Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa
File:                     RPBrlOVy-D-hiyxnfPM_538wOag.roa (raw, json)
Hash identifier:          BPE2dwwRIysHl8CSlydeOoGoPbSk7Ea0jzgHNjmBP6Y=
Subject key identifier:   44:F0:6B:94:E5:72:F8:3F:A1:8B:2C:67:7C:F3:3F:E7:7F:30:39:A8
Certificate issuer:       /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial:       01899735010AE30BDF575B38D6DA55B507A1
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa
Signing time:             Thu 27 Jul 2023 11:56:20 +0000
ROA not before:           Thu 27 Jul 2023 11:56:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        195.66.224.0/19 maxlen: 19
                          2001:7f8:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:97:35:01:0a:e3:0b:df:57:5b:38:d6:da:55:b5:07:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
        Validity
            Not Before: Jul 27 11:56:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44f06b94e572f83fa18b2c677cf33fe77f3039a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:3f:f7:0d:86:00:7d:41:72:75:a8:06:7e:
                    79:03:6f:27:d7:de:b6:87:1d:f3:4e:f1:df:a7:f2:
                    d9:3e:bd:2c:c7:44:18:24:54:fa:07:4f:89:68:cc:
                    89:cf:a4:57:be:38:f4:b5:d8:27:b2:c8:26:50:15:
                    5f:17:28:86:e5:dc:b5:09:7d:55:00:bb:bd:99:23:
                    fe:3d:ab:fb:a3:b2:8c:c5:d4:b7:0c:60:9d:55:e9:
                    c7:48:f9:10:87:95:8e:ee:66:fe:df:52:09:57:04:
                    8e:04:d8:b3:13:8a:0e:69:45:cf:eb:39:e4:70:18:
                    df:ac:7a:6d:22:93:ae:98:6c:2a:5c:53:e6:38:ec:
                    8a:15:e0:db:fd:2b:da:b0:99:76:be:cd:f5:2c:4f:
                    83:2b:e0:ba:07:14:a2:5b:2f:12:b0:88:1e:9e:39:
                    db:63:bc:bd:54:fe:93:ec:7b:01:11:30:42:76:25:
                    6a:2d:92:3d:9f:84:88:8a:e1:38:49:94:ea:92:06:
                    30:53:c0:3c:e7:fe:a4:3b:f2:7a:e2:e6:5f:81:6e:
                    cf:b7:2d:a0:07:8e:e0:91:be:2c:5e:28:90:98:84:
                    ec:cb:cf:3f:05:81:c8:e5:bc:07:c8:f4:2a:94:97:
                    f9:e8:00:12:c0:04:0f:92:e7:98:96:a1:ff:bf:ad:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:6B:94:E5:72:F8:3F:A1:8B:2C:67:7C:F3:3F:E7:7F:30:39:A8
            X509v3 Authority Key Identifier:
                keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/RPBrlOVy-D-hiyxnfPM_538wOag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.66.224.0/19
                IPv6:
                  2001:7f8:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:9f:a8:5a:7e:df:fe:a8:cb:8e:39:29:bd:a7:94:a2:a0:70:
         3d:a4:f2:50:5f:41:24:3d:9d:d0:7f:3e:ef:37:b4:5a:f6:b0:
         03:38:cf:ff:91:9e:31:35:ad:ee:6b:97:04:7d:2b:a0:cf:d5:
         b1:d1:5c:ed:c6:e8:f8:38:55:6b:8c:ec:bb:8d:fc:06:e0:1e:
         1f:bf:12:f2:cc:12:b5:64:76:d7:e2:37:c0:9c:44:ed:73:a2:
         32:97:8d:83:03:47:55:61:86:ac:9b:3e:b4:69:1c:e6:e7:77:
         48:d4:1a:07:7b:0f:1c:5a:62:61:74:47:6e:8c:8d:9b:cb:84:
         9e:60:ba:52:61:2d:b4:de:1b:33:3f:ff:93:9a:b9:ac:a1:0a:
         0a:ad:3e:4c:f2:b8:9d:4c:cd:b1:7e:28:2b:3e:80:0a:da:9b:
         f4:60:19:0a:e3:79:fe:cd:05:c0:ff:f9:dd:09:75:3f:0a:72:
         9b:86:cd:6c:35:68:0d:62:c3:e3:30:90:89:71:33:0b:9b:63:
         d7:e8:00:3e:32:aa:78:c4:e8:4b:2a:36:0c:3f:ca:fc:37:31:
         7b:a9:d9:41:15:4f:85:f4:21:10:98:d4:79:dd:c3:47:85:95:
         4b:54:07:ec:e3:74:8a:b2:98:9c:ea:9d:43:49:65:3e:aa:a3:
         03:0f:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----