Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/F4LgRQ8GR83Bfv-dyqkiGonWuS0.roa
File:                     F4LgRQ8GR83Bfv-dyqkiGonWuS0.roa (raw, json)
Hash identifier:          e3qNhXc7vwe47ZDn1J71I4RPMFaQcozcJ05IE0PT6Z0=
Subject key identifier:   17:82:E0:45:0F:06:47:CD:C1:7E:FF:9D:CA:A9:22:1A:89:D6:B9:2D
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       018B8095B245DCCCFE4AC6CD2CCBC1369B57
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/F4LgRQ8GR83Bfv-dyqkiGonWuS0.roa
Signing time:             Mon 30 Oct 2023 12:36:15 +0000
ROA not before:           Mon 30 Oct 2023 12:36:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        185.76.180.0/24 maxlen: 24
                          2a03:5120::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:80:95:b2:45:dc:cc:fe:4a:c6:cd:2c:cb:c1:36:9b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Oct 30 12:36:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1782e0450f0647cdc17eff9dcaa9221a89d6b92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e0:d9:0a:59:41:76:af:1d:87:91:98:df:b1:
                    49:03:6c:49:c1:26:16:81:e5:e5:ac:9f:37:9e:57:
                    11:8c:28:96:14:ec:8c:f1:54:13:38:6d:9e:a6:81:
                    45:7c:68:bd:c9:76:07:e4:c1:ef:49:96:0c:fc:e9:
                    7b:e3:99:1c:01:fb:3d:37:21:41:b6:26:1d:14:ba:
                    f5:4a:af:fc:dd:f6:63:3b:f5:57:63:85:1c:9a:88:
                    21:41:f4:47:5f:bb:86:52:26:7e:f1:d5:78:98:86:
                    f4:98:83:c2:6a:4c:33:67:b6:01:2f:59:0d:ec:44:
                    72:a4:96:5a:7e:45:ee:17:94:71:fd:7b:99:1c:52:
                    60:8e:08:8d:05:35:eb:6e:e3:25:2b:be:4f:6f:d0:
                    cf:ce:93:60:eb:12:96:46:c1:2c:bb:3f:da:3f:85:
                    bd:93:7f:8f:31:dc:4b:b7:6e:30:3f:64:94:61:b0:
                    ef:29:86:3b:97:cc:96:ed:b0:9e:94:d9:69:11:12:
                    6e:2c:dd:73:76:2e:59:49:da:21:33:92:fc:5e:61:
                    eb:27:72:1c:f1:a5:29:84:18:b8:aa:65:6d:21:bf:
                    0f:50:2c:a5:d8:38:b1:56:51:f3:d5:99:d5:ff:f8:
                    fd:48:40:e0:ae:f8:db:f3:de:b2:f7:44:e6:6c:c7:
                    5b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:E0:45:0F:06:47:CD:C1:7E:FF:9D:CA:A9:22:1A:89:D6:B9:2D
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/F4LgRQ8GR83Bfv-dyqkiGonWuS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.76.180.0/24
                IPv6:
                  2a03:5120::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:cd:10:74:99:f7:cc:c6:29:e8:d0:9e:df:2d:0d:fb:5d:ca:
         4b:f9:24:0b:34:a3:74:16:46:80:ae:be:68:84:26:62:6e:64:
         50:13:19:49:d5:5c:c0:42:f7:3c:57:f1:56:e0:cc:46:99:ea:
         40:1b:ad:fd:c1:65:3f:10:1d:69:a1:21:a7:49:60:77:32:24:
         b2:70:23:ea:6e:bf:c9:ad:ae:c1:d8:80:c5:69:eb:94:5f:82:
         4f:12:fa:b1:d6:e4:84:ef:5c:6d:56:f5:aa:3f:9b:1a:9f:5c:
         e4:2a:05:f2:22:99:32:d8:cc:a3:01:7a:16:ab:75:64:31:03:
         2b:f1:1b:2c:f2:18:0c:4c:34:a7:e2:75:2d:46:f5:2e:be:6d:
         f0:8f:69:16:16:00:d4:3a:ac:ea:b1:eb:c8:ab:c3:c1:aa:c5:
         20:c5:65:69:01:16:7a:bd:b9:d0:39:74:7c:8f:0c:8e:39:92:
         7c:60:79:b9:c3:a2:62:71:6c:ee:03:12:2b:3c:b1:c8:a7:5a:
         74:86:99:64:f3:03:67:56:2d:d6:01:93:5d:74:ef:41:4e:06:
         70:f6:54:6a:8c:d5:12:00:ee:85:8a:5f:1f:51:7a:eb:d2:42:
         36:39:41:bd:59:89:99:f9:26:b0:af:d9:22:97:c9:b8:db:2c:
         38:c6:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----