Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/fqZbBx8jizDPMQSnyyMRyJl56Uo.roa
File:                     fqZbBx8jizDPMQSnyyMRyJl56Uo.roa (raw, json)
Hash identifier:          LRzY+NxqODYLqCuUc1F13Hm667xXHZrHdnhhVfoVahk=
Subject key identifier:   7E:A6:5B:07:1F:23:8B:30:CF:31:04:A7:CB:23:11:C8:99:79:E9:4A
Certificate issuer:       /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial:       0185E97B55038DAEBBC7538C022533AF55CC
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/fqZbBx8jizDPMQSnyyMRyJl56Uo.roa
Signing time:             Wed 25 Jan 2023 15:10:52 +0000
ROA not before:           Wed 25 Jan 2023 15:10:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57794
IP address blocks:        213.108.88.0/21 maxlen: 21
                          213.108.88.0/22 maxlen: 22
                          213.108.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:7b:55:03:8d:ae:bb:c7:53:8c:02:25:33:af:55:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
        Validity
            Not Before: Jan 25 15:10:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ea65b071f238b30cf3104a7cb2311c89979e94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:cc:d6:b3:3d:a3:76:44:e0:54:3b:4e:0b:
                    80:48:6a:13:ce:8c:1d:f6:f6:d9:68:1b:4a:bd:bb:
                    0e:04:7d:35:9b:67:02:c5:c7:70:ef:45:98:80:03:
                    61:cf:c9:87:67:ea:43:6f:f7:af:2c:b5:8a:58:d9:
                    e1:5d:9f:63:03:86:33:3e:98:6e:cf:a7:83:23:34:
                    ee:32:40:55:86:42:cb:13:e0:ff:ab:2e:44:df:83:
                    ed:39:76:b7:d2:74:5b:e6:76:8a:6b:78:16:fa:53:
                    3a:dc:41:96:ba:9a:cb:c4:0f:8d:f3:b8:e0:b7:e9:
                    81:29:fe:fa:31:3a:1e:f6:ea:84:a6:49:b2:8b:5e:
                    db:bb:38:f2:b6:4b:49:bc:f6:60:da:d7:9d:8f:be:
                    f2:3d:db:df:3b:8f:9f:b3:79:c9:b8:0f:19:59:8b:
                    4a:d0:f4:02:4d:58:25:4d:37:82:94:fc:d1:e2:33:
                    a6:41:5f:52:04:b0:b3:a3:c9:a8:9b:98:85:0e:1c:
                    37:b3:43:eb:08:f2:47:30:e0:8d:83:4e:c0:0e:2a:
                    1f:84:cf:87:f7:9a:41:ef:fc:e4:f3:cf:1b:1c:67:
                    86:b4:82:4c:cb:a8:4b:f8:35:7e:3d:f8:a1:ca:96:
                    e6:f5:66:d5:85:e3:a8:23:a7:f0:0f:98:bc:eb:0b:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:5B:07:1F:23:8B:30:CF:31:04:A7:CB:23:11:C8:99:79:E9:4A
            X509v3 Authority Key Identifier:
                keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/fqZbBx8jizDPMQSnyyMRyJl56Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.108.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:65:7e:64:a4:d6:28:4c:9c:83:06:15:0e:f6:af:05:61:
         7c:05:9f:42:94:8b:8e:f4:ff:99:cc:54:a7:eb:02:61:04:cc:
         9c:a3:19:b7:69:fd:33:dd:64:25:cd:c3:9c:76:fd:db:8a:0f:
         ce:58:3b:31:12:ca:69:4e:8c:f8:09:fd:91:77:91:03:ed:fe:
         44:56:bd:a4:00:a2:37:5c:53:89:a8:99:bd:1a:46:41:10:d5:
         0c:06:3c:52:2b:32:54:ff:85:1d:1a:fe:cf:fb:a7:f7:5c:16:
         30:42:3f:de:b3:eb:f1:2c:aa:ee:e2:60:3e:81:21:88:53:e2:
         97:df:49:a9:d9:cc:3b:79:be:26:59:06:70:b7:37:9a:1c:5c:
         c6:64:e7:10:77:03:e8:ac:5b:18:0a:45:ec:8c:9b:01:bf:b0:
         58:b0:e6:27:19:f7:1f:16:89:4f:3d:a6:d1:6a:38:c8:f1:7d:
         8a:76:cc:cc:22:f5:3e:57:08:15:d8:37:da:e0:a7:58:50:6a:
         c8:b9:f2:38:15:8e:c2:c1:2b:c9:49:0a:e2:e9:31:2d:bb:9a:
         26:dc:b2:cb:5d:97:27:e8:64:db:e3:0e:e3:19:3b:09:f5:9d:
         16:92:8d:ff:b9:4b:94:03:a2:a1:7b:b8:ee:b9:2d:ab:d7:a9:
         99:71:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----