Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/R-bogwOjclneY_AqavLC7Mie63I.roa
File:                     R-bogwOjclneY_AqavLC7Mie63I.roa (raw, json)
Hash identifier:          Pe/zFPGvzLJaRWuTXMqcGiBnokJ9gf86U7b5TBLWoLc=
Subject key identifier:   47:E6:E8:83:03:A3:72:59:DE:63:F0:2A:6A:F2:C2:EC:C8:9E:EB:72
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       0185719547041174F7D25778A5F052D7E055
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/R-bogwOjclneY_AqavLC7Mie63I.roa
Signing time:             Mon 02 Jan 2023 08:24:46 +0000
ROA not before:           Mon 02 Jan 2023 08:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60602
IP address blocks:        62.182.168.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:47:04:11:74:f7:d2:57:78:a5:f0:52:d7:e0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Jan  2 08:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47e6e88303a37259de63f02a6af2c2ecc89eeb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:6f:a2:7a:22:18:e1:2b:22:c2:b0:47:29:
                    62:4e:72:2c:dc:af:32:fb:55:6a:07:d7:52:b8:ec:
                    66:11:9c:28:d5:8e:00:71:19:d6:d9:b7:3e:57:13:
                    97:56:1f:cc:96:e6:2b:de:96:bc:d0:68:4c:6f:17:
                    d7:57:17:60:d8:b8:d8:ed:1d:06:c5:60:89:da:b2:
                    34:37:ed:cd:a6:1e:48:74:d8:e2:05:66:51:c1:3b:
                    35:f7:85:f9:aa:12:f7:12:c5:d9:99:a5:5b:d8:9a:
                    60:93:2f:7e:e8:f0:1c:15:8b:50:e3:7f:fc:99:ab:
                    7b:1c:61:b2:d6:c5:3a:00:8f:89:4a:1f:1f:51:d8:
                    ff:d8:6c:4f:38:19:87:e2:0a:ef:1d:5f:00:a1:c8:
                    5d:78:76:b0:2e:6a:82:3a:38:86:17:f7:bd:77:42:
                    20:be:e5:12:9f:bb:b8:1a:12:83:cd:d5:0f:d8:b8:
                    86:ad:c5:a4:01:61:42:59:56:c8:4f:5b:04:84:2d:
                    77:d6:4b:86:66:88:8d:79:3b:87:2d:07:b1:58:5d:
                    1c:08:ee:44:bd:f4:41:31:81:10:f4:9d:e2:ae:74:
                    7f:d3:42:0a:c8:5e:25:f9:c1:f1:a8:7c:4f:7f:ae:
                    d0:8e:7f:66:db:ad:27:63:cb:91:97:b6:28:ab:a6:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E6:E8:83:03:A3:72:59:DE:63:F0:2A:6A:F2:C2:EC:C8:9E:EB:72
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/R-bogwOjclneY_AqavLC7Mie63I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:52:91:84:41:f6:30:49:12:c2:5b:85:e3:85:c3:33:28:10:
         be:3e:25:0a:08:f9:8a:44:53:a1:6d:b7:16:31:03:f5:4a:59:
         81:10:ac:52:d1:23:f6:5e:9c:85:1d:54:fb:aa:eb:12:17:fe:
         a0:80:67:3d:61:ee:72:e6:7f:6a:66:76:eb:49:f0:bb:9a:90:
         35:e7:84:2c:87:40:1b:fb:d0:3d:78:b5:06:d5:b6:17:57:30:
         ea:62:3a:af:22:b7:64:9d:b3:0b:7d:95:c0:43:be:fe:de:cb:
         93:ad:f6:db:90:1b:70:ba:b6:cf:62:6e:92:53:a7:10:a7:1c:
         89:7a:91:50:54:9d:b2:d3:3a:66:8f:19:68:fb:1d:93:a9:0d:
         20:63:a9:15:56:dd:24:b2:f1:82:1c:79:e3:9d:09:b3:51:e2:
         42:e1:8d:88:5c:f5:36:5a:f9:6d:fc:c4:5c:cb:f8:1a:05:b2:
         00:bb:e8:a6:35:e4:8d:db:05:05:cf:4f:fc:72:78:ad:69:12:
         2e:92:39:89:08:b2:7f:b1:fd:67:cd:5c:42:ec:fd:8c:df:dd:
         07:05:a8:ee:c6:1d:a6:26:60:a9:47:8f:5c:26:00:bd:ec:03:
         84:60:c1:1a:d4:b8:68:d6:11:06:d0:ce:db:74:9a:2c:6b:71:
         e8:40:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----