Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa
File:                     E0dv9lCMLLHZ9AX_gZCBFficgtM.roa (raw, json)
Hash identifier:          FT1u0D2WU/ktwUs8TDlUfrhhL9KKlcEZgTxWHwtCXZ8=
Subject key identifier:   13:47:6F:F6:50:8C:2C:B1:D9:F4:05:FF:81:90:81:15:F8:9C:82:D3
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       018C59C3B1543FBC9383F79A1FD881F6079C
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa
Signing time:             Mon 11 Dec 2023 16:44:06 +0000
ROA not before:           Mon 11 Dec 2023 16:44:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202242
IP address blocks:        195.231.0.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:59:c3:b1:54:3f:bc:93:83:f7:9a:1f:d8:81:f6:07:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Dec 11 16:44:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13476ff6508c2cb1d9f405ff81908115f89c82d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:04:b2:29:6f:ea:44:f9:57:11:63:2e:1a:
                    16:74:aa:8a:2f:a1:87:ba:68:aa:2e:50:f5:1a:0c:
                    cd:ca:02:7c:29:2f:64:c4:0e:a4:ee:e5:7b:79:af:
                    78:e2:90:41:a1:17:f5:fa:70:0d:b1:aa:50:ee:33:
                    59:02:f7:4b:6b:18:97:8c:62:ce:cd:63:07:f1:4f:
                    41:c5:1d:6a:74:e7:7e:91:09:9b:ae:be:7e:e7:c4:
                    ed:8f:cf:05:10:22:be:91:a2:b8:ea:ee:53:eb:2f:
                    88:6b:da:15:13:66:e4:d9:5c:7a:5c:be:0b:85:4e:
                    f3:45:46:5a:3c:8e:16:9a:f3:3f:db:1e:e5:ef:d3:
                    95:20:1f:c0:58:28:3a:4b:7c:c8:a4:5a:e1:eb:9c:
                    f5:e8:de:6f:a5:9e:db:64:1c:8a:51:d0:c7:45:07:
                    e2:58:5b:8d:70:93:26:3f:b3:90:b4:5c:22:16:23:
                    4c:32:5a:a6:fe:53:e7:e8:f7:d6:bd:13:f0:c3:d7:
                    0d:99:51:94:f6:22:d1:be:bd:0d:06:e4:d6:5d:ae:
                    0d:7f:5e:1c:e2:c2:8a:8f:77:3f:44:72:5a:b5:ee:
                    81:4c:6c:92:30:fd:2e:c4:ef:92:3e:f2:de:3d:cc:
                    27:1b:d4:36:01:7c:2e:0a:1f:42:a1:23:d9:52:13:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:6F:F6:50:8C:2C:B1:D9:F4:05:FF:81:90:81:15:F8:9C:82:D3
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/E0dv9lCMLLHZ9AX_gZCBFficgtM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.231.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:5a:3d:a9:bf:a6:0d:63:b0:df:8b:5d:54:7a:8a:b4:72:
         c5:61:24:a8:fc:a1:fb:14:c8:22:66:dc:1a:23:ee:4a:9c:7c:
         91:be:b3:63:95:ed:07:90:37:c8:61:43:44:e5:f0:32:25:ac:
         0f:f2:12:59:40:cb:63:57:51:19:34:4a:03:aa:4e:69:cc:ae:
         42:d2:ae:c6:7e:27:60:0c:8e:99:0b:1e:8c:d1:84:5e:19:bb:
         55:43:42:07:0c:01:5e:23:a0:f3:03:c1:69:15:6e:e6:84:51:
         4e:aa:83:1b:af:d0:5e:e2:0e:99:41:a9:1f:58:ab:b8:72:d4:
         91:11:64:bb:f8:38:2f:5b:3c:af:8b:db:44:fc:bf:02:5c:92:
         05:b5:9b:ac:fc:36:56:39:d6:95:80:8a:62:a4:94:49:f0:82:
         c6:91:7f:83:6a:5e:88:cd:9e:f5:dd:ac:a5:1b:bb:cc:70:da:
         c2:44:e9:ca:de:f6:f2:54:b9:83:b9:66:38:45:da:e9:f7:e7:
         d8:24:21:1f:59:6a:6d:3c:30:d6:43:02:06:86:75:cc:0f:5c:
         c8:3b:8d:1e:4b:0d:ac:0c:c7:63:30:8e:b4:0f:2c:31:1b:46:
         59:d9:5f:62:30:8b:62:72:08:4d:dc:81:8f:b4:23:9d:63:2b:
         cf:2c:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----