Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fQuXAcIs1ijcmj5SUQsDFMIhKlk.roa
File:                     fQuXAcIs1ijcmj5SUQsDFMIhKlk.roa (raw, json)
Hash identifier:          +mFGwpJcY6IduDBOL5iFCtwD2tRQmOyg/poLSB+rtNk=
Subject key identifier:   7D:0B:97:01:C2:2C:D6:28:DC:9A:3E:52:51:0B:03:14:C2:21:2A:59
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018A98141FBE68F1F4AA7DAA945F4C1E5370
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fQuXAcIs1ijcmj5SUQsDFMIhKlk.roa
Signing time:             Fri 15 Sep 2023 09:02:50 +0000
ROA not before:           Fri 15 Sep 2023 09:02:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15133
IP address blocks:        213.175.80.0/24 maxlen: 24
                          2a02:16d8:103::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:14:1f:be:68:f1:f4:aa:7d:aa:94:5f:4c:1e:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Sep 15 09:02:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d0b9701c22cd628dc9a3e52510b0314c2212a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:1c:ff:4a:f5:f5:15:38:ce:ea:14:30:c2:
                    a5:a1:ae:84:8f:dc:bc:4a:f1:cf:75:af:ac:79:35:
                    80:bb:c4:1b:6b:57:bb:aa:18:9d:fe:b4:ec:3a:a9:
                    1c:7c:3f:fc:f7:9f:2d:58:89:af:d0:24:41:e6:3d:
                    07:ea:a6:e3:c5:bb:e1:a1:c0:9d:24:6e:8c:16:16:
                    b9:31:0f:7e:af:87:c6:86:8c:c0:57:7b:32:d0:63:
                    62:7b:a7:50:16:81:6d:62:9c:c4:90:5c:84:65:82:
                    cf:5d:7e:84:bf:6b:bc:5d:02:04:d6:85:0e:77:c0:
                    8d:fe:35:d8:88:19:63:fb:68:12:15:0c:c6:71:cf:
                    7f:90:9a:8e:60:da:e3:61:78:76:3b:ab:8b:46:a0:
                    d2:01:4e:ff:62:9c:0e:7a:7e:2c:c1:96:45:3f:f8:
                    c4:5f:f6:1c:34:55:9d:98:64:6c:23:e4:62:34:76:
                    0e:81:90:27:b7:54:2a:9e:8c:39:7b:af:fc:d6:63:
                    09:8c:de:8e:e5:29:74:01:5c:a5:ef:19:9b:ca:77:
                    8b:e7:88:1b:60:f1:2f:0b:ef:18:c1:83:8a:24:4e:
                    1c:11:85:e4:33:a3:24:6c:0a:55:d8:c1:d9:38:55:
                    59:85:5f:83:65:de:a6:9f:3c:92:ab:8a:df:c0:f7:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:97:01:C2:2C:D6:28:DC:9A:3E:52:51:0B:03:14:C2:21:2A:59
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/fQuXAcIs1ijcmj5SUQsDFMIhKlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.175.80.0/24
                IPv6:
                  2a02:16d8:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:59:e1:f8:ab:6a:0b:c4:f2:13:59:69:83:2e:bf:00:cc:28:
         a4:7a:97:c9:64:77:9f:f9:c4:0e:8e:ee:27:c7:2e:fa:ac:75:
         5e:58:9e:af:50:f5:3a:e5:1e:24:ad:fd:cd:d6:43:bd:30:ba:
         94:92:af:51:20:59:9c:6e:ed:4b:87:17:9a:87:8b:27:e3:39:
         6c:54:34:86:88:3f:a2:32:5e:77:56:e0:88:86:cd:3d:f0:d8:
         0c:91:b3:30:0c:56:9e:0b:8e:54:05:8d:91:7f:0b:f7:1a:75:
         a8:4c:d0:34:5d:b9:61:42:39:51:9a:9b:20:c7:91:7e:4f:0e:
         a4:a1:c9:0a:37:4f:17:35:b9:24:36:08:5b:e6:fb:0e:e8:f8:
         37:7e:44:51:cc:ad:8e:5a:60:4e:48:bb:d6:a6:2f:c8:a8:8d:
         c7:f5:74:4a:c3:08:8a:ce:2e:bc:9d:3d:85:ea:92:77:b0:44:
         ee:f7:ec:23:d0:1a:ae:ad:36:50:64:42:95:55:9a:7a:4e:1a:
         a3:39:3f:2c:17:5e:26:ef:3c:14:02:fb:72:c9:96:ce:90:0d:
         88:c9:49:3a:01:34:f4:01:98:bc:eb:97:92:5f:a1:e9:19:37:
         ea:60:1a:24:60:e1:a5:62:24:c0:75:8b:97:39:4a:49:57:d2:
         07:ff:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----