Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa
File:                     l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa (raw, json)
Hash identifier:          C4koxa5FZhZcxiBqcwXcE5OqEfD0Qas5uHXCce8tcsY=
Subject key identifier:   97:ED:EE:61:F8:71:F4:19:B0:CA:45:35:B8:86:3A:4E:AB:3B:38:9E
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       01856FA718AA1936D6D501ECA57EFCBBE074
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa
Signing time:             Sun 01 Jan 2023 23:24:59 +0000
ROA not before:           Sun 01 Jan 2023 23:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200325
IP address blocks:        45.92.42.0/24 maxlen: 24
                          2a0e:1cc0:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:18:aa:19:36:d6:d5:01:ec:a5:7e:fc:bb:e0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  1 23:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97edee61f871f419b0ca4535b8863a4eab3b389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:b2:78:e8:f4:d6:e4:14:7e:76:a7:27:73:
                    d8:90:b3:d0:f6:ff:0c:cf:dd:eb:35:48:66:e0:da:
                    75:ee:95:ce:3f:4f:5f:ca:83:04:2b:84:f4:b0:88:
                    13:c9:7e:6f:49:0d:cd:58:1e:26:28:82:19:87:0b:
                    f4:6d:22:3c:d3:56:66:8c:66:23:41:16:da:77:f4:
                    5d:77:09:7b:e1:fd:07:6b:7b:22:e9:7d:86:6f:fd:
                    4b:d1:af:0f:46:75:9e:03:25:0f:de:7c:66:1d:fd:
                    5b:fa:75:ec:1e:1e:56:28:5e:a5:84:9d:d4:b5:20:
                    cd:50:0a:a0:40:b5:2d:b0:3a:c7:6f:47:35:4d:b8:
                    98:20:d9:53:1c:31:68:48:50:26:ce:0f:79:9b:71:
                    68:ee:0f:cb:68:6f:83:5f:55:d0:1c:1d:5f:43:ce:
                    62:c7:38:f0:24:05:67:63:7c:fa:33:49:aa:62:c2:
                    b4:09:f9:21:0d:d0:9f:02:7a:c2:c0:e2:31:95:b3:
                    63:d5:c7:d6:e1:b8:4c:26:aa:a9:83:26:30:c4:55:
                    22:a9:a1:5c:6b:be:fe:2e:3b:0f:5b:66:29:c2:5f:
                    db:f0:46:6d:59:5e:1d:88:7d:0b:1d:17:f3:fa:68:
                    c7:18:68:4d:7e:c3:07:a5:0e:db:3c:60:6c:a8:35:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:EE:61:F8:71:F4:19:B0:CA:45:35:B8:86:3A:4E:AB:3B:38:9E
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/l-3uYfhx9BmwykU1uIY6Tqs7OJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.42.0/24
                IPv6:
                  2a0e:1cc0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:19:28:08:22:6e:14:05:f5:a5:ea:aa:97:36:de:6c:58:
         63:65:08:d9:8e:98:a3:c8:b2:d9:90:67:b7:f4:bb:fb:05:0a:
         8e:ae:5f:26:e8:bb:36:bf:e5:25:65:b8:e7:e3:0f:d3:c2:f2:
         48:fc:45:d0:ec:ce:74:1a:1c:72:0c:ce:09:df:e6:c7:7d:cb:
         0e:13:1e:83:ba:29:61:cd:b7:90:65:63:83:7a:8d:cd:cb:72:
         76:be:32:f8:be:c4:e5:40:ac:ba:36:4a:a0:26:78:5b:2a:d6:
         08:90:17:38:e6:45:d8:52:d5:8d:e9:0a:bc:43:fa:cd:c0:b0:
         6e:38:a6:a3:34:b4:6b:4e:89:da:1d:53:c0:95:45:75:28:a3:
         ce:3d:1c:8c:03:c2:86:3c:80:ec:77:ce:08:fc:78:7c:45:a0:
         80:e5:5b:85:be:12:81:f6:9e:29:eb:b5:ac:88:c8:5b:8f:7c:
         62:e8:fe:21:f3:55:85:53:f8:da:c6:fb:a8:54:42:4a:59:17:
         a5:a5:0c:10:3f:1b:71:a0:61:83:fa:1c:7f:69:b6:24:c4:d4:
         f6:52:3a:87:4e:18:b2:f4:86:8f:98:a5:87:dd:f2:77:6d:2c:
         5f:9e:3b:1f:08:3a:c2:16:b3:4e:6c:7c:7f:c2:1f:5d:2d:bf:
         26:a3:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----