Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/BBbScyKiizWk1g2lvHN4Biv_ZRU.roa
File:                     BBbScyKiizWk1g2lvHN4Biv_ZRU.roa (raw, json)
Hash identifier:          q+YcPwrDXSd4C1F5OcKs+rUV59sBNKOcNgQQvFGtIrM=
Subject key identifier:   04:16:D2:73:22:A2:8B:35:A4:D6:0D:A5:BC:73:78:06:2B:FF:65:15
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       018A0876EA6EA1383C6150A53F1689649A1D
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/BBbScyKiizWk1g2lvHN4Biv_ZRU.roa
Signing time:             Fri 18 Aug 2023 11:45:25 +0000
ROA not before:           Fri 18 Aug 2023 11:45:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213220
IP address blocks:        94.199.4.0/24 maxlen: 24
                          2a13:3d84::/30 maxlen: 30
                          2a13:3d82::/32 maxlen: 32
                          2a13:3d80::/29 maxlen: 29
                          2a13:3d80:8000::/33 maxlen: 33
                          2a13:3d80::/48 maxlen: 48
                          2a13:3d83::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:08:76:ea:6e:a1:38:3c:61:50:a5:3f:16:89:64:9a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Aug 18 11:45:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0416d27322a28b35a4d60da5bc7378062bff6515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:ca:02:d0:f7:70:df:65:15:d6:ef:71:cc:
                    36:7d:81:25:61:3a:30:fd:72:b7:83:3f:93:4a:6b:
                    68:4d:38:95:11:9c:0a:e2:7d:e9:18:d5:7a:c5:73:
                    98:8f:b3:bc:a3:ef:78:33:4b:72:5a:b8:6c:3a:b7:
                    5a:ff:8c:54:37:70:b1:c7:cf:69:28:39:04:c9:3e:
                    e9:c3:35:fb:b8:2b:6a:e9:01:96:62:4e:27:fa:a7:
                    a3:69:c6:6b:61:92:26:41:88:75:07:62:09:0c:f0:
                    bb:19:02:cd:05:45:43:4d:8d:9b:1d:ce:46:18:18:
                    c1:b8:4d:dc:bb:d8:89:33:32:16:39:13:ae:02:7d:
                    18:e7:44:40:55:27:b9:df:ed:90:74:43:3c:6b:56:
                    b9:89:d8:fd:dc:5d:e3:30:3a:9f:ad:e1:cb:0e:b6:
                    8a:5c:8b:3e:f8:61:01:c1:31:23:be:78:38:33:a3:
                    c0:01:25:be:fa:1b:0d:c2:7c:31:31:b0:26:c0:f3:
                    58:9b:4a:34:74:c4:a3:31:40:b0:04:6a:22:95:80:
                    9f:a5:88:b6:8a:c5:25:1f:08:dd:91:c5:f8:5a:83:
                    e0:d4:94:52:a0:e5:c0:6d:87:62:1c:70:1f:0c:22:
                    80:ec:84:d6:9f:ae:bb:78:11:1d:e5:1f:8d:d7:c6:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:D2:73:22:A2:8B:35:A4:D6:0D:A5:BC:73:78:06:2B:FF:65:15
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/BBbScyKiizWk1g2lvHN4Biv_ZRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.4.0/24
                IPv6:
                  2a13:3d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:0b:6d:f5:66:f8:6e:6b:aa:05:d6:1e:1f:d2:55:9d:b1:
         1a:e1:1a:84:ea:6d:c2:4f:7e:28:d5:0e:85:79:1f:01:de:64:
         cd:91:b9:ab:02:75:ac:d0:36:68:62:1a:0d:59:99:91:55:1b:
         0f:b0:09:a9:d8:2d:34:d6:8a:ea:30:db:60:69:75:ab:a4:18:
         77:64:61:3b:72:18:15:f0:5c:64:67:b1:2e:47:6c:90:3a:15:
         c1:a3:01:35:49:7f:0b:22:98:5c:e5:1e:ca:44:3e:dd:ff:10:
         11:8b:b8:49:c6:cb:34:90:b2:90:c5:fc:dc:b3:a0:02:11:11:
         57:2a:7f:17:04:15:e0:e0:90:72:57:3a:4c:d3:c6:b6:9a:4c:
         e2:03:20:73:46:52:a7:08:ac:5c:27:a0:fa:1e:b5:7c:22:ee:
         79:a8:f9:3e:59:f6:9c:19:f3:5d:03:40:39:bb:4d:e1:a9:23:
         1c:e0:ce:65:ae:cd:d6:5e:95:2f:84:18:60:9c:ed:7a:ce:50:
         8f:19:b8:be:b0:29:a3:df:6b:e0:33:ca:97:ea:cc:1c:b4:40:
         85:4f:48:29:29:e5:d6:a1:90:cb:54:22:c0:4a:20:0d:d2:c5:
         c4:c8:8c:e6:98:e2:f9:de:9b:ac:41:7c:e1:a6:92:f9:49:c6:
         7c:1e:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----