Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa
File:                     UfD-0Zo08-YANq6wSPIX25osRpg.roa (raw, json)
Hash identifier:          kynBNNz9D2vJhsbd6aZmkZLtpaWnbrM/26AxIn4FpZw=
Subject key identifier:   51:F0:FE:D1:9A:34:F3:E6:00:36:AE:B0:48:F2:17:DB:9A:2C:46:98
Certificate issuer:       /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial:       0187B793602B6C4DCF5E80C7EB09594299AC
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa
Signing time:             Tue 25 Apr 2023 08:41:41 +0000
ROA not before:           Tue 25 Apr 2023 08:41:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41354
IP address blocks:        185.127.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:93:60:2b:6c:4d:cf:5e:80:c7:eb:09:59:42:99:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
        Validity
            Not Before: Apr 25 08:41:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51f0fed19a34f3e60036aeb048f217db9a2c4698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:fe:79:ed:f5:04:81:d0:54:42:1e:e1:cf:
                    4b:d8:56:73:55:7b:97:cb:5a:71:0f:93:ba:1e:a6:
                    6b:9a:b4:62:ba:45:0a:ea:e4:dc:66:15:e5:1a:05:
                    51:fd:c9:9d:b8:b2:6a:8f:02:6d:65:52:7b:22:f7:
                    9a:9a:b9:32:cd:35:54:78:d4:0e:47:5f:87:48:68:
                    c3:e9:30:2d:85:ec:61:e4:e0:0b:9b:70:26:f7:37:
                    4e:03:4b:33:b8:48:ed:6b:f7:ca:72:9a:04:32:17:
                    ba:5d:87:9f:ab:a2:ae:5b:6f:40:70:4d:82:bc:93:
                    45:0c:ed:6a:6e:24:92:09:46:dd:5f:38:07:e0:8a:
                    52:61:1a:9b:fd:f1:81:9f:84:a1:4b:25:7d:7e:fe:
                    92:5c:7a:8e:90:dd:43:2a:83:30:1a:41:0b:df:6d:
                    7b:3b:8c:08:55:e6:6d:c8:19:e2:3b:44:be:25:30:
                    a5:7d:52:92:96:5e:c9:a1:38:c1:ad:b9:19:a8:3c:
                    cb:8a:a1:68:66:f5:18:22:22:97:65:94:93:f8:43:
                    c2:e4:6a:7e:0d:73:7a:05:ab:88:89:79:f6:6a:f0:
                    82:3d:91:a1:c5:c9:b8:18:ef:b7:d0:06:50:88:c8:
                    36:4f:d5:3a:f6:4c:76:05:8d:7f:3d:c0:dd:2c:62:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:FE:D1:9A:34:F3:E6:00:36:AE:B0:48:F2:17:DB:9A:2C:46:98
            X509v3 Authority Key Identifier:
                keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:27:94:fe:96:80:0f:d3:1d:b7:e7:2a:43:bf:b5:28:07:56:
         98:14:fb:0d:77:60:9e:a6:82:7c:0b:39:dd:92:4b:8f:54:85:
         e2:be:47:f0:2f:7d:f3:30:09:a8:54:a0:a3:1b:98:1b:96:92:
         6a:10:da:28:0c:f6:1e:e2:aa:5f:7c:f0:16:65:18:dd:48:3e:
         9e:e0:85:9f:0d:ad:88:76:62:3f:d9:84:dd:0b:66:ee:26:af:
         df:29:9e:97:ff:5a:8b:b8:79:b3:3a:3a:cc:42:dd:73:83:7e:
         36:00:8f:e7:64:96:c4:e3:66:ea:31:dd:8e:04:cc:a6:d3:a9:
         45:16:a9:ea:b5:d9:99:df:e9:9b:85:c9:f5:69:51:b8:e8:a6:
         c5:f3:ef:a8:8e:59:43:c0:7f:33:2f:d7:e0:93:99:5d:e1:70:
         a9:e9:74:c6:96:4b:23:6c:18:d8:cc:a1:10:bd:7a:d4:09:39:
         85:35:5e:49:02:9e:42:b9:c8:3d:89:2a:16:36:4e:12:aa:d1:
         2a:39:c7:2c:08:5c:0a:a4:92:f1:54:58:fe:2c:de:04:b7:fa:
         81:73:40:38:2e:cc:18:c0:f5:84:8a:8b:42:ec:0a:e0:39:14:
         32:d5:17:a8:4d:72:84:66:15:35:61:36:5e:91:4c:b9:87:0c:
         8b:12:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----