Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa
File:                     BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa (raw, json)
Hash identifier:          Ohjvj8Z/T08gz2MtY26OpDSEu/S/HQ6oL9KLMPxoYTc=
Subject key identifier:   04:B7:95:42:DF:0E:E8:67:10:53:57:3E:82:88:6F:30:6D:42:FD:79
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       01856CB84C65247D7864E57CB2BFBC4B7542
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa
Signing time:             Sun 01 Jan 2023 09:44:55 +0000
ROA not before:           Sun 01 Jan 2023 09:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     397540
IP address blocks:        176.125.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:4c:65:24:7d:78:64:e5:7c:b2:bf:bc:4b:75:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 09:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04b79542df0ee8671053573e82886f306d42fd79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:34:a8:42:05:09:3e:aa:b2:63:0e:58:b3:fb:
                    83:37:09:06:b9:14:4f:bb:11:2a:3b:8f:7f:0b:95:
                    d3:2e:e8:45:74:7b:93:ef:94:31:76:37:8d:16:dc:
                    98:b0:51:47:db:8a:31:ad:7e:e7:21:25:22:e1:16:
                    1c:fe:18:8f:29:63:b6:e1:c9:76:33:f6:a1:82:70:
                    5b:3b:f9:43:95:20:bd:a2:bf:51:8c:79:b7:e9:70:
                    c4:cc:31:b2:be:6b:cd:ef:be:9e:9f:6e:d8:2d:78:
                    cf:60:e1:47:9f:1a:0e:5a:a6:c7:86:fa:10:1c:b6:
                    4a:56:bf:fe:8b:3f:96:a9:22:bb:50:81:57:3c:56:
                    a6:8b:a9:1d:16:ce:b0:39:b9:6a:7a:d7:47:c3:e4:
                    d8:2b:33:cb:28:3a:ed:39:29:bd:32:2c:0f:1c:1a:
                    14:8f:82:57:c6:53:fe:c1:d4:34:69:21:db:c3:89:
                    d0:30:49:1b:5a:ed:b9:7b:10:e9:eb:66:33:8f:44:
                    a5:6e:5a:9f:14:ce:46:85:02:76:92:84:a9:8f:b6:
                    dd:0a:25:35:0f:af:ce:d1:f7:7a:2d:2a:72:8d:33:
                    b2:b9:cf:76:76:2d:3d:b9:ca:e9:a9:da:c6:90:ab:
                    e2:38:8b:fe:61:70:0c:8a:53:a1:2b:c2:b2:50:ec:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:95:42:DF:0E:E8:67:10:53:57:3E:82:88:6F:30:6D:42:FD:79
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/BLeVQt8O6GcQU1c-gohvMG1C_Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:59:4f:bb:68:c0:7b:06:89:4c:7b:6c:d4:08:8b:4a:dd:7f:
         47:df:21:c1:0c:f2:ee:0d:ef:ed:95:56:30:00:05:fd:6c:cb:
         ba:9b:8c:38:9b:f8:b5:af:16:23:ba:af:e7:7d:e7:b4:b4:cc:
         80:5c:41:1b:da:19:dc:b3:28:fe:89:12:9b:3f:7e:a3:41:91:
         be:c3:1a:af:c6:53:ba:f6:89:be:f3:f1:2c:a9:7c:d0:3d:68:
         cf:72:4b:bc:2f:1d:9c:08:18:19:8e:31:d4:00:53:7e:0f:e2:
         23:f2:4d:fd:51:ec:c5:12:6b:b3:71:3a:a8:b9:ab:24:67:7d:
         db:8c:60:ce:61:5e:47:a4:d0:49:8c:33:45:69:dd:b4:15:39:
         38:20:60:d5:63:bc:04:ad:87:10:9a:1a:a1:c4:60:5a:85:76:
         8c:d1:17:d5:9a:23:c6:22:d7:5c:b8:b2:c9:d2:b1:6c:ed:42:
         2b:88:f8:1f:27:9d:07:6b:c9:b8:1c:df:1f:ad:6f:fe:09:34:
         aa:59:07:70:ab:c4:76:89:9e:f2:ba:3a:30:01:7e:67:a5:0a:
         f3:f5:04:4d:c8:8e:24:4c:35:eb:76:5f:bf:8a:be:c0:b2:63:
         4f:a4:45:1f:c3:59:ae:ee:ed:5a:ba:4a:15:4c:d3:5b:a4:8f:
         9d:4f:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----