Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/LeR3BDjE2pdN6lacwr9jEk1cAKw.roa
File:                     LeR3BDjE2pdN6lacwr9jEk1cAKw.roa (raw, json)
Hash identifier:          WsjdyL4+9dSUsYx6qcNX9etYzkrlmbzf3QTlv16S2Ts=
Subject key identifier:   2D:E4:77:04:38:C4:DA:97:4D:EA:56:9C:C2:BF:63:12:4D:5C:00:AC
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       01856FC2938933CFDCB97249AC0643E370AA
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/LeR3BDjE2pdN6lacwr9jEk1cAKw.roa
Signing time:             Sun 01 Jan 2023 23:55:00 +0000
ROA not before:           Sun 01 Jan 2023 23:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44605
IP address blocks:        93.113.132.0/23 maxlen: 23
                          2a03:9c20:2000::/48 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:93:89:33:cf:dc:b9:72:49:ac:06:43:e3:70:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jan  1 23:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2de4770438c4da974dea569cc2bf63124d5c00ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:dd:eb:06:a2:d3:dd:2b:6e:50:5f:32:3f:
                    61:b2:f9:5a:7f:fb:15:78:07:1c:b9:16:cc:e5:b1:
                    94:00:12:5e:5d:50:66:89:93:7d:55:83:54:c2:41:
                    4f:9b:1e:d3:42:bf:53:bc:75:5a:08:37:38:e5:c0:
                    0d:e5:dd:20:26:a3:7e:f1:ce:b1:a7:32:5f:db:ed:
                    db:c1:93:20:ee:83:46:d3:d9:3d:64:45:14:e0:73:
                    27:d7:9f:2b:75:03:10:cd:68:2c:2d:dd:a3:8d:46:
                    82:33:c7:03:b2:8b:d7:b4:62:c1:cc:55:72:0a:2e:
                    8e:06:bb:d8:4c:bb:9e:10:9f:cf:b0:c4:39:e4:3b:
                    f6:66:c3:34:0e:32:e5:ad:1c:34:7e:26:b1:49:3f:
                    22:fe:c7:42:6d:76:20:9a:46:d0:14:86:54:6f:5b:
                    4e:c0:ae:2f:ba:41:40:a2:40:4d:52:b0:b6:2a:c1:
                    a6:d7:d4:88:1a:50:74:a9:d7:4d:17:05:b1:82:3e:
                    d9:1a:c2:b9:e1:32:a2:02:8d:4a:41:23:38:bf:e2:
                    60:c0:39:34:0a:72:3f:b0:74:63:56:e1:1a:fc:9b:
                    16:c1:0e:27:49:2d:ea:15:43:71:bb:bd:0a:73:3e:
                    77:89:fc:80:86:31:2c:df:e9:0f:d8:8c:c6:df:f8:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:77:04:38:C4:DA:97:4D:EA:56:9C:C2:BF:63:12:4D:5C:00:AC
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/LeR3BDjE2pdN6lacwr9jEk1cAKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.132.0/23
                IPv6:
                  2a03:9c20:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:00:7d:e2:b0:4a:b3:03:c4:d5:87:e9:eb:9c:7f:44:f0:
         4a:bf:d7:20:74:f5:8e:18:2f:75:38:73:23:07:86:d0:36:d5:
         92:e6:57:44:b6:e0:52:fd:d6:0e:f8:24:12:ab:8b:e5:8b:5c:
         5b:9d:60:fb:7f:e4:c4:72:75:46:81:e2:6f:35:17:0f:7d:72:
         b6:8f:85:a8:76:f5:bd:5c:9b:9c:f7:60:ef:ed:d7:61:02:67:
         d2:75:11:69:51:de:b7:be:d2:fd:22:75:38:a8:da:e7:3a:8e:
         1f:54:1e:0d:90:ad:3f:5c:c9:a4:74:bd:b6:a9:60:1d:3d:65:
         73:15:26:dd:dd:d5:34:66:6c:5d:32:0f:dd:6e:29:9c:1a:9f:
         da:ad:2d:82:62:6b:f4:e1:8a:a1:12:3e:f7:f5:fa:48:c8:d1:
         1d:c1:16:fd:69:e8:2a:ef:12:04:6a:88:d8:08:8a:d0:93:3b:
         17:ea:75:c4:cf:f9:24:c1:36:92:4d:e6:66:de:2c:2e:e7:fa:
         6a:88:72:6b:a1:3c:84:03:7e:89:5d:1d:d3:13:37:aa:e3:4b:
         5c:27:2a:f6:95:5d:2f:59:47:7b:7b:8a:63:fe:92:13:65:02:
         a1:c4:40:77:60:50:87:d1:fc:36:10:63:1e:4b:b7:51:6a:54:
         d8:da:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----