Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eIwONWx07jVZCE90XHJFQHJRN2U.roa
File:                     eIwONWx07jVZCE90XHJFQHJRN2U.roa (raw, json)
Hash identifier:          IxqujenJQmcY4P/MIG65UIMCJdYwf1NOXRx3r4vvef8=
Subject key identifier:   78:8C:0E:35:6C:74:EE:35:59:08:4F:74:5C:72:45:40:72:51:37:65
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       0185727A2F266E6E6A6DF8793926D54AF338
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eIwONWx07jVZCE90XHJFQHJRN2U.roa
Signing time:             Mon 02 Jan 2023 12:34:48 +0000
ROA not before:           Mon 02 Jan 2023 12:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        188.253.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:7a:2f:26:6e:6e:6a:6d:f8:79:39:26:d5:4a:f3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan  2 12:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=788c0e356c74ee3559084f745c72454072513765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:bc:df:3f:d0:87:45:b1:ba:f0:c2:b4:04:
                    d3:4e:54:51:46:91:b7:f3:82:20:fe:fe:d9:39:41:
                    5d:4a:04:4a:4f:35:c2:4f:2d:11:ed:42:c2:6e:8e:
                    21:67:41:ba:7a:a0:2f:c6:5b:b6:1c:4e:cc:04:47:
                    de:75:3a:84:31:a0:f4:91:bf:c6:95:06:78:65:48:
                    ba:93:ba:df:c6:97:55:68:ad:4c:55:bc:34:91:1d:
                    2f:f4:b0:d2:b2:3c:ec:61:c9:ac:06:e2:74:e3:e6:
                    6f:77:7b:39:6c:cf:a5:12:2c:ca:19:d1:64:66:a3:
                    15:50:c7:bc:d6:e2:d5:1b:07:50:45:3f:d6:d1:cc:
                    28:8c:5d:4e:a1:70:5f:ca:94:95:b6:b1:c9:54:73:
                    c8:26:01:c7:15:50:08:9e:f3:79:91:af:e7:3d:e5:
                    62:61:ed:69:2b:92:01:d1:a5:1a:47:07:dc:2c:b0:
                    2c:65:89:17:15:2e:8e:f8:48:36:e5:83:2f:c2:39:
                    f5:aa:13:4b:00:71:1c:47:f9:28:9a:6d:46:0e:6c:
                    1d:15:60:e8:73:83:b5:bd:c4:d9:81:36:82:46:24:
                    06:2f:3a:c9:76:10:4c:f5:fb:76:d6:05:86:d6:20:
                    1e:b5:53:f8:96:38:42:35:36:62:88:6e:3d:ff:34:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:0E:35:6C:74:EE:35:59:08:4F:74:5C:72:45:40:72:51:37:65
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eIwONWx07jVZCE90XHJFQHJRN2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.253.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:79:77:cc:d6:bf:a9:63:cb:6e:72:ec:c1:34:f4:1e:cd:
         f4:3b:a4:2f:56:4d:7b:ba:7e:68:40:c7:99:28:bb:c4:6c:f4:
         bb:ff:25:c7:97:8b:5e:23:2e:48:11:0a:ac:ce:c9:36:42:44:
         53:86:d2:58:cb:fc:b7:67:72:b1:ae:23:9a:c1:66:b7:6b:5b:
         ba:30:a0:5f:f1:59:88:11:23:cd:43:a4:2a:b4:12:b3:51:f3:
         12:f1:ce:02:80:fe:39:9f:47:b7:fb:3b:15:4e:0c:9f:3a:64:
         bd:f1:e7:25:c2:2c:27:46:93:3d:fe:fa:15:d6:09:ad:5b:6e:
         87:69:8d:ae:30:bc:f2:b8:5e:2b:a7:80:f9:17:7e:a3:b3:9e:
         eb:c0:3c:e9:d4:a8:73:49:d4:78:66:bf:26:54:a2:94:26:94:
         2d:75:b4:ee:ec:54:54:90:df:07:ff:64:31:7f:49:90:e1:e2:
         c3:ab:4d:d8:41:a4:72:8a:77:b2:0d:02:31:7d:66:3f:72:89:
         a6:95:b7:00:99:36:1c:a8:b6:74:3a:0a:91:e1:7c:62:2f:0d:
         f1:a7:be:9a:62:28:9a:98:98:48:10:a7:e3:35:96:95:37:a1:
         44:dd:21:14:3d:62:7a:b3:1b:c9:22:05:3e:0c:ff:99:ae:33:
         c4:a4:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----