Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/eJQOw7EBvP9cTeHjWnw7rojKNy8.roa
File:                     eJQOw7EBvP9cTeHjWnw7rojKNy8.roa (raw, json)
Hash identifier:          DWbbhUdX5QNBRvPo3WT/MNedB1Dx2FYFZxNj9Xbo37A=
Subject key identifier:   78:94:0E:C3:B1:01:BC:FF:5C:4D:E1:E3:5A:7C:3B:AE:88:CA:37:2F
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       018BF863F22821F1149B257F946CB8628DCB
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/eJQOw7EBvP9cTeHjWnw7rojKNy8.roa
Signing time:             Wed 22 Nov 2023 18:56:21 +0000
ROA not before:           Wed 22 Nov 2023 18:56:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1299
IP address blocks:        185.154.150.0/23 maxlen: 23
                          2a14:3b00:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f8:63:f2:28:21:f1:14:9b:25:7f:94:6c:b8:62:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Nov 22 18:56:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78940ec3b101bcff5c4de1e35a7c3bae88ca372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:72:5d:ce:da:a9:25:03:d8:c7:dc:bb:94:
                    b7:15:e4:d4:df:92:82:ec:47:a3:25:f0:d4:6a:f4:
                    51:75:ed:9b:c0:ec:3c:c1:3e:ee:31:4b:07:f0:d0:
                    c6:cd:8d:1f:e3:de:6c:22:e3:23:01:f6:0f:96:bc:
                    a4:b1:fd:37:8c:76:f6:1f:4c:3e:68:b1:da:6a:f7:
                    b2:86:f9:75:79:6e:60:66:16:fb:27:df:18:55:7e:
                    ca:88:b9:0f:6c:90:67:46:1c:53:49:9c:82:b5:96:
                    f0:f8:df:b9:79:37:32:ad:c9:3a:1c:71:65:1b:ff:
                    50:8a:93:5f:0e:ae:18:aa:8f:a0:c0:79:5a:b7:da:
                    7c:9c:61:f6:48:91:fe:8e:71:46:bf:31:76:fe:af:
                    27:66:f5:90:fa:2e:c2:35:50:4f:52:db:d1:95:42:
                    58:71:84:41:50:d0:2f:fe:43:ee:41:cd:61:08:95:
                    2b:f5:3b:b8:55:a7:33:52:19:4e:ab:8e:91:53:8e:
                    1a:e5:40:fe:da:18:92:79:8a:60:fa:ed:46:0b:29:
                    bc:f1:df:32:89:52:eb:1f:20:fd:30:87:2c:cf:70:
                    e2:b6:47:3b:db:b8:2f:0d:a1:6f:19:3f:0b:b9:13:
                    bc:3f:d3:e8:e4:86:68:09:72:36:b4:b9:6a:08:cb:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:0E:C3:B1:01:BC:FF:5C:4D:E1:E3:5A:7C:3B:AE:88:CA:37:2F
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/eJQOw7EBvP9cTeHjWnw7rojKNy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.150.0/23
                IPv6:
                  2a14:3b00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:06:fe:88:55:24:38:45:26:1f:bf:06:61:8c:50:6b:2e:
         c6:e1:ea:59:86:30:8f:e4:09:3e:c1:a3:69:42:ef:69:fa:5f:
         d4:63:87:0c:60:f9:1e:78:21:6e:02:4b:a7:8c:7e:cc:7b:93:
         27:6a:94:86:23:fd:22:d7:50:9a:74:2e:06:ab:df:9f:cb:dd:
         6b:88:80:51:23:88:6d:e5:41:2a:ba:11:b0:2f:c8:e4:a9:71:
         48:62:d7:27:6a:b9:49:a4:26:21:b9:0d:a9:31:8a:8e:4d:77:
         e3:d1:6d:5b:74:22:39:1b:58:38:a4:b1:e7:e0:44:d7:d9:92:
         9f:5c:c1:07:c0:65:d6:cb:18:92:23:48:69:f6:96:3c:5c:05:
         c6:83:d4:01:73:52:fd:3a:e0:cf:ff:56:1b:41:28:29:b5:e8:
         ea:e5:a5:1f:31:e4:8a:af:0c:a3:03:59:7c:63:d9:dd:b5:3c:
         85:39:eb:c4:af:ac:99:5e:c4:39:b3:2e:04:98:ef:f5:49:f6:
         23:9e:a4:eb:ba:ae:5c:8b:10:6e:ef:77:31:fb:e8:59:3b:e7:
         03:98:e2:13:40:88:e6:d6:14:0c:27:85:67:a0:9f:ab:bc:26:
         91:cc:40:d2:2a:48:86:08:4f:77:76:3f:0a:ed:57:c6:10:4a:
         eb:df:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----