Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/ZmaxaEiatEtMkBt5IRbYo8wXM7c.roa
File:                     ZmaxaEiatEtMkBt5IRbYo8wXM7c.roa (raw, json)
Hash identifier:          A1DJhzGEVuqTUrHjTFHMfQpsQC5NJRqMUW30Kfb0R3k=
Subject key identifier:   66:66:B1:68:48:9A:B4:4B:4C:90:1B:79:21:16:D8:A3:CC:17:33:B7
Certificate issuer:       /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial:       01885231068257E1A020EF324D43845339D7
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/ZmaxaEiatEtMkBt5IRbYo8wXM7c.roa
Signing time:             Thu 25 May 2023 09:15:24 +0000
ROA not before:           Thu 25 May 2023 09:15:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199162
IP address blocks:        194.180.6.0/23 maxlen: 23
                          2a13:da80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:52:31:06:82:57:e1:a0:20:ef:32:4d:43:84:53:39:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
        Validity
            Not Before: May 25 09:15:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6666b168489ab44b4c901b792116d8a3cc1733b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:e7:96:f3:4e:25:13:03:44:10:c2:11:4e:
                    3b:53:b0:a0:a7:2a:c1:d4:b4:de:ea:51:56:a6:d0:
                    9e:5e:73:7d:fc:aa:a0:5b:16:33:fa:fe:af:15:91:
                    a9:69:17:d3:c4:3e:2e:6c:3f:d0:eb:4c:f7:1f:df:
                    da:43:dd:c3:44:0c:4e:d7:b9:c6:4d:70:62:4c:56:
                    5b:67:c0:b8:f9:8d:8c:25:bf:25:3f:e4:13:20:bf:
                    82:73:f8:62:8b:ba:ce:5c:64:19:3d:53:a8:66:c2:
                    0d:38:54:55:e4:f4:42:10:d7:9f:6e:8e:86:ad:57:
                    76:b1:69:8f:67:d4:58:58:57:89:72:c6:6c:3c:08:
                    56:c7:3e:ac:e4:b6:e7:09:7d:07:91:40:03:6e:35:
                    c0:72:87:53:45:d0:84:a3:06:f6:3f:f6:43:b0:98:
                    2a:b9:fb:6c:29:1a:89:44:4f:cc:85:62:e5:cf:5a:
                    55:e3:6b:1e:12:e6:be:47:e3:76:11:79:ac:ee:18:
                    c6:6b:48:2d:36:10:38:d2:79:41:37:e6:55:a1:a3:
                    1b:dd:7a:20:49:cf:08:b1:09:8f:67:1b:5c:61:a5:
                    c0:ca:22:d4:35:56:af:75:09:68:21:7a:ef:e5:23:
                    cd:b4:b6:5c:12:12:2c:79:10:ef:d9:b8:bf:7f:99:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:66:B1:68:48:9A:B4:4B:4C:90:1B:79:21:16:D8:A3:CC:17:33:B7
            X509v3 Authority Key Identifier:
                keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/ZmaxaEiatEtMkBt5IRbYo8wXM7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.6.0/23
                IPv6:
                  2a13:da80::/29

    Signature Algorithm: sha256WithRSAEncryption
         81:61:df:05:97:b6:9a:b1:94:72:a8:87:9f:cb:32:40:e0:82:
         c5:51:d1:25:7e:67:72:83:82:c2:00:35:da:f7:4a:a5:16:d0:
         19:cb:a9:18:0f:f5:ad:df:d9:d2:69:36:d0:ad:eb:86:d2:bf:
         ee:61:da:ef:23:ba:62:cd:92:4f:e4:c2:c5:8f:62:21:0a:b9:
         04:fe:5b:9f:97:27:d1:0f:47:74:2d:0e:72:86:89:73:cd:04:
         d6:e1:77:5b:d9:28:4d:4b:aa:b1:8f:f0:ce:22:79:27:d7:2d:
         ea:bb:d9:95:89:3c:31:9f:08:88:b8:74:9e:9c:80:ea:bd:69:
         c3:b6:4d:c6:31:28:83:aa:c4:c5:f9:9c:a1:87:20:43:12:bd:
         0a:38:2a:97:b9:1d:7a:3a:97:89:00:57:88:3a:75:fa:b3:68:
         95:79:21:a0:e3:50:74:53:7b:8d:a6:94:76:3b:6f:31:12:33:
         35:ff:8a:f3:42:b5:a4:01:a2:28:18:35:24:c8:44:67:42:08:
         28:8c:ed:5b:9d:f2:9d:40:87:1a:cd:12:fd:61:a6:b8:a1:1f:
         30:52:43:8d:37:a1:ed:9d:1a:1b:94:b5:8d:a7:49:d8:4f:21:
         ba:75:5e:e7:47:86:50:45:3c:54:9d:b4:f8:5e:71:78:3f:e6:
         ee:bc:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----