Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vwb5DVl7fowWHsV2cbReLpVPCI4.roa
File:                     vwb5DVl7fowWHsV2cbReLpVPCI4.roa (raw, json)
Hash identifier:          hWmGa0WeqttJebnSZzditblSQu8H9PdqFiWeFnB4/X8=
Subject key identifier:   BF:06:F9:0D:59:7B:7E:8C:16:1E:C5:76:71:B4:5E:2E:95:4F:08:8E
Certificate issuer:       /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial:       018B38E977FE20D599F56EE2F2B57D264BCD
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vwb5DVl7fowWHsV2cbReLpVPCI4.roa
Signing time:             Mon 16 Oct 2023 14:35:06 +0000
ROA not before:           Mon 16 Oct 2023 14:35:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48846
IP address blocks:        185.190.111.0/24 maxlen: 24
                          2a05:5c80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:e9:77:fe:20:d5:99:f5:6e:e2:f2:b5:7d:26:4b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
        Validity
            Not Before: Oct 16 14:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf06f90d597b7e8c161ec57671b45e2e954f088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:83:e7:dc:3d:72:60:86:7b:93:b4:c0:ab:
                    5f:8a:fe:ec:4e:02:8e:90:c9:1b:d0:73:00:de:45:
                    aa:fc:fe:9d:7b:dd:3a:50:12:03:ca:ba:6c:f0:d5:
                    5d:40:50:07:d9:c7:e1:74:84:bb:b4:7d:18:b0:60:
                    40:86:6e:28:a7:cd:f6:b8:8b:03:d7:c2:a6:b5:0c:
                    7b:a2:ab:13:cc:2f:13:4d:9d:1c:b7:ec:49:17:ec:
                    dd:63:61:7b:14:61:b5:c2:87:16:aa:9e:b0:a2:27:
                    3c:94:4d:f5:84:03:38:66:db:0a:12:e5:9d:35:dd:
                    a4:5e:2d:d4:3c:82:59:bf:94:0e:b6:cd:b4:7d:00:
                    52:82:06:44:10:da:25:79:42:f1:0c:80:2f:60:17:
                    96:2c:06:4b:14:7a:87:03:50:27:81:b0:f6:32:ed:
                    39:06:40:2b:83:f4:e8:c1:86:53:f7:8c:ab:c3:15:
                    58:70:da:2e:e1:93:c2:94:93:ab:d7:15:7e:b2:d2:
                    e6:de:f7:31:35:82:57:05:1c:de:e3:07:54:83:65:
                    b2:95:37:48:60:9b:24:7b:da:d5:bc:76:64:91:95:
                    8b:de:9a:ed:95:d2:88:f3:c7:04:65:fd:00:03:9e:
                    09:c2:9c:7e:ff:5b:98:a7:98:54:d0:a3:a5:84:2e:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:F9:0D:59:7B:7E:8C:16:1E:C5:76:71:B4:5E:2E:95:4F:08:8E
            X509v3 Authority Key Identifier:
                keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/vwb5DVl7fowWHsV2cbReLpVPCI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.111.0/24
                IPv6:
                  2a05:5c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:37:89:07:0d:68:49:7d:ac:27:b8:61:ec:27:bb:c0:fa:dd:
         1c:4e:bf:c8:73:4f:cc:ed:cb:56:95:da:24:5f:e7:f4:65:34:
         be:7b:b7:d9:25:67:4f:ac:05:31:0b:ee:20:61:43:fb:45:8c:
         cb:42:1e:7e:fe:54:d7:d8:a2:5a:4f:74:dd:15:71:98:7e:c9:
         7c:55:e3:4f:4b:ad:b6:81:79:49:0d:f2:c9:08:44:b2:8d:f3:
         d7:21:bb:c2:c1:5c:8a:11:ba:67:c5:b6:9a:67:26:a7:64:c3:
         f1:97:86:e9:e9:d6:57:95:c4:09:d3:21:a6:df:16:e6:bc:e4:
         5b:db:0c:82:2f:f9:8d:22:be:70:81:5f:bb:a7:b2:a1:cb:92:
         72:c9:f0:d8:7b:97:4c:6a:e4:59:bc:10:99:6f:93:f1:58:9e:
         9b:e2:76:ed:e8:25:16:0c:8d:5b:3f:6f:ae:bd:00:e8:99:db:
         1a:fd:80:60:67:73:a6:38:38:80:8d:94:e4:59:b8:10:00:26:
         65:92:6c:87:74:49:32:7f:16:5c:27:b9:77:3e:e2:2d:64:a2:
         83:10:4a:c5:78:16:b1:e4:48:ec:4f:8c:75:ad:09:b2:4c:89:
         fc:ab:62:82:b4:31:59:15:fc:c7:aa:24:90:69:c6:6b:3d:fc:
         4e:b6:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----