Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BVauO2ZFanDJwVZW2wMTy0B2Ewg.roa
File:                     BVauO2ZFanDJwVZW2wMTy0B2Ewg.roa (raw, json)
Hash identifier:          CHLLAQ3sexN/4qmQCxF0sYUxLgbPw2rT6IShGScj5oY=
Subject key identifier:   05:56:AE:3B:66:45:6A:70:C9:C1:56:56:DB:03:13:CB:40:76:13:08
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       01888384B4DDE3EB676C38BEC2975EB1AE1A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BVauO2ZFanDJwVZW2wMTy0B2Ewg.roa
Signing time:             Sat 03 Jun 2023 23:08:12 +0000
ROA not before:           Sat 03 Jun 2023 23:08:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        188.209.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:83:84:b4:dd:e3:eb:67:6c:38:be:c2:97:5e:b1:ae:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jun  3 23:08:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0556ae3b66456a70c9c15656db0313cb40761308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:6b:0a:2b:25:fa:8b:ca:15:0c:3e:4a:a3:
                    98:09:4c:57:fb:62:45:7a:60:87:15:a4:63:0a:21:
                    95:7c:72:45:f4:12:58:72:b5:81:f0:e6:64:ab:29:
                    a0:83:dd:31:df:08:e1:06:14:01:b1:19:d8:65:61:
                    53:56:d7:c9:27:3e:17:2c:d7:0c:61:3a:bc:b9:13:
                    2a:62:50:a2:f8:cd:36:59:90:46:a8:f5:92:0b:ad:
                    37:89:55:28:03:be:cc:6b:ef:51:db:5c:7d:df:ba:
                    94:41:f9:dd:4c:b0:d3:5c:5b:38:85:63:de:a8:77:
                    71:72:f0:06:a0:9b:14:09:b3:6f:f2:dc:b1:43:7f:
                    a6:69:94:c2:e2:92:3c:1f:fd:0b:32:33:2e:fb:13:
                    fe:4c:c1:8a:b1:1d:b9:69:18:b2:fc:26:ee:93:4b:
                    b2:65:bd:70:f8:63:89:9a:b9:85:50:f8:4a:7f:df:
                    53:c5:07:41:4f:3c:7c:1f:7d:e4:fc:55:64:68:a9:
                    b8:8a:43:78:24:02:88:a9:f1:92:82:55:80:a3:55:
                    52:85:f1:af:97:76:63:0c:ea:24:74:c2:df:18:74:
                    58:3f:81:ed:50:c3:6b:fb:e9:a1:a5:f0:44:e3:fe:
                    46:72:96:17:16:a2:45:e2:19:12:be:88:fb:c0:ad:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:56:AE:3B:66:45:6A:70:C9:C1:56:56:DB:03:13:CB:40:76:13:08
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BVauO2ZFanDJwVZW2wMTy0B2Ewg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:b8:79:79:61:8d:47:18:e4:14:c1:98:b7:76:0c:35:c2:
         1c:b9:85:45:a7:a8:77:19:84:7c:a4:be:0b:2d:e2:1a:03:87:
         07:82:25:d0:21:b3:8f:8d:9d:a4:18:6c:8d:c5:f6:b1:e1:dd:
         5f:a1:90:74:3d:3d:ed:a3:76:0a:c0:e0:25:8b:3c:e2:1c:1e:
         30:e5:5a:53:ed:66:3e:b8:07:5f:7b:fc:59:08:5c:5c:bd:89:
         e0:99:38:ca:72:d7:c3:df:eb:68:b8:9c:b2:83:06:2d:18:da:
         0a:61:10:5f:09:2b:fd:50:3e:60:ce:9d:87:71:40:ff:39:8b:
         54:30:55:a9:e3:75:ee:5b:e8:d9:24:7c:a3:9b:ad:9b:4c:d7:
         4a:79:69:c5:ec:61:6c:dc:a0:3f:38:ef:4a:e7:b3:8d:29:6f:
         3c:21:bb:aa:db:52:14:0d:be:bb:26:6f:d8:f5:42:33:0e:64:
         61:3b:63:55:cd:c4:30:96:23:a1:75:d6:48:bf:d6:c4:77:f6:
         50:3c:24:bf:20:d0:85:35:e7:89:7c:f1:78:b1:43:08:cc:91:
         e4:1a:60:1f:42:b4:37:83:f9:98:8f:52:4f:dc:5d:3e:43:fc:
         4e:f9:63:06:59:6c:8d:53:43:bd:1d:f2:81:aa:27:dc:75:da:
         11:46:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----