Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa
File:                     huJh1qEA8s2FxOuknvHJ0KfRIR4.roa (raw, json)
Hash identifier:          4rupOPutIPe1FgGWOhR4QgJy1+eckKzaNiQ5tmeslfE=
Subject key identifier:   86:E2:61:D6:A1:00:F2:CD:85:C4:EB:A4:9E:F1:C9:D0:A7:D1:21:1E
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       01856BB7DE278991599DEAD5F80563E71FC9
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa
Signing time:             Sun 01 Jan 2023 05:04:50 +0000
ROA not before:           Sun 01 Jan 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212640
IP address blocks:        193.163.54.0/24 maxlen: 24
                          2a10:6b40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:b7:de:27:89:91:59:9d:ea:d5:f8:05:63:e7:1f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: Jan  1 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=86e261d6a100f2cd85c4eba49ef1c9d0a7d1211e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:00:71:f6:51:4f:73:17:84:c5:39:94:27:
                    69:80:78:5b:82:a6:8f:37:56:03:f9:44:5d:63:80:
                    9b:23:38:31:45:b8:d4:7a:52:ff:4d:d8:f1:07:eb:
                    6f:2f:4e:eb:67:09:09:df:e7:7b:8c:05:d6:17:57:
                    ff:08:bc:0d:9d:7d:27:05:f0:f8:36:cd:0c:8c:36:
                    9a:de:0d:b1:a4:0e:1c:37:43:b6:06:77:b4:0f:e4:
                    e9:f7:28:1e:3d:b4:52:c9:b4:41:dc:70:15:1c:df:
                    b9:69:00:6e:62:98:dd:09:85:e5:67:23:c5:0c:78:
                    bc:a9:16:d2:e7:be:48:a1:d7:12:cc:65:fa:dd:86:
                    db:12:3c:a4:1b:62:1c:f0:cc:48:25:cf:18:a5:94:
                    5d:63:86:0a:23:64:e4:70:db:d9:45:8f:16:d8:d4:
                    14:5f:b6:55:42:0c:95:eb:8f:60:b1:5b:92:5d:b3:
                    66:e3:97:7d:73:80:fc:d0:d4:aa:83:ea:4c:25:43:
                    3e:9b:51:49:f0:34:e2:12:ad:3e:7e:a7:f0:7a:07:
                    cd:f4:48:77:f7:27:54:d4:de:cf:77:76:68:60:d8:
                    47:17:21:e2:b8:68:bc:e1:b0:a7:f7:64:ba:cf:65:
                    67:d6:ef:5b:67:48:f5:4e:40:40:ac:97:c4:11:93:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:61:D6:A1:00:F2:CD:85:C4:EB:A4:9E:F1:C9:D0:A7:D1:21:1E
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.54.0/24
                IPv6:
                  2a10:6b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:08:37:b7:7f:a9:a5:ee:1e:15:c8:99:cb:13:32:31:a3:
         50:55:27:ba:9c:87:f7:51:51:e5:63:45:b4:a9:3f:80:24:ea:
         ea:8c:82:81:f3:f1:10:59:38:35:ee:03:4e:4e:29:c8:91:d4:
         fc:0b:b0:15:6b:0d:79:7f:96:56:22:84:9b:5f:0e:7c:6d:25:
         0f:1d:06:0d:e8:13:30:2e:d7:95:77:b9:bb:ab:8f:1a:a8:75:
         dc:eb:83:55:a0:1e:ac:58:b5:3f:aa:fd:4e:fa:8f:27:71:b3:
         b0:7c:dd:67:f3:44:c3:88:05:9f:ba:2c:66:74:29:82:95:98:
         c6:9a:68:62:e4:b0:b9:a9:c4:d2:02:cf:50:38:47:81:a3:c2:
         02:08:28:1c:6b:fb:96:43:a6:76:05:26:ef:09:36:d4:ca:a0:
         55:f5:eb:dc:a0:4c:fb:0f:6a:ae:8e:ff:18:d5:22:05:87:e8:
         f0:a0:ef:bc:38:df:96:79:7f:9d:c6:b6:f2:d9:f9:c7:73:1d:
         5a:5e:5e:4e:7c:22:ed:fe:70:77:08:2f:a0:2e:0b:b4:3f:1b:
         20:be:af:8d:53:b9:90:b9:f6:43:4c:b3:a8:e6:ee:d4:5c:e9:
         63:ca:61:7e:44:32:2f:c2:89:a8:3c:c9:3e:75:32:b8:25:dc:
         d1:a1:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----