Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4G8p30xiY_Pl4S_apJzKMdlxSQE.roa
File:                     4G8p30xiY_Pl4S_apJzKMdlxSQE.roa (raw, json)
Hash identifier:          net3ZmWPbZANxAmgNRjsWtuWvDvSG9bIFWGVU4hw5hI=
Subject key identifier:   E0:6F:29:DF:4C:62:63:F3:E5:E1:2F:DA:A4:9C:CA:31:D9:71:49:01
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018572BA7230CBFA61185A6C09F9B9982088
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4G8p30xiY_Pl4S_apJzKMdlxSQE.roa
Signing time:             Mon 02 Jan 2023 13:44:59 +0000
ROA not before:           Mon 02 Jan 2023 13:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        217.113.24.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:72:30:cb:fa:61:18:5a:6c:09:f9:b9:98:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  2 13:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e06f29df4c6263f3e5e12fdaa49cca31d9714901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:91:2b:67:db:9d:e7:e8:1c:dc:6b:cb:65:
                    01:b0:ea:81:0f:77:1f:05:6c:19:95:3e:43:30:8a:
                    da:07:a4:26:85:18:1b:74:4a:1d:81:b1:24:31:ed:
                    b6:e7:a6:7c:7b:b4:63:95:72:ac:03:83:75:70:c0:
                    e3:9d:f7:b6:d7:29:23:cb:ee:78:d5:03:4e:9a:65:
                    f3:fd:36:db:03:bb:c2:4b:26:ab:91:23:8a:6a:c7:
                    97:06:cf:fd:b5:7c:e8:31:c5:7b:57:94:9b:25:94:
                    73:d8:75:ff:5d:87:82:f0:1d:96:64:b5:f7:b3:29:
                    e5:f5:54:45:23:b5:d6:d0:71:04:f7:ca:3b:4c:e7:
                    c2:9e:48:04:fb:95:41:36:03:95:55:79:98:85:8b:
                    a8:ef:16:7a:ea:bb:98:4c:28:0b:3e:64:6a:01:a7:
                    10:a7:e6:20:29:aa:35:ca:3f:e9:63:0f:a5:37:10:
                    25:05:2a:d4:9e:39:ae:7d:ee:c5:7d:55:f9:08:1e:
                    7a:84:0a:f9:1b:c8:4f:0d:ad:5b:75:9f:bf:53:3e:
                    1a:52:0d:d1:72:17:10:53:41:70:24:2b:39:f5:66:
                    97:4b:41:3f:18:ad:e1:19:59:7c:5c:cf:35:f7:f4:
                    2f:5b:ec:2c:c8:09:ec:fc:5e:25:c7:02:70:3d:cb:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6F:29:DF:4C:62:63:F3:E5:E1:2F:DA:A4:9C:CA:31:D9:71:49:01
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/4G8p30xiY_Pl4S_apJzKMdlxSQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:69:0a:57:49:81:af:78:d9:39:79:82:a1:91:c9:69:dd:
         bf:db:b9:3e:96:b5:ed:f5:2b:65:e8:9e:88:65:7a:db:f0:19:
         4d:73:e3:e6:85:ba:12:9f:4f:7e:90:02:f2:52:69:ca:6e:70:
         9b:1c:a8:40:f4:47:94:04:4e:8b:06:41:a7:a2:6b:c5:a0:2b:
         9c:32:de:01:e7:24:12:8f:bc:98:92:3b:b5:d7:11:9d:8a:10:
         86:b8:7d:4f:23:47:a5:d1:c2:bb:2c:2f:3f:48:21:74:4c:84:
         b7:8b:2e:ba:ca:12:7d:9b:59:68:c0:83:9b:5c:a2:6b:43:cc:
         61:10:f9:03:79:b9:36:64:fe:16:7c:c7:dc:33:08:02:01:ec:
         53:16:78:5b:eb:41:d4:37:21:4d:45:ee:c3:c1:53:76:cb:d7:
         16:4b:9a:38:17:d5:4b:47:ae:77:8e:14:62:c1:dd:74:ed:ea:
         17:3e:93:71:d5:70:38:69:5d:27:a0:49:bb:3b:d4:7f:8e:2f:
         40:44:76:2f:72:ad:53:83:04:68:dc:e8:b3:1a:4f:ac:f6:e9:
         58:68:65:a1:9c:f1:40:16:f3:c5:e3:c2:54:79:81:e1:15:7a:
         6b:de:1e:fe:88:b7:9d:d4:03:a2:c0:4d:8e:e1:7b:91:df:47:
         8d:b6:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----