Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/FF7iJ8_TZpGOxkqhJtSON4AKbdU.roa
File:                     FF7iJ8_TZpGOxkqhJtSON4AKbdU.roa (raw, json)
Hash identifier:          Wa4cR1/9DrF9aaEI1MjbwBAyLZZspxARwB1TLT+Aqyw=
Subject key identifier:   14:5E:E2:27:CF:D3:66:91:8E:C6:4A:A1:26:D4:8E:37:80:0A:6D:D5
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01856F67100BD7C02F6B8213668D439ADD3A
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/FF7iJ8_TZpGOxkqhJtSON4AKbdU.roa
Signing time:             Sun 01 Jan 2023 22:15:03 +0000
ROA not before:           Sun 01 Jan 2023 22:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197991
IP address blocks:        193.126.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:10:0b:d7:c0:2f:6b:82:13:66:8d:43:9a:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 22:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=145ee227cfd366918ec64aa126d48e37800a6dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:9f:20:90:62:ca:37:c5:11:6c:80:d8:f0:
                    f3:ec:e4:d0:72:50:16:f5:c9:c6:e0:49:0f:46:c3:
                    eb:c8:63:52:48:c5:bd:f1:60:7d:44:6c:86:5f:b0:
                    50:2f:77:a3:45:85:1e:a8:25:7b:7e:f0:fe:a6:45:
                    a3:cb:b1:1c:2b:71:2a:0a:e1:87:e2:da:4b:7e:56:
                    04:dd:fa:d9:55:3b:86:d4:09:e6:80:d5:f3:ef:2c:
                    67:2c:23:db:a8:94:9c:2d:c2:36:c8:50:95:33:93:
                    81:4b:a2:bc:2d:48:2a:23:ab:a4:07:eb:e4:2f:32:
                    52:ba:ca:08:92:9b:ae:eb:3c:ce:18:7a:88:d5:af:
                    45:7d:ec:c4:e2:56:8d:57:ef:ca:be:f8:0f:d9:a1:
                    70:b6:ed:95:3a:6c:6d:4f:3f:3c:73:69:ef:47:c1:
                    76:48:10:00:b4:a0:94:ff:0c:a1:4d:cc:96:30:7b:
                    d8:44:24:f2:a6:d1:38:13:08:63:77:01:45:85:db:
                    91:56:66:f7:08:c7:c3:f3:ec:fb:99:f8:3d:7b:eb:
                    bd:43:42:69:fe:53:b1:ff:87:e3:2d:73:65:83:87:
                    99:06:2c:85:81:f3:e4:46:01:7d:7c:1d:9d:58:1a:
                    79:76:82:e8:c7:15:51:03:90:e5:cb:c3:74:89:a4:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:E2:27:CF:D3:66:91:8E:C6:4A:A1:26:D4:8E:37:80:0A:6D:D5
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/FF7iJ8_TZpGOxkqhJtSON4AKbdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:a7:6b:32:db:4b:f8:a3:09:e7:ba:f0:0a:96:ff:d8:ce:
         52:59:69:5b:87:66:92:64:46:b4:85:cb:5b:dc:0b:e4:93:25:
         08:b2:f9:45:1e:61:e0:e5:d8:17:da:a3:4d:9d:9a:d6:5e:15:
         f5:43:22:08:31:97:f1:81:db:d4:ed:d3:d1:0c:ca:b6:44:d3:
         75:7c:07:7d:25:ff:08:c4:62:a1:f3:e3:cd:f4:2c:d2:ef:3a:
         24:e7:18:a2:f5:d6:ee:4f:5b:1b:64:11:6b:61:55:76:50:cf:
         59:0e:87:4d:a0:48:dd:0b:6d:b7:67:18:b1:05:d2:ab:c5:7a:
         f7:80:55:c4:26:f7:d0:0d:52:67:30:6a:dc:57:dd:64:98:15:
         1f:b6:54:08:06:0b:01:b3:3b:e2:ef:6f:35:ce:ec:02:6d:d7:
         e0:d4:a4:79:13:56:90:da:42:e9:ea:3d:45:82:3d:c5:69:1f:
         41:cd:f1:fb:d3:a3:68:45:0a:ba:7d:17:33:e2:3e:14:4c:e8:
         28:a5:0f:08:e5:10:28:9f:9c:f5:9e:20:4e:a3:65:ea:97:05:
         bc:03:63:87:12:25:f3:e0:7a:db:d7:a6:25:fb:04:35:c0:54:
         1b:79:f2:56:27:75:c8:3f:cf:4c:ab:36:e0:6a:ef:4e:fe:3a:
         2d:43:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----