Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa
File:                     Lfx8j3XbXwlxLSNjfgyncFgskSE.roa (raw, json)
Hash identifier:          hS5RpT6k62DdjTfhvPMsICpNI+LITkPHzzXwtJNOu50=
Subject key identifier:   2D:FC:7C:8F:75:DB:5F:09:71:2D:23:63:7E:0C:A7:70:58:2C:91:21
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       0189720DAEE047C3EE7FD3A12A566F0D2551
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa
Signing time:             Thu 20 Jul 2023 06:47:26 +0000
ROA not before:           Thu 20 Jul 2023 06:47:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     265919
IP address blocks:        93.119.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:0d:ae:e0:47:c3:ee:7f:d3:a1:2a:56:6f:0d:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul 20 06:47:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dfc7c8f75db5f09712d23637e0ca770582c9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:98:6b:99:75:4d:30:13:4f:4f:7e:92:83:
                    b2:f8:ca:a4:f5:23:c7:24:3c:eb:c9:34:de:65:5c:
                    09:96:8f:33:d0:4b:17:e6:76:5a:0f:ec:64:9d:09:
                    6b:46:ab:b7:9b:ba:ca:e7:ce:9b:f2:58:fd:ad:20:
                    50:17:15:a9:d3:8e:3e:ea:52:b8:7c:77:9d:e4:a4:
                    21:73:48:6e:b0:f0:9f:c2:5a:f1:5d:cb:fb:a3:36:
                    35:6a:cb:f9:86:2a:40:23:e2:d8:ab:5b:73:4c:a9:
                    44:91:83:45:c3:e5:16:65:18:50:86:28:b7:6c:a0:
                    db:04:1b:26:d1:14:ea:23:d3:87:c9:ba:f6:a0:d6:
                    f1:8e:d4:f4:b2:f2:9d:31:a4:18:ae:fa:83:25:76:
                    f7:10:c0:b4:4f:8b:18:cf:ec:25:8c:ea:96:1b:b9:
                    f7:d7:35:cb:14:f6:b6:c0:aa:15:79:95:5b:79:6d:
                    e5:1a:74:b6:2d:bc:d2:2d:9b:be:4f:27:b4:3f:d3:
                    61:e8:8a:d3:58:6d:ef:d0:7b:68:2c:9e:e2:37:ef:
                    d6:19:4e:4d:97:cf:f4:6d:8b:49:1c:2c:f2:de:4d:
                    a9:0b:c7:50:ea:f1:10:71:ef:1a:4b:90:72:3d:51:
                    08:b4:a6:02:dc:01:32:27:4c:f9:c1:b1:01:eb:a9:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FC:7C:8F:75:DB:5F:09:71:2D:23:63:7E:0C:A7:70:58:2C:91:21
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:40:d7:78:e2:78:02:65:ab:71:67:70:0c:5c:e2:54:3b:12:
         47:c5:f3:0a:f3:30:9a:30:b3:07:a1:26:35:51:67:79:af:ac:
         c5:0e:36:3b:9b:f5:67:8e:ce:ea:9e:92:ea:fe:1e:10:0d:e3:
         74:d0:ba:16:55:8b:02:73:f2:21:e7:a6:9b:78:ce:8d:c5:6e:
         fc:2f:0e:b8:3b:29:75:28:73:98:b1:dc:6a:71:5a:02:d7:ad:
         78:38:12:99:f0:c9:45:9d:9f:60:86:1c:c6:5f:85:a3:ce:5b:
         7f:34:88:f4:99:63:76:23:a2:c8:d0:ec:be:69:2a:89:d9:52:
         a7:8b:ba:b4:fa:ea:b4:9a:65:91:36:07:af:ba:a2:a6:5c:da:
         1d:49:35:86:bb:85:a2:44:e2:cc:31:6d:00:d9:2f:b6:7a:d6:
         58:0d:37:b7:f4:45:98:ed:e7:9d:be:eb:58:98:6d:f0:2e:19:
         4c:d5:93:e9:e5:9b:d3:82:ba:a8:f9:d0:c9:43:af:32:2a:f1:
         88:1a:11:ba:05:42:3e:5d:cc:c3:0f:a0:ef:ed:d4:c0:69:47:
         70:af:4a:b8:c4:c2:ba:4f:73:5b:cd:ca:bf:80:23:d3:93:73:
         9c:35:72:5a:1f:bb:9c:9b:36:e3:33:a8:2b:5e:8a:75:c8:fe:
         ab:9b:35:12
-----BEGIN CERTIFICATE-----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