Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa
File:                     niowzcxqH0rnKRNVt9Hr0xKu9J4.roa (raw, json)
Hash identifier:          cYVNRGsBF2gWD3RlkABzV8fIFj06uNv3Wurfy6FkM1c=
Subject key identifier:   9E:2A:30:CD:CC:6A:1F:4A:E7:29:13:55:B7:D1:EB:D3:12:AE:F4:9E
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       018571276D1E84BC1C5E7E47990D2ED0835E
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa
Signing time:             Mon 02 Jan 2023 06:24:47 +0000
ROA not before:           Mon 02 Jan 2023 06:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48927
IP address blocks:        178.215.228.0/22 maxlen: 24
                          2a0d:5440::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:6d:1e:84:bc:1c:5e:7e:47:99:0d:2e:d0:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Jan  2 06:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e2a30cdcc6a1f4ae7291355b7d1ebd312aef49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:66:f8:c9:48:a5:b7:f0:db:e3:fe:a2:8c:
                    e8:67:ac:ea:19:09:80:08:55:77:86:26:04:a7:1e:
                    e7:44:6d:43:62:4c:6c:57:8c:20:45:fb:55:ff:1e:
                    cf:8e:e4:b9:7a:f0:a0:57:41:87:ac:87:85:39:c9:
                    20:37:13:5b:b0:71:fa:c8:17:04:80:fb:fc:a4:2f:
                    e4:05:30:27:81:d9:18:bc:1e:aa:2e:f8:5b:64:87:
                    b9:b5:55:d8:30:f0:0c:f4:19:2a:ae:0c:ca:9a:8c:
                    d3:84:c6:3b:41:30:ef:25:12:40:db:bd:d0:ae:ab:
                    ac:48:d1:7c:81:0f:f6:85:a7:51:31:be:19:5b:98:
                    b0:32:6e:ec:a3:50:d3:16:28:05:f5:a5:31:3b:48:
                    e7:e6:5c:0b:16:2e:e9:91:43:13:29:02:26:02:26:
                    c4:87:a5:19:e6:d5:51:df:9e:9c:b2:53:ce:99:7c:
                    f0:59:b4:92:57:71:54:14:2f:a5:f4:4b:5c:0b:bf:
                    f3:de:e4:6d:9c:0b:8a:bb:37:b3:a1:8b:47:a5:8b:
                    5d:83:6a:f8:5a:68:a7:fa:8e:25:86:56:1e:9a:ed:
                    b6:f4:8b:c2:22:cc:c0:3a:2e:bc:cd:42:fe:06:e4:
                    70:af:ff:48:31:7c:a7:f4:59:0e:df:db:d9:1a:28:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:30:CD:CC:6A:1F:4A:E7:29:13:55:B7:D1:EB:D3:12:AE:F4:9E
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/niowzcxqH0rnKRNVt9Hr0xKu9J4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.215.228.0/22
                IPv6:
                  2a0d:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:10:60:d3:c3:8e:4e:82:e9:f4:b1:8b:89:d7:53:43:76:
         89:d6:16:e3:77:76:c4:a7:db:b7:6b:76:af:e1:06:9b:a8:a3:
         3f:7c:53:1d:10:7c:64:1a:20:06:72:d3:9a:15:91:69:55:84:
         37:7c:6f:c8:2b:92:8d:c6:77:dd:1f:34:9d:79:36:d9:ce:7f:
         06:68:fd:8d:ad:86:28:a4:96:36:a2:82:9b:58:e8:3f:e0:fe:
         81:5e:c0:7b:76:3c:d5:51:0f:e5:eb:a2:f9:28:7a:82:c3:f0:
         39:ae:c1:e5:1e:85:2c:7b:48:a2:f4:b6:b6:18:24:be:67:c0:
         35:4f:fe:65:52:70:4a:fd:8a:4b:0e:bf:b9:c3:c9:97:70:81:
         f1:7e:5f:bc:63:c7:04:a8:5d:6b:b3:2f:be:4e:2d:96:2e:1b:
         a5:b1:72:d1:c3:a0:34:89:03:e1:f5:6d:61:e6:9d:e1:2e:aa:
         5e:a3:47:7d:26:2e:99:13:a9:0a:5f:ce:9e:ea:65:11:7d:df:
         95:a3:b5:8e:52:c6:55:7f:59:7f:0b:ab:41:29:0c:3b:a8:13:
         70:7a:07:c9:e2:4c:44:eb:a2:f5:75:dc:1e:c5:4f:f3:56:36:
         01:9e:4b:30:b1:f7:fc:98:6f:a2:36:e5:90:da:c6:86:72:ff:
         ad:8d:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----