Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/15FAqCvGG8-gbDR6RQOQdOQeiXg.roa
File:                     15FAqCvGG8-gbDR6RQOQdOQeiXg.roa (raw, json)
Hash identifier:          ozJ0ODHOtqm6vpoEFkDKS0BGHain5DzO21geo3iRjLY=
Subject key identifier:   D7:91:40:A8:2B:C6:1B:CF:A0:6C:34:7A:45:03:90:74:E4:1E:89:78
Certificate issuer:       /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial:       0187B35DCCFA5F711829158BCF3119F69F9F
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/15FAqCvGG8-gbDR6RQOQdOQeiXg.roa
Signing time:             Mon 24 Apr 2023 13:04:41 +0000
ROA not before:           Mon 24 Apr 2023 13:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        93.93.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:5d:cc:fa:5f:71:18:29:15:8b:cf:31:19:f6:9f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
        Validity
            Not Before: Apr 24 13:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d79140a82bc61bcfa06c347a45039074e41e8978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:26:63:70:b8:69:93:06:2e:1b:c5:9e:39:ca:
                    6a:cb:f3:c8:0d:8d:12:c9:98:67:76:f3:47:b2:28:
                    e0:1b:c0:8c:7c:50:f5:7b:a0:2f:14:8d:61:da:ef:
                    95:45:04:71:49:38:9e:4e:54:cd:05:96:30:ac:93:
                    26:c1:b1:51:3f:f1:f8:7f:c5:7c:99:50:36:ee:1a:
                    c0:e8:6e:41:76:cf:ea:2a:0b:b1:ce:8a:51:98:8d:
                    f1:1f:26:c1:d5:02:c0:68:a1:95:46:a7:64:e1:af:
                    fb:20:33:22:3e:1f:97:30:ab:1a:a0:b6:a9:55:01:
                    37:39:c5:a5:be:a3:c5:e4:f5:14:4b:ae:e5:11:7c:
                    ba:21:27:f6:9e:ee:c7:72:89:a0:32:31:16:b0:a5:
                    b4:88:4c:b2:2d:a5:3e:6a:bc:7d:5e:95:52:44:38:
                    73:11:29:5d:75:5a:31:ff:1e:d5:a7:04:f4:61:fe:
                    41:2f:28:cd:5f:60:7d:51:63:e6:83:f4:3a:2c:29:
                    98:e3:5a:e4:b7:24:98:59:00:96:e7:76:56:48:a4:
                    d5:eb:c2:fd:84:3e:d8:ba:ec:ef:01:38:b7:c6:25:
                    e4:26:a2:39:9f:c1:3a:70:52:ac:25:a8:da:8e:e5:
                    be:5e:fb:d9:ed:31:87:c2:93:07:ae:83:7a:b4:d9:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:40:A8:2B:C6:1B:CF:A0:6C:34:7A:45:03:90:74:E4:1E:89:78
            X509v3 Authority Key Identifier:
                keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/15FAqCvGG8-gbDR6RQOQdOQeiXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:6b:cb:61:78:2e:bf:e0:57:5d:70:a7:0a:a1:cf:dc:ce:1f:
         dc:97:a1:28:59:ed:26:b9:d9:2b:98:fd:81:6d:a3:38:76:d7:
         67:03:80:96:b8:b7:cc:62:b0:29:89:16:91:7b:f0:00:df:dc:
         47:45:a6:27:d1:c1:4b:f2:fe:39:8a:8c:ee:b0:5d:b8:ff:9a:
         2f:e5:05:95:31:d7:11:79:f1:04:1c:89:5a:f3:9f:45:0f:4d:
         17:f7:f4:57:9e:ed:06:9a:85:c1:8c:d9:8d:d3:df:34:86:4a:
         c7:12:8c:20:53:11:08:02:b0:a2:f8:de:fa:ff:2e:9b:3e:7f:
         84:f6:b0:c7:f7:bb:10:29:c1:e8:0a:c2:d7:ae:ba:ad:72:3f:
         71:0c:31:b2:6d:06:f4:89:fe:0e:d7:59:3e:b6:1a:13:4a:8b:
         ae:36:f3:95:d1:bf:e2:68:c8:5a:94:41:6b:50:55:e3:1a:e2:
         db:34:bf:d0:69:37:d1:b7:46:26:e1:d1:06:73:b9:19:78:d3:
         11:f1:cf:96:e5:af:7d:c8:8b:64:1e:d9:10:35:17:8a:c8:ad:
         eb:03:94:82:ff:bb:fe:db:6c:b8:94:8c:92:15:93:2c:67:40:
         cf:b6:7e:53:99:77:cc:61:95:92:5a:06:d2:34:2c:99:8f:9b:
         05:1b:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----