Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa
File:                     F8DBJ_30HlA6HINcBRHL9IbqcBY.roa (raw, json)
Hash identifier:          nWDdOrQUkSBxa8V3GI9ddhY/snwRFoqBDgEgd1cTxVk=
Subject key identifier:   17:C0:C1:27:FD:F4:1E:50:3A:1C:83:5C:05:11:CB:F4:86:EA:70:16
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       0188E72622FB3C91E3C1C3965A1E07FB842D
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa
Signing time:             Fri 23 Jun 2023 07:26:56 +0000
ROA not before:           Fri 23 Jun 2023 07:26:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        185.192.36.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e7:26:22:fb:3c:91:e3:c1:c3:96:5a:1e:07:fb:84:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Jun 23 07:26:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17c0c127fdf41e503a1c835c0511cbf486ea7016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:9c:99:5d:ae:8a:50:ec:da:e7:36:b0:d0:
                    2b:e1:67:cb:7c:c3:91:bd:ca:7d:16:bd:71:d4:49:
                    bd:ac:b4:bd:cc:1a:7b:1e:32:ad:84:71:6f:ea:90:
                    9b:72:ef:0f:42:1c:95:73:6d:18:b1:da:9c:0d:58:
                    0d:7c:2a:e2:7c:d8:3e:09:8e:63:d0:6b:12:ca:8c:
                    1d:4a:a9:c9:7b:84:1e:94:d8:e3:a7:35:ae:9b:7c:
                    6c:90:c5:e1:b9:2f:ef:5f:03:0c:fd:12:e1:6d:a1:
                    7f:6a:79:52:08:1a:ec:8c:64:86:ed:b1:df:d3:fb:
                    d2:ed:a0:58:f2:ba:3a:62:83:dd:45:1e:ea:9c:98:
                    e9:14:33:a4:33:90:53:eb:df:c3:7a:28:61:da:c5:
                    c3:30:b3:0e:6f:c9:e1:5a:02:df:a8:cf:91:39:36:
                    85:2f:bc:16:41:f0:b9:7b:7d:1b:58:a8:93:5e:85:
                    f4:35:43:ba:54:ac:91:9b:ba:73:f9:12:57:2d:07:
                    db:66:5b:e7:45:89:df:73:c9:05:9e:39:47:f3:43:
                    77:6c:c9:c2:47:56:07:ad:9a:01:b0:9c:9e:f7:f2:
                    f7:b9:61:64:00:26:98:d8:e8:82:74:cf:84:83:c0:
                    32:75:b4:66:82:20:e9:a9:ec:01:98:4e:96:38:cb:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:C1:27:FD:F4:1E:50:3A:1C:83:5C:05:11:CB:F4:86:EA:70:16
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/F8DBJ_30HlA6HINcBRHL9IbqcBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:cf:4a:20:32:ac:b8:eb:93:7b:b5:e9:50:21:f0:78:3c:d4:
         49:da:84:86:9e:09:05:ed:d7:57:eb:ae:b7:2d:49:56:4b:25:
         88:ce:9f:c0:6a:77:7d:f1:06:dc:1f:08:76:8a:7a:07:24:e3:
         30:6f:f2:9d:33:34:80:62:bc:cf:b0:11:ad:27:56:1c:e3:55:
         61:32:1d:15:93:59:5a:4e:2c:75:c6:67:fa:ea:72:b2:e5:8f:
         7b:29:0c:fc:aa:b1:dd:e6:72:87:ad:18:1a:78:59:9b:b0:a3:
         dc:3e:bf:14:75:cf:c8:b8:ca:7b:7d:7e:be:9b:95:da:0a:68:
         ff:9b:39:8a:0d:82:91:51:aa:43:fa:c0:b1:b1:0b:55:6a:ab:
         7e:08:ba:d8:a6:53:c2:0d:8d:83:fe:4e:fa:59:2d:0c:23:9c:
         8b:34:dd:83:15:01:ff:3f:f6:04:42:a1:14:54:d2:57:ac:9f:
         e8:70:e6:2c:1f:67:67:61:b3:06:11:0e:40:45:0b:bc:0a:73:
         f4:1a:8b:45:94:01:59:37:14:14:c9:8a:b4:c0:8c:98:71:a8:
         0b:e5:54:27:64:d0:70:7e:29:9d:dd:93:16:92:f4:0f:74:2f:
         08:5e:6e:1d:9f:be:ad:61:86:54:da:df:94:d8:d9:e7:47:6b:
         c5:e5:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----