Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Gd1RJeVps_2p5LVB9qeKjqqaF4Q.roa
File:                     Gd1RJeVps_2p5LVB9qeKjqqaF4Q.roa (raw, json)
Hash identifier:          Drd6npA38v540BAlLLQN+KF+w4P9b/W8G8+iQXiWSSA=
Subject key identifier:   19:DD:51:25:E5:69:B3:FD:A9:E4:B5:41:F6:A7:8A:8E:AA:9A:17:84
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       0185700278F4891799D3C7EB769168754D98
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Gd1RJeVps_2p5LVB9qeKjqqaF4Q.roa
Signing time:             Mon 02 Jan 2023 01:04:48 +0000
ROA not before:           Mon 02 Jan 2023 01:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42115
IP address blocks:        213.87.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:78:f4:89:17:99:d3:c7:eb:76:91:68:75:4d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 01:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19dd5125e569b3fda9e4b541f6a78a8eaa9a1784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:ab:a4:8f:57:2f:60:32:5f:d7:22:51:f3:
                    13:f0:5e:51:3e:42:aa:f1:b3:13:51:bd:7a:03:ac:
                    1b:d4:76:a2:85:70:7b:44:ea:eb:97:88:84:d1:05:
                    ee:88:b4:22:44:4e:0f:7f:fc:94:e8:c8:08:c0:7c:
                    91:61:4d:98:19:76:8e:d8:ee:85:6f:78:01:66:8a:
                    b0:db:df:aa:33:db:fb:b3:92:b8:d1:58:2a:2f:8e:
                    1b:34:af:b3:5a:46:99:64:1c:8a:65:1c:cf:cb:6e:
                    89:d8:01:c6:30:90:db:85:d2:b3:7f:1b:ff:16:15:
                    02:97:a8:9e:0b:a0:d2:1b:0d:8b:c0:70:a5:50:93:
                    73:a9:9e:e2:dd:20:dd:69:20:93:59:2d:d1:8b:89:
                    7d:ee:38:97:0c:d2:d8:e6:de:f9:d2:75:2d:53:4b:
                    11:92:15:fd:18:4c:34:4f:f0:60:de:8a:da:37:16:
                    fb:ff:68:63:43:80:80:7f:07:84:09:c9:72:28:b2:
                    6b:63:f4:db:8e:b9:1d:82:4d:62:20:e8:43:b3:d0:
                    8f:b7:27:e5:19:fb:4f:ea:71:bc:35:39:94:80:48:
                    65:67:71:cb:03:76:6b:43:4d:48:bf:01:18:90:4b:
                    51:68:22:41:d7:18:1d:26:d2:13:7b:5c:ea:83:9c:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:51:25:E5:69:B3:FD:A9:E4:B5:41:F6:A7:8A:8E:AA:9A:17:84
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/Gd1RJeVps_2p5LVB9qeKjqqaF4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.87.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:1b:29:00:66:56:cd:14:7d:c8:17:f9:ab:16:e4:18:96:
         78:2e:a4:dc:33:b9:27:c1:29:41:86:68:e3:0d:a0:f6:a5:0c:
         d8:09:55:87:29:ab:a4:00:93:f7:28:7b:04:87:95:e2:da:cc:
         a0:1a:8f:10:76:6e:8b:29:d3:e7:e2:4a:fd:73:e6:14:ab:49:
         2e:a4:fe:9f:8e:9d:f8:97:54:f7:bf:a7:e5:7e:a0:8f:6d:ad:
         d7:a7:ef:64:e2:21:88:89:bf:c7:14:98:45:ea:be:4d:df:be:
         4e:9e:4e:6f:12:77:52:08:f7:e5:33:10:ab:94:48:fe:88:d6:
         8a:f3:bb:db:96:ab:0a:43:1b:e1:4e:f8:16:f6:48:b5:e3:11:
         2f:7c:52:75:7c:3d:74:b1:0a:74:7c:8c:6b:9a:6f:a5:31:b2:
         e7:f9:79:33:1a:c1:04:87:a9:50:d9:53:d3:3c:74:09:de:3b:
         c4:51:75:b5:3d:89:a6:61:df:bd:0d:f5:83:f6:8c:53:e2:53:
         04:db:f7:4c:5e:6c:3e:e5:fc:11:97:a4:a3:f8:cb:7c:5c:43:
         4b:0c:73:fb:97:47:05:3a:f6:66:47:e2:e5:8f:10:66:1b:49:
         f2:33:b8:0e:f6:aa:3a:cf:62:41:89:45:ab:5e:c0:07:1a:b3:
         e7:7c:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----