Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/E6qRjwT0_ejUwiQ9mQFMRVMgeYE.roa
File:                     E6qRjwT0_ejUwiQ9mQFMRVMgeYE.roa (raw, json)
Hash identifier:          tmTCY4ZU27Kp2RawQG4iMLihV6RvDqa3D/BSdVLFBgk=
Subject key identifier:   13:AA:91:8F:04:F4:FD:E8:D4:C2:24:3D:99:01:4C:45:53:20:79:81
Certificate issuer:       /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial:       01856C53D891ED201B47C4998501C2CBF37C
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/E6qRjwT0_ejUwiQ9mQFMRVMgeYE.roa
Signing time:             Sun 01 Jan 2023 07:55:12 +0000
ROA not before:           Sun 01 Jan 2023 07:55:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        193.132.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:d8:91:ed:20:1b:47:c4:99:85:01:c2:cb:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
        Validity
            Not Before: Jan  1 07:55:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13aa918f04f4fde8d4c2243d99014c4553207981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:5a:a2:a5:99:f5:d2:76:71:65:64:76:9f:
                    b7:62:24:96:3e:2b:45:07:cc:1d:51:fb:c5:49:75:
                    aa:8e:4b:c9:b0:b1:c1:46:5f:5f:6b:7c:66:09:6d:
                    3d:09:7c:6c:07:ab:74:59:93:f5:42:d5:82:4d:d5:
                    0e:db:0c:31:f3:53:89:1f:ec:9d:c0:45:12:8a:f1:
                    0f:2e:23:8b:ba:f7:fa:d9:4e:3b:54:96:09:92:95:
                    d1:78:70:88:1a:c0:1e:9a:ee:18:03:9a:8b:9e:46:
                    14:bf:d7:ed:df:62:79:1d:e8:9f:cf:99:66:77:24:
                    a9:41:71:7f:c1:f6:69:ac:2e:49:38:1a:c9:08:4e:
                    27:c7:bc:50:5b:ba:a6:af:9e:2b:9b:eb:2a:10:98:
                    2f:1e:1e:99:3a:d5:4d:42:03:4f:23:78:43:d2:31:
                    5f:cb:0f:b9:80:42:13:d9:ed:04:6e:4e:73:e4:5c:
                    6e:26:ed:c5:06:f4:74:aa:8e:7c:ee:85:dc:9e:4d:
                    93:af:8c:74:7a:fc:23:f7:88:3f:cd:2f:1b:31:0a:
                    ec:ba:2c:11:5c:26:ce:fc:b8:76:18:50:96:eb:ff:
                    37:2c:1d:38:c2:a4:e3:79:30:4d:b2:c4:de:f9:15:
                    8c:3b:73:53:22:21:15:b3:36:97:a4:4b:d7:66:99:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:91:8F:04:F4:FD:E8:D4:C2:24:3D:99:01:4C:45:53:20:79:81
            X509v3 Authority Key Identifier:
                keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/E6qRjwT0_ejUwiQ9mQFMRVMgeYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.132.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:62:f9:d7:45:e1:26:4f:82:4c:5d:f1:e5:02:2a:b4:9d:5b:
         82:62:95:f4:43:c2:14:66:7e:74:b9:2f:bd:33:9c:2c:e0:cb:
         c7:8b:e0:b0:dc:97:c4:cc:44:64:12:da:41:f8:ad:b3:68:9f:
         3e:80:81:df:f4:f3:1a:9d:0a:ec:c3:9c:e8:a3:bc:c2:26:d5:
         05:6b:3e:fb:49:07:26:31:e9:ed:2b:e0:80:d7:ac:de:df:ab:
         c9:94:61:ea:f9:e1:30:59:78:3c:8d:5c:6c:8e:7c:ff:12:c4:
         06:3c:09:2e:9d:2d:0d:38:97:98:0d:cd:02:cf:c8:90:81:de:
         f6:a6:2b:a6:a9:56:6a:1c:32:73:b7:b1:51:47:59:00:89:e7:
         0c:35:c3:90:1a:79:1a:f2:5f:1b:8b:c9:5a:2c:22:2c:28:16:
         55:7c:ef:57:44:8a:9a:20:e2:dc:93:06:57:46:4b:7e:c7:05:
         12:97:d0:fd:da:0d:cf:97:61:87:65:c3:d8:fc:b3:37:18:21:
         18:54:37:0b:c9:56:8a:38:87:50:9b:de:1f:5c:1f:35:11:58:
         11:7a:02:b8:d0:ca:b7:94:78:8f:33:e5:81:17:a8:8d:21:42:
         b0:a0:1d:85:64:27:c2:0c:bc:aa:09:8a:c9:32:f5:aa:dc:68:
         02:c5:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----