Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa
File:                     eUVjZk-s_PT9PffDUvTdjEmDFMg.roa (raw, json)
Hash identifier:          XMLgFBrjnKjbo5tkdF383CVnYCbPxtaVm4LTPNd70J4=
Subject key identifier:   79:45:63:66:4F:AC:FC:F4:FD:3D:F7:C3:52:F4:DD:8C:49:83:14:C8
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       01872DCAA9E125C868B60CA650CAC98BF843
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa
Signing time:             Wed 29 Mar 2023 14:34:29 +0000
ROA not before:           Wed 29 Mar 2023 14:34:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35260
IP address blocks:        217.26.112.0/20 maxlen: 20
                          2a00:1ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2d:ca:a9:e1:25:c8:68:b6:0c:a6:50:ca:c9:8b:f8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Mar 29 14:34:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=794563664facfcf4fd3df7c352f4dd8c498314c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:5d:a7:9a:58:f3:77:a7:0b:31:00:a5:af:
                    6a:62:6a:5e:66:0f:94:7d:89:03:5c:c5:9e:3d:6e:
                    2d:d1:ba:9c:a7:82:cd:e8:90:43:9e:ca:53:13:4f:
                    d0:93:41:84:01:47:8c:4d:35:b5:ad:90:05:80:ef:
                    cf:44:cf:47:39:39:0e:a8:e3:bb:89:ea:f8:8e:87:
                    df:78:86:ac:ab:b0:e3:bf:7a:99:2e:eb:65:b9:91:
                    af:49:1f:11:7e:2d:2b:14:9c:6c:25:dc:52:42:b4:
                    c0:8a:e3:5d:bf:9e:33:31:34:4a:08:29:6c:57:d3:
                    7c:b7:3e:69:a3:d1:15:ef:51:b1:d7:cd:df:46:31:
                    f7:99:f4:75:33:ec:72:17:be:4c:12:d0:55:65:b1:
                    8e:3e:bc:de:34:8c:9b:52:b1:bb:e0:ee:4b:da:a7:
                    97:a3:aa:b5:a7:39:34:96:56:b0:7b:9c:36:6f:f2:
                    d7:fe:01:21:b0:d8:27:9a:ef:32:c1:0d:a8:3a:1c:
                    b8:ab:3f:a9:4c:e1:50:45:b2:7a:29:b4:03:ec:5f:
                    d4:d3:54:3b:61:b6:d3:52:d1:40:2f:74:2c:a9:66:
                    70:e9:93:bd:e5:3e:1c:df:c6:bd:07:0b:e1:07:fc:
                    e0:a9:0c:7e:eb:8f:1f:e9:63:d3:a4:5f:20:0c:cd:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:63:66:4F:AC:FC:F4:FD:3D:F7:C3:52:F4:DD:8C:49:83:14:C8
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/eUVjZk-s_PT9PffDUvTdjEmDFMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.26.112.0/20
                IPv6:
                  2a00:1ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:d6:55:3e:af:37:c8:80:45:f7:a1:4c:31:7b:41:e0:fb:
         6d:f8:88:5e:8e:12:8b:ea:44:5d:9d:5a:07:bb:ba:55:13:c4:
         ed:ac:f3:e1:ee:e5:18:ed:07:bf:52:9e:99:8f:d1:29:a6:81:
         94:7f:d7:a2:ee:26:81:3c:64:08:eb:ac:ad:59:a5:de:d6:95:
         95:33:03:0a:2e:26:3f:49:5f:41:fd:7a:f1:b4:fa:eb:3a:c9:
         8b:5d:6b:91:62:51:a5:5b:2e:1b:4b:72:20:cd:3e:a2:17:0f:
         7a:6c:72:08:5f:8d:94:9e:54:2b:25:f4:08:72:6a:46:ae:bb:
         52:05:eb:fb:ad:5e:3b:dd:54:09:1d:7b:fe:97:4d:a1:07:62:
         e0:78:40:4d:05:c1:92:45:0e:1a:ca:a1:80:9b:e5:8e:4d:94:
         13:a6:95:8f:dc:1f:65:e0:ee:e9:1b:0e:8a:57:c2:5d:e3:df:
         39:38:9d:4e:c5:bb:3e:ff:11:32:83:f9:a1:96:97:23:1e:64:
         e4:36:14:54:97:0e:5d:40:6f:72:b4:0f:8b:98:c9:57:56:c9:
         84:71:e4:53:b9:2b:ca:f7:40:df:84:ad:1e:e9:ef:71:3e:45:
         73:c3:19:24:b2:2e:32:8f:6c:8a:e2:6d:38:b1:ea:18:0d:e6:
         56:cb:65:35
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYctyqnhJchotgymUMrJi/hDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4
NTNkNzcwHhcNMjMwMzI5MTQzNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ1NjM2NjRmYWNmY2Y0ZmQzZGY3YzM1MmY0ZGQ4YzQ5ODMxNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW9dp5pY83enCzEApa9qYmpeZg+U
fYkDXMWePW4t0bqcp4LN6JBDnspTE0/Qk0GEAUeMTTW1rZAFgO/PRM9HOTkOqOO7
ier4joffeIasq7Djv3qZLutluZGvSR8Rfi0rFJxsJdxSQrTAiuNdv54zMTRKCCls
V9N8tz5po9EV71Gx183fRjH3mfR1M+xyF75MEtBVZbGOPrzeNIybUrG74O5L2qeX
o6q1pzk0llawe5w2b/LX/gEhsNgnmu8ywQ2oOhy4qz+pTOFQRbJ6KbQD7F/U01Q7
YbbTUtFAL3QsqWZw6ZO95T4c38a9BwvhB/zgqQx+648f6WPTpF8gDM0o9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHlFY2ZPrPz0/T33w1L03YxJgxTIMB8GA1UdIwQY
MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt
NGE4YjZiNDA4MmIxLzEvZVVWalprLXNfUFQ5UGZmRFV2VGRqRW1ERk1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx
LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RpwMA0E
AgACMAcDBQAqABrAMA0GCSqGSIb3DQEBCwUAA4IBAQBK7NZVPq83yIBF96FMMXtB
4Ptt+IhejhKL6kRdnVoHu7pVE8TtrPPh7uUY7Qe/Up6Zj9EppoGUf9ei7iaBPGQI
66ytWaXe1pWVMwMKLiY/SV9B/XrxtPrrOsmLXWuRYlGlWy4bS3IgzT6iFw96bHII
X42UnlQrJfQIcmpGrrtSBev7rV473VQJHXv+l02hB2LgeEBNBcGSRQ4ayqGAm+WO
TZQTppWP3B9l4O7pGw6KV8Jd4985OJ1Oxbs+/xEyg/mhlpcjHmTkNhRUlw5dQG9y
tA+LmMlXVsmEceRTuSvK90DfhK0e6e9xPkVzwxkksi4yj2yK4m04seoYDeZWy2U1
-----END CERTIFICATE-----