Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4vFhg_lELqByOA5B8ETzyd_EoDI.roa
File:                     4vFhg_lELqByOA5B8ETzyd_EoDI.roa (raw, json)
Hash identifier:          u0Gpo+/jIjxnG1MMxWzyqJj2q90d9BWQkSKG0dlt2Ro=
Subject key identifier:   E2:F1:61:83:F9:44:2E:A0:72:38:0E:41:F0:44:F3:C9:DF:C4:A0:32
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018588BC5553ED26B976F457C4522C57218C
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4vFhg_lELqByOA5B8ETzyd_EoDI.roa
Signing time:             Fri 06 Jan 2023 20:18:41 +0000
ROA not before:           Fri 06 Jan 2023 20:18:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57460
IP address blocks:        193.43.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:88:bc:55:53:ed:26:b9:76:f4:57:c4:52:2c:57:21:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jan  6 20:18:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e2f16183f9442ea072380e41f044f3c9dfc4a032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:56:18:3b:ba:eb:ba:5f:a4:99:54:d8:87:
                    cf:17:ed:ab:29:79:db:56:52:da:ce:bd:b1:4e:3f:
                    91:2e:64:bf:c3:dd:e5:38:9e:8d:da:4d:74:b8:42:
                    2d:62:55:49:9c:cf:1e:9e:a4:91:ec:eb:81:f7:3d:
                    c9:60:0a:5f:7f:b3:80:04:b0:b4:57:9e:82:c6:53:
                    74:02:ab:27:22:31:2e:50:a4:3a:a9:c9:cd:9d:ee:
                    09:bc:4f:9a:c0:9a:c0:a4:93:19:1c:69:73:5c:6f:
                    f3:dc:d2:ad:ef:a2:32:46:ac:dd:c5:4c:e7:0a:e8:
                    24:d7:9d:5c:d3:08:29:7c:0a:b9:c8:5c:70:f5:77:
                    eb:75:54:fe:60:34:63:97:87:e0:f5:13:ab:e5:73:
                    fa:34:a8:ac:3f:65:49:34:c6:17:19:ab:af:34:71:
                    fc:88:e6:cd:b4:af:69:1b:a0:49:6d:17:ac:0a:47:
                    98:ac:18:86:c2:16:80:c0:19:f4:ba:67:48:c2:55:
                    be:91:56:02:6f:07:fe:3d:b4:fe:e0:8e:2d:25:e4:
                    6a:cd:e1:48:fc:d5:16:0f:f0:e6:2c:49:22:d2:21:
                    0c:a1:0f:48:63:62:b5:54:84:58:85:ae:60:38:74:
                    c8:a3:c4:4c:fa:c7:15:6e:dc:ed:e2:35:a2:b8:84:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F1:61:83:F9:44:2E:A0:72:38:0E:41:F0:44:F3:C9:DF:C4:A0:32
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4vFhg_lELqByOA5B8ETzyd_EoDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:e7:9c:eb:70:e1:4c:1f:9d:4a:47:29:ad:eb:8a:b8:13:
         fb:d6:28:30:b9:a8:f4:c8:5b:b8:b3:56:00:78:0a:16:1e:11:
         3b:03:35:b3:b1:6f:a6:1e:0f:4b:bf:84:f0:65:e3:a4:3a:84:
         c0:51:21:4b:9d:cb:27:86:fd:a6:ac:ff:64:63:39:37:47:87:
         e9:3c:73:66:e6:b4:0d:9d:4a:79:f8:15:2e:10:d9:d6:ca:d7:
         62:85:fd:82:14:68:0a:d8:e3:b5:a8:9d:5a:21:eb:3a:24:03:
         ec:32:5c:b7:aa:f4:80:19:72:a3:18:94:d0:b2:fb:6f:76:ac:
         07:2e:65:27:d6:aa:6b:2e:70:8a:f7:8b:49:d5:e7:e9:19:63:
         bc:6a:5a:60:43:cf:5e:26:df:bf:18:91:ea:10:38:7d:aa:7d:
         3b:e3:af:5f:39:11:3e:49:1f:27:d6:ea:49:85:e5:dd:d8:ea:
         e0:5b:d6:b9:24:ce:e2:05:f1:e7:86:bc:5b:c0:27:af:00:77:
         40:91:92:00:e6:77:3d:f6:70:ce:a2:39:db:d4:1c:38:88:35:
         e8:7f:3d:94:dc:49:d2:8a:08:51:5a:01:7e:a9:29:f8:52:9f:
         66:cb:1b:ab:ff:c1:f2:a7:a8:d5:fa:db:f7:ac:3a:df:4a:48:
         40:9a:82:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWIvFVT7Sa5dvRXxFIsVyGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMTA2MjAxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmYxNjE4M2Y5NDQyZWEwNzIzODBlNDFmMDQ0ZjNjOWRmYzRhMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxxWGDu667pfpJlU2IfPF+2rKXnb
VlLazr2xTj+RLmS/w93lOJ6N2k10uEItYlVJnM8enqSR7OuB9z3JYApff7OABLC0
V56CxlN0AqsnIjEuUKQ6qcnNne4JvE+awJrApJMZHGlzXG/z3NKt76IyRqzdxUzn
Cugk151c0wgpfAq5yFxw9XfrdVT+YDRjl4fg9ROr5XP6NKisP2VJNMYXGauvNHH8
iObNtK9pG6BJbResCkeYrBiGwhaAwBn0umdIwlW+kVYCbwf+PbT+4I4tJeRqzeFI
/NUWD/DmLEki0iEMoQ9IY2K1VIRYha5gOHTIo8RM+scVbtzt4jWiuIS63QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLxYYP5RC6gcjgOQfBE88nfxKAyMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvNHZGaGdfbEVMcUJ5T0E1QjhFVHp5ZF9Fb0RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSv8MA0G
CSqGSIb3DQEBCwUAA4IBAQB/OOec63DhTB+dSkcpreuKuBP71igwuaj0yFu4s1YA
eAoWHhE7AzWzsW+mHg9Lv4TwZeOkOoTAUSFLncsnhv2mrP9kYzk3R4fpPHNm5rQN
nUp5+BUuENnWytdihf2CFGgK2OO1qJ1aIes6JAPsMly3qvSAGXKjGJTQsvtvdqwH
LmUn1qprLnCK94tJ1efpGWO8alpgQ89eJt+/GJHqEDh9qn07469fORE+SR8n1upJ
heXd2OrgW9a5JM7iBfHnhrxbwCevAHdAkZIA5nc99nDOojnb1Bw4iDXofz2U3EnS
ighRWgF+qSn4Up9myxur/8Hyp6jV+tv3rDrfSkhAmoLW
-----END CERTIFICATE-----