec:2d:56:ae:f5:0f:0b:d6:86:fa:a2:
         f1:ad:35:4b:0e:56:66:5a:7a:97:86:cf:f4:fc:e7:26:93:7f:
         c6:95:50:b8:13:0a:ec:f4:ad:13:18:64:53:b1:6d:fd:a7:dd:
         d7:2b:a8:48:41:ad:c6:39:c1:12:e6:c6:8f:c2:ae:42:36:06:
         ac:0a:42:61:64:79:14:63:63:ee:6d:7d:3d:2c:55:aa:72:30:
         e3:99:b0:4a:34:2b:32:d9:21:0f:3e:bf:a5:d4:41:9f:3c:4b:
         d2:2e:b0:29:bc:da:51:76:98:84:2b:32:ac:f4:6c:94:f1:cf:
         ac:96:4c:dc:cd:dc:54:cd:e1:c6:e7:90:ef:d9:51:57:45:94:
         5c:50:fd:de:e4:55:59:23:02:81:b6:fc:c2:2b:a1:79:50:38:
         10:f9:79:be:e3:dc:64:a2:57:5f:ef:ad:9b:1c:19:65:24:89:
         b3:19:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----