Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/OIP-73StB1LI93ObDRMJWBXhGBs.roa
File:                     OIP-73StB1LI93ObDRMJWBXhGBs.roa (raw, json)
Hash identifier:          4QBMxaklaD+pVdV8ziSALrK/MGDM425WsTpXYPPmij8=
Subject key identifier:   38:83:FE:EF:74:AD:07:52:C8:F7:73:9B:0D:13:09:58:15:E1:18:1B
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       01857295FE197CC1722AED855EAF3DE1529B
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/OIP-73StB1LI93ObDRMJWBXhGBs.roa
Signing time:             Mon 02 Jan 2023 13:05:10 +0000
ROA not before:           Mon 02 Jan 2023 13:05:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200319
IP address blocks:        194.48.224.0/22 maxlen: 24
                          2a0c:f440::/29 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:fe:19:7c:c1:72:2a:ed:85:5e:af:3d:e1:52:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: Jan  2 13:05:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3883feef74ad0752c8f7739b0d13095815e1181b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:db:ca:be:7b:5c:6f:e8:6a:50:8c:ba:8c:
                    15:ea:07:dc:42:57:8c:9a:7f:04:0e:0b:5a:f7:89:
                    85:f8:6e:0e:fa:6e:7b:2a:77:47:d4:85:8b:b9:2a:
                    ab:fa:f0:06:9c:1c:90:de:f2:19:06:e6:38:59:52:
                    60:cd:c9:8c:47:9c:1f:fd:f7:c3:e6:f6:71:34:ed:
                    38:e7:31:01:b7:20:8f:da:32:4e:df:f2:d3:72:8e:
                    33:88:9a:8f:f1:fb:18:58:3b:df:02:c2:cf:fa:17:
                    d2:fa:0a:9e:69:f9:57:c3:b8:d2:aa:8e:87:a7:a4:
                    bc:04:58:c8:2a:7c:cd:d5:59:48:da:58:52:47:d3:
                    71:e2:73:c8:55:5c:d5:0a:12:3f:50:5f:ca:9b:40:
                    be:93:f2:a0:c7:fb:1e:34:ed:bc:04:1f:ce:98:38:
                    3d:5c:8f:ea:3d:89:54:b1:85:bc:58:fb:6f:9e:a2:
                    3f:14:a5:6a:53:b3:ca:c7:3a:5d:ca:4e:fe:f2:81:
                    2b:cd:1c:fe:1b:11:7b:e8:cc:e2:b0:21:3a:af:66:
                    e2:0b:19:67:05:cb:56:c1:13:2e:f0:ea:21:95:ac:
                    9c:19:00:bc:f4:fc:75:cb:27:74:a3:61:2a:52:ab:
                    f0:d6:6b:d5:e7:14:af:72:ee:dc:35:2e:f3:50:02:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:FE:EF:74:AD:07:52:C8:F7:73:9B:0D:13:09:58:15:E1:18:1B
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/OIP-73StB1LI93ObDRMJWBXhGBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.224.0/22
                IPv6:
                  2a0c:f440::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:01:77:80:ea:39:ae:d4:a4:49:34:e9:b1:60:b8:bf:d4:c7:
         89:f6:98:3b:18:89:30:1b:45:4e:15:e6:30:f9:a6:12:7a:b5:
         d1:07:68:f7:15:74:35:19:84:5e:62:23:27:c6:0d:77:53:04:
         2b:7c:c5:d0:96:32:3d:9f:c0:b9:7c:40:69:2d:0f:3c:fd:99:
         cf:ea:c6:d1:1d:d2:d2:57:be:4c:4b:6f:56:8e:f5:80:6f:3e:
         5e:78:57:74:d2:8e:e5:6d:b1:3e:38:4e:0c:78:e0:fe:a4:9f:
         ad:e9:85:ab:71:ab:07:47:9a:10:53:70:24:08:4a:70:15:cc:
         93:de:e5:19:17:16:52:31:cb:04:31:d9:03:7f:cb:59:da:92:
         c0:f9:60:0b:a7:d4:db:5a:36:07:43:da:c8:28:e5:f2:74:64:
         8f:e9:be:21:b8:f9:cd:5a:5f:ce:21:ec:68:66:64:b1:35:03:
         33:37:13:d9:2b:4a:41:55:72:09:7f:6f:dc:67:eb:74:2b:2f:
         fa:c2:b5:bf:b4:7b:59:2b:67:36:0d:24:fe:81:cc:94:95:ec:
         cd:37:a5:db:b6:74:d4:70:ee:08:13:9b:75:0a:67:ee:c6:ee:
         b2:82:d9:2e:85:d5:72:c0:db:76:8c:30:e0:40:5a:a6:35:cd:
         44:fa:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----