Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58HaVDXAZ-7wUUFo1Natxfl0-T8.roa
File:                     58HaVDXAZ-7wUUFo1Natxfl0-T8.roa (raw, json)
Hash identifier:          I7eimo1Zr831ymZkOBrzDkhFR1EvkYB/1B+ANm9RO5w=
Subject key identifier:   E7:C1:DA:54:35:C0:67:EE:F0:51:41:68:D4:D6:AD:C5:F9:74:F9:3F
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018AF544F554A0A339FFBA02DDBBFD5EA29C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58HaVDXAZ-7wUUFo1Natxfl0-T8.roa
Signing time:             Tue 03 Oct 2023 11:20:51 +0000
ROA not before:           Tue 03 Oct 2023 11:20:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209178
IP address blocks:        202.133.88.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f5:44:f5:54:a0:a3:39:ff:ba:02:dd:bb:fd:5e:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Oct  3 11:20:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7c1da5435c067eef0514168d4d6adc5f974f93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:52:03:35:29:43:6e:39:86:90:f1:93:e3:
                    00:3e:21:3f:2e:4c:2d:29:c8:c1:4d:20:5c:92:01:
                    a5:83:5b:6f:3c:d8:61:b2:39:36:7e:f2:a2:ff:1c:
                    97:6a:28:9d:0e:e5:9c:ee:87:c1:8d:96:fb:f5:da:
                    68:12:5e:09:d2:89:d4:10:44:6c:35:ff:89:02:15:
                    b9:3d:a4:e6:cb:55:6a:06:ce:4c:2f:fb:44:23:00:
                    34:f4:cb:96:31:ea:95:e2:18:d8:04:b0:40:50:14:
                    33:b3:3b:f8:70:51:b0:f4:ba:e9:67:aa:c2:b6:66:
                    8e:d8:77:0e:19:c0:bd:08:a5:29:67:36:e9:c0:23:
                    29:9a:02:ef:c6:d3:84:3d:cc:45:be:ea:68:a7:29:
                    6a:5d:72:fc:3b:e5:cb:7e:f1:f9:ed:81:94:76:fb:
                    6a:f8:d8:cd:40:71:86:66:f7:28:40:87:5e:4d:95:
                    7c:c5:5f:a4:09:67:3d:d1:d6:f7:b5:10:33:cd:5f:
                    c4:79:b5:ac:9e:10:38:bb:8e:fe:4a:ee:3b:8c:4e:
                    22:e9:59:ee:00:e4:22:c5:78:ee:86:d4:a4:25:92:
                    fd:9d:f4:be:47:b0:e8:00:f1:34:bc:d0:b8:55:f8:
                    51:12:59:6a:c5:15:ef:e4:89:b8:e5:5a:a5:8f:fd:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:DA:54:35:C0:67:EE:F0:51:41:68:D4:D6:AD:C5:F9:74:F9:3F
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58HaVDXAZ-7wUUFo1Natxfl0-T8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:55:46:a6:43:8f:41:8a:ff:61:19:24:2a:80:39:c9:a0:
         2b:5f:09:26:05:9d:0e:6c:be:ec:af:22:96:14:31:2c:a0:cc:
         89:41:83:0f:67:03:90:db:89:fc:98:97:d9:79:a1:6c:c2:6b:
         a0:10:b3:cf:ad:73:cb:11:c0:a0:42:bc:5a:fd:c9:04:9c:15:
         39:95:eb:90:16:b8:14:28:bb:5b:f5:5c:80:d2:42:49:d4:d1:
         18:8a:9d:95:75:d3:37:03:50:2c:0b:69:22:55:e4:75:8d:40:
         8e:f5:fb:04:f7:3c:dc:b8:6e:39:12:49:c3:e8:59:df:ba:d1:
         99:04:93:ae:c9:78:e4:05:bd:ae:a2:7f:69:84:cc:63:39:4e:
         b4:30:0b:13:e8:a9:5b:a0:8f:a8:33:11:bf:34:aa:ba:87:12:
         86:46:21:1b:5b:92:57:b2:ca:c0:f3:00:96:2b:45:13:cb:26:
         24:dc:d3:f1:f3:10:0c:38:4b:8e:0e:81:0c:bf:5a:9e:65:10:
         f3:d9:12:83:64:cc:87:01:c6:f3:b5:49:82:f0:76:9d:a8:0a:
         85:d4:52:6c:47:e7:b8:3d:44:67:e4:53:e1:31:f9:2a:b7:96:
         d2:7c:e1:f3:ec:6c:b0:53:8b:77:bb:dc:85:bf:dc:7a:a4:08:
         bb:f6:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----