Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/87_wypPj366eWUEj6siPKi_Tx2g.roa
File:                     87_wypPj366eWUEj6siPKi_Tx2g.roa (raw, json)
Hash identifier:          /K5UtlP20Xqee3PooyqkQJnSzKkuS3mhnBpXxCueevc=
Subject key identifier:   F3:BF:F0:CA:93:E3:DF:AE:9E:59:41:23:EA:C8:8F:2A:2F:D3:C7:68
Certificate issuer:       /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial:       018C83C579BBED84E8CE810D3985B0D9B33D
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/87_wypPj366eWUEj6siPKi_Tx2g.roa
Signing time:             Tue 19 Dec 2023 20:30:06 +0000
ROA not before:           Tue 19 Dec 2023 20:30:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216302
IP address blocks:        31.24.248.0/24 maxlen: 24
                          2a12:48c0::/29 maxlen: 29
                          2a12:48c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:83:c5:79:bb:ed:84:e8:ce:81:0d:39:85:b0:d9:b3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
        Validity
            Not Before: Dec 19 20:30:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3bff0ca93e3dfae9e594123eac88f2a2fd3c768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:69:c9:35:33:22:8c:74:b4:ff:d2:b2:43:
                    c7:15:53:bf:bd:99:c8:ff:96:f4:1a:81:f8:bb:be:
                    f8:46:4f:d0:9b:f1:9b:5e:0f:82:08:2a:ec:e3:ca:
                    e4:54:46:d2:a0:68:13:e9:f0:01:48:c2:b4:a8:3d:
                    e3:3d:45:db:91:d0:b8:6f:fb:97:df:06:d4:38:86:
                    f1:94:89:8f:88:82:9e:4d:f0:24:06:91:ad:69:93:
                    6a:ea:d2:6b:c0:25:1f:a0:c5:7b:f3:63:70:75:b8:
                    fb:29:62:26:b5:ab:f6:18:05:31:7d:60:3f:46:75:
                    3c:e8:0a:b6:01:98:f8:76:1c:be:3d:c2:51:54:b4:
                    69:78:f7:0d:85:ae:bf:0a:7f:c3:a5:8c:d5:37:29:
                    ca:71:75:54:3e:77:98:03:11:8c:2a:cb:e4:44:0a:
                    d6:38:5f:de:14:76:9d:51:ec:1e:3d:40:90:31:ec:
                    9f:72:a6:e3:1d:26:af:ea:ad:c1:e4:c2:09:84:12:
                    6e:28:60:e2:3f:27:2f:40:e7:5d:3c:8a:37:c4:9b:
                    79:dc:4f:4f:be:da:14:9e:4f:9f:26:c9:a7:29:7b:
                    0b:ac:98:c3:f8:9a:21:13:fb:33:61:75:7e:d1:ea:
                    26:5f:48:98:63:d3:d9:78:6d:23:e3:7d:15:29:0d:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BF:F0:CA:93:E3:DF:AE:9E:59:41:23:EA:C8:8F:2A:2F:D3:C7:68
            X509v3 Authority Key Identifier:
                keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/87_wypPj366eWUEj6siPKi_Tx2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.248.0/24
                IPv6:
                  2a12:48c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:27:0f:e9:d7:de:c2:0e:98:d7:6a:e3:56:13:a2:e5:65:a5:
         9f:f7:ca:79:84:0e:ce:f4:f3:c9:10:0b:21:15:9c:a2:1d:fb:
         1a:8e:6d:6a:89:34:4d:5d:a1:c9:cb:97:60:dd:19:c1:d5:c4:
         49:7e:ab:41:1a:99:c2:58:10:e9:6d:d0:33:87:4c:42:a7:ed:
         23:2a:8c:a4:15:a9:0d:65:84:62:f5:14:37:67:24:9f:fd:1e:
         6d:fd:65:0a:64:2a:74:44:19:b9:2f:28:92:c4:f9:1e:22:36:
         e1:db:9c:5d:4d:4f:84:76:d0:58:af:91:13:91:e3:0e:e4:3b:
         1c:4d:e9:7e:1d:ef:a1:0f:7a:fa:53:43:3a:3f:e9:02:03:d3:
         db:34:2f:a7:30:4e:80:99:44:3f:00:d6:14:30:95:18:a1:da:
         05:73:7c:ed:8a:c7:e8:0b:8c:8e:e0:3b:72:29:2b:09:32:ee:
         12:f5:a1:f0:26:cf:5f:18:5e:30:38:1e:82:9e:6f:3d:e4:ec:
         bc:20:69:5d:9d:ca:d0:13:b2:a7:07:7c:61:5c:bf:26:2f:10:
         a3:99:e6:e8:2b:e6:96:86:53:ab:a7:f7:ae:33:22:40:7f:02:
         58:57:72:64:8f:28:f2:0d:33:e5:f1:02:8b:36:fd:f5:9f:e5:
         a6:c1:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----