Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/avSQMks1oy6R3JaXi1tmOQP4HFE.roa
File:                     avSQMks1oy6R3JaXi1tmOQP4HFE.roa (raw, json)
Hash identifier:          iSC9Byq/sV5SAJ0ORHmT/1YiKb0kzFe1Bf4d1R5e15o=
Subject key identifier:   6A:F4:90:32:4B:35:A3:2E:91:DC:96:97:8B:5B:66:39:03:F8:1C:51
Certificate issuer:       /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial:       01856E0AEF7E245E1077AA3378CBD9C3D5E0
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/avSQMks1oy6R3JaXi1tmOQP4HFE.roa
Signing time:             Sun 01 Jan 2023 15:54:48 +0000
ROA not before:           Sun 01 Jan 2023 15:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51354
IP address blocks:        195.43.75.0/24 maxlen: 24
                          2001:7f9:8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0a:ef:7e:24:5e:10:77:aa:33:78:cb:d9:c3:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
        Validity
            Not Before: Jan  1 15:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6af490324b35a32e91dc96978b5b663903f81c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:47:fe:a7:eb:0c:ca:fa:8e:4d:ae:7a:ae:
                    d2:51:bc:75:fa:0b:1a:84:b9:19:b8:a3:99:59:36:
                    5a:8c:86:97:fd:a9:1d:86:cd:bb:15:81:8d:73:02:
                    a0:8e:cb:f2:a2:ae:9d:2e:27:1a:62:cc:c3:cb:ad:
                    66:83:f4:45:a7:bd:2f:9c:55:a0:ad:cd:e6:ef:54:
                    82:36:7f:20:42:75:5e:db:43:c8:ca:6b:ac:0e:23:
                    4b:c6:36:a4:72:7b:38:66:2d:83:3b:4a:32:e7:f4:
                    b1:74:c9:a7:15:fe:47:8c:c0:43:f7:3f:69:21:6f:
                    02:62:bb:64:71:8f:eb:a4:ef:e3:62:77:e4:6d:c1:
                    75:fa:54:65:d2:b5:11:7f:37:18:10:26:1f:a7:83:
                    d5:f8:2d:b4:d7:d5:69:d3:5a:83:3d:ee:e3:ff:ef:
                    31:60:d6:6d:63:52:64:26:89:bb:34:80:8b:d9:8f:
                    26:15:76:22:40:8d:e3:69:d9:1e:ef:6b:f2:30:d7:
                    4d:33:e9:71:3c:ac:fd:0a:e9:26:06:b6:75:ab:bd:
                    fb:a3:81:ab:ba:14:09:04:48:8b:1e:fd:7f:2f:e1:
                    6b:70:fd:89:e5:41:1e:89:30:a1:74:de:9a:39:53:
                    b9:6b:48:86:35:8f:7e:48:db:a3:51:35:6e:80:be:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:90:32:4B:35:A3:2E:91:DC:96:97:8B:5B:66:39:03:F8:1C:51
            X509v3 Authority Key Identifier:
                keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/avSQMks1oy6R3JaXi1tmOQP4HFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.43.75.0/24
                IPv6:
                  2001:7f9:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:ab:69:30:9a:55:f9:01:2a:0e:95:a6:73:98:bc:c5:0e:
         ab:8d:00:fc:53:f6:6c:5c:e7:58:73:dd:68:8b:59:b8:37:49:
         0a:d9:75:af:03:c0:a1:37:6f:d3:fc:73:51:81:9e:91:55:d5:
         76:39:44:0c:7a:c2:34:ba:6a:f1:c5:df:a5:48:8c:a8:2d:7a:
         d3:0e:67:0a:87:67:2a:10:8a:42:61:e8:8c:7f:dd:56:a1:6f:
         b3:31:e5:11:0a:0e:3a:c2:9b:a9:f9:de:e5:9e:bb:36:87:7e:
         23:f1:d4:a4:31:73:2e:f2:61:d6:d8:27:23:48:4b:ab:54:29:
         2d:bc:36:85:bd:14:92:15:64:b9:e0:04:e9:7a:8b:c6:e5:53:
         9e:f4:5a:e8:eb:24:d1:8a:f5:39:f3:7e:45:77:f1:8e:b4:d9:
         35:6f:b4:8c:63:8b:fe:36:bc:54:56:82:48:09:b6:14:b4:ec:
         09:59:f8:11:fa:1e:89:11:c6:f4:09:6b:d2:2b:24:f2:7e:a4:
         45:d0:29:33:b7:37:ab:6a:b4:b0:9a:b8:1d:33:26:49:8a:09:
         92:8a:b8:c1:94:a0:b5:eb:98:b7:fb:ca:c3:34:d0:67:e5:62:
         5f:bb:ec:fd:4f:81:5b:5a:e2:e9:c4:18:b1:ff:8a:d5:63:2f:
         f5:95:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----