Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa
File:                     j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa (raw, json)
Hash identifier:          lZai0dm+eGwqvser4HObkQroEy5BCR71K37UF09SWDY=
Subject key identifier:   8F:C6:6E:88:50:DB:AA:B5:95:67:2D:81:BA:CF:9D:B7:AA:DD:EA:53
Certificate issuer:       /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial:       018570D5015D4FE56B290B55FEE7208A8893
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa
Signing time:             Mon 02 Jan 2023 04:54:45 +0000
ROA not before:           Mon 02 Jan 2023 04:54:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47773
IP address blocks:        193.162.105.0/24 maxlen: 27
                          2a10:8dc0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:01:5d:4f:e5:6b:29:0b:55:fe:e7:20:8a:88:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
        Validity
            Not Before: Jan  2 04:54:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8fc66e8850dbaab595672d81bacf9db7aaddea53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:7c:7c:d2:65:e1:f4:c8:1b:86:8b:a6:a4:
                    2a:9a:d0:9f:de:76:6f:6a:94:7e:a1:9f:ea:33:81:
                    1e:1b:c7:9d:61:f8:4a:bf:f3:0d:46:3f:f4:56:df:
                    cd:de:7e:9b:f0:90:ac:09:62:fb:0d:12:95:c7:c0:
                    7c:b2:c2:52:e2:e3:5c:c7:96:ad:dd:3a:ff:64:ef:
                    7b:2e:13:41:13:41:c0:ce:91:3e:45:f6:51:ec:66:
                    76:9d:c2:23:38:c6:a4:0d:ca:81:e7:db:e9:9f:fe:
                    bf:1f:5f:70:0d:c7:e2:77:d3:c9:0b:54:9c:d6:79:
                    49:14:14:34:2c:3c:60:c0:c5:08:44:05:5f:38:5c:
                    de:0f:37:f2:68:8b:83:2a:f3:ec:e3:39:a0:f0:c3:
                    23:e1:b5:6f:6b:ae:be:0b:b0:a3:38:95:d8:0a:36:
                    58:f5:71:8f:fc:2e:ca:1d:f5:b3:04:51:04:bb:b2:
                    93:69:ba:37:1a:ac:53:f0:eb:0b:c7:2c:72:8a:43:
                    b6:24:2f:5b:8e:64:36:4d:69:e0:ff:c9:cc:4d:4e:
                    d5:5e:b7:9f:dc:6e:02:a4:d7:7d:7b:8e:22:f9:13:
                    e4:f7:93:61:91:47:e7:a8:ab:7c:94:59:68:7d:b6:
                    38:0c:6e:59:90:7c:d9:93:ca:9d:a7:df:7c:70:6f:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:6E:88:50:DB:AA:B5:95:67:2D:81:BA:CF:9D:B7:AA:DD:EA:53
            X509v3 Authority Key Identifier:
                keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/j8ZuiFDbqrWVZy2Bus-dt6rd6lM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.105.0/24
                IPv6:
                  2a10:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:f4:5b:87:d8:2f:56:9b:c3:50:79:13:a4:d4:e4:06:6e:
         df:26:3b:59:c6:e0:be:98:27:ec:33:69:8e:c8:cc:75:d0:a2:
         aa:ca:cc:5c:43:f7:d3:95:b7:c2:1e:57:b1:8a:18:af:8c:0a:
         ea:b2:d5:31:b1:05:fb:e9:36:2f:1e:30:7f:d9:70:48:4c:72:
         3e:a3:4c:3e:a2:b2:3d:18:d0:4f:61:9a:2b:e5:83:df:b5:c4:
         97:e2:aa:cb:20:eb:6a:5f:8f:73:ec:11:0d:df:31:e8:68:c0:
         e5:4f:69:79:ed:87:08:dd:c7:9a:f4:37:79:6c:f6:a7:f7:3e:
         8c:ee:da:6b:cb:0a:2b:e6:cc:6f:c7:0b:9b:de:00:41:e4:fb:
         89:d0:31:d9:26:bc:60:b2:ce:d8:19:f9:3c:8c:40:d7:7b:e7:
         bc:3c:32:7a:d4:c2:5f:84:6f:c6:17:c2:04:43:b2:e1:cf:ac:
         69:ef:99:ac:aa:85:a9:e4:d0:ad:02:32:44:b5:25:e3:ba:a3:
         97:6d:a5:9d:27:d4:6f:8c:90:c0:58:ec:ed:b9:09:15:ec:c0:
         ce:12:af:ed:f3:6a:1a:36:86:7b:be:0b:e7:1d:44:0e:b0:e0:
         b9:36:5f:ec:b9:9e:eb:a0:63:3b:e7:cf:f8:e0:29:f2:15:e1:
         31:8f:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----