Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/5LBL0mIxdZJE2kQpLT2vWn6hV3k.roa
File:                     5LBL0mIxdZJE2kQpLT2vWn6hV3k.roa (raw, json)
Hash identifier:          xQ4J7e9ptDpWdQNY9XTXVBi/faETVpLpmdmBNgzi26U=
Subject key identifier:   E4:B0:4B:D2:62:31:75:92:44:DA:44:29:2D:3D:AF:5A:7E:A1:57:79
Certificate issuer:       /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial:       018573718B09200E8731A5E474EBEAFF0548
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/5LBL0mIxdZJE2kQpLT2vWn6hV3k.roa
Signing time:             Mon 02 Jan 2023 17:04:59 +0000
ROA not before:           Mon 02 Jan 2023 17:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39912
IP address blocks:        194.34.226.0/24 maxlen: 24
                          2a0d:f9c2::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:71:8b:09:20:0e:87:31:a5:e4:74:eb:ea:ff:05:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
        Validity
            Not Before: Jan  2 17:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4b04bd26231759244da44292d3daf5a7ea15779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:3d:1b:a6:f0:7e:10:a7:46:7b:84:ca:ec:
                    d8:fb:d2:b9:a2:82:9b:3a:75:cb:56:58:b6:b3:f7:
                    03:5a:e0:3d:17:67:40:68:0a:77:37:9d:16:07:95:
                    0c:a4:2f:a5:4d:42:ff:a8:09:5d:9f:6b:d6:d8:b2:
                    53:80:4d:8b:4b:68:66:19:c3:d8:6a:d4:ad:8c:55:
                    a8:01:69:91:f9:76:bd:74:85:04:b5:0f:15:20:99:
                    27:28:54:35:92:c9:82:c0:a8:bd:92:92:56:c0:f5:
                    b8:1a:93:7a:0f:ad:21:2c:80:21:7e:c7:f6:21:d2:
                    c6:f6:e4:e1:7a:88:8b:78:dd:3b:b6:17:45:5f:ce:
                    60:38:2b:7a:f6:d8:10:4c:e7:a8:c5:87:13:86:80:
                    0a:57:f2:23:4f:1d:c1:36:62:d3:e6:b2:ba:78:a9:
                    0d:bb:57:fc:80:bc:f7:cc:43:16:29:19:be:33:12:
                    3a:02:06:91:28:70:01:24:78:35:c9:44:56:cc:6c:
                    11:6b:93:16:09:16:3a:7a:fc:7c:db:d8:00:5b:f5:
                    d2:d9:0e:6c:3e:a8:89:c3:95:df:92:e3:43:00:9a:
                    ca:6e:a8:3e:72:ae:73:37:b8:b5:54:6a:c2:25:14:
                    6b:88:47:3f:94:d5:6d:1e:47:d1:52:b0:1a:97:92:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:4B:D2:62:31:75:92:44:DA:44:29:2D:3D:AF:5A:7E:A1:57:79
            X509v3 Authority Key Identifier:
                keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/5LBL0mIxdZJE2kQpLT2vWn6hV3k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.226.0/24
                IPv6:
                  2a0d:f9c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:1a:a0:6d:47:77:84:d6:58:8e:f8:e3:90:a6:18:24:d1:
         5a:87:c1:ed:c9:39:ff:89:26:6e:e8:2c:00:c9:b6:5c:9d:24:
         1f:66:32:a1:71:19:54:a1:cc:cc:dc:13:5e:0b:84:e9:50:21:
         7d:e1:5d:62:bc:45:48:b3:07:78:a1:1e:dd:cd:dc:69:a1:17:
         da:82:ef:7d:1c:99:5c:73:31:08:b5:15:d1:9e:f5:80:14:c6:
         6f:1f:e1:a0:03:60:38:dd:0a:d2:ab:4f:a1:26:3c:95:48:5c:
         46:8b:b5:ba:76:2c:2b:66:86:4b:84:d6:2f:be:bb:ef:84:6b:
         9b:34:fd:0a:17:03:4c:7a:d7:55:99:8b:59:0a:7e:f9:17:e5:
         2b:83:28:2c:39:41:e2:45:b3:31:19:30:56:25:9f:9b:a9:bb:
         64:8d:51:cb:d5:42:29:d5:10:ef:cf:4e:b6:86:93:c9:45:a8:
         4c:95:3a:49:a2:f0:99:02:71:23:4e:de:59:56:1d:2a:13:d1:
         1b:fd:de:ad:e5:a8:31:f1:5d:12:05:6f:07:66:3c:c5:22:74:
         32:9d:89:3f:5f:83:18:a1:6c:b1:7e:38:9f:66:d3:38:32:3b:
         bd:aa:c5:3b:69:30:0c:6b:0b:9a:bc:28:6f:46:1c:19:ba:2d:
         16:bc:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----