Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_-38_E0wYFasEQtRJUi5CD1edgs.roa
File:                     _-38_E0wYFasEQtRJUi5CD1edgs.roa (raw, json)
Hash identifier:          OF5sqhV7jFT/FHBJddKBdSXsf77/GaFHGxLE/23fbos=
Subject key identifier:   FF:ED:FC:FC:4D:30:60:56:AC:11:0B:51:25:48:B9:08:3D:5E:76:0B
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018692CD7D87BEC1BA7CA3B75A959BBD05DB
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_-38_E0wYFasEQtRJUi5CD1edgs.roa
Signing time:             Mon 27 Feb 2023 12:16:25 +0000
ROA not before:           Mon 27 Feb 2023 12:16:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205125
IP address blocks:        45.95.201.0/24 maxlen: 24
                          2a0d:8340::/32 maxlen: 32
                          2a03:e2c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:cd:7d:87:be:c1:ba:7c:a3:b7:5a:95:9b:bd:05:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Feb 27 12:16:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ffedfcfc4d306056ac110b512548b9083d5e760b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:f9:cd:64:bf:6f:5f:40:b0:6c:f4:ab:6e:
                    ef:b8:fb:8a:85:b7:f3:72:38:79:80:15:9c:6b:b3:
                    3f:d7:01:14:b3:75:17:c4:19:18:de:ab:59:93:32:
                    79:72:62:81:50:8a:33:7b:be:44:45:9f:f1:f1:48:
                    4f:65:9c:27:88:46:13:50:10:15:2d:e8:dc:fd:c1:
                    20:5f:7d:4d:4d:20:77:5c:f6:c7:44:50:c3:52:22:
                    5e:4a:d7:7d:34:a0:fd:11:f4:6a:5f:f2:d7:cc:16:
                    7f:74:ef:ff:43:11:94:e4:f5:0b:e5:83:86:16:ee:
                    b4:d6:3d:6c:ba:93:44:6b:fb:e8:ea:4e:25:91:e5:
                    52:6f:17:a6:3a:1e:be:63:25:59:e4:6c:8f:74:bf:
                    64:df:73:94:47:e3:b2:30:bd:96:0b:19:de:af:3f:
                    f5:09:aa:91:50:9e:d5:d7:db:aa:f4:8a:4d:4e:5c:
                    4f:af:b8:f0:07:1c:e5:b6:74:06:38:b5:a6:67:15:
                    f5:bb:2a:fb:91:e8:5b:72:e4:7f:95:54:25:68:25:
                    ec:08:d7:9b:98:63:8a:71:f3:ba:eb:31:eb:85:cb:
                    73:69:66:18:f0:bd:ff:27:8f:6a:35:53:b3:7d:b9:
                    8e:23:2d:63:e3:5a:c6:f3:df:50:c2:1d:62:8a:3b:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:ED:FC:FC:4D:30:60:56:AC:11:0B:51:25:48:B9:08:3D:5E:76:0B
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_-38_E0wYFasEQtRJUi5CD1edgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.201.0/24
                IPv6:
                  2a03:e2c0::/32
                  2a0d:8340::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:fe:99:c8:fc:1e:d4:e9:52:c9:32:52:91:7e:b0:1b:8f:
         4f:b2:42:02:50:23:3f:77:7b:82:c1:7e:d8:df:0d:33:dc:06:
         1f:32:6b:a5:4d:a4:30:e5:60:99:9b:13:38:6d:fe:67:1a:f8:
         f3:d0:3e:55:23:de:d3:b5:ec:0e:38:a9:dc:75:e9:51:5a:bf:
         a9:04:51:ba:d3:91:33:38:d5:09:79:2d:4c:c4:87:e3:57:f9:
         33:33:e0:27:e8:b8:db:26:91:bd:08:d5:32:8c:f5:ca:ab:cd:
         b3:26:29:77:ea:45:4c:eb:27:2b:76:ce:2a:ca:bd:8b:a8:8f:
         a3:fa:25:97:f4:34:ba:50:ed:2f:f4:9f:d7:e9:f3:20:e9:5f:
         5b:75:df:92:6c:97:ca:2d:c9:fb:a8:43:1c:d2:d6:d5:b0:23:
         d2:da:aa:bd:f0:d4:42:43:a6:29:5c:45:fe:ab:bf:e2:07:f5:
         40:fe:08:4c:65:88:9d:1c:bb:78:ad:43:17:32:6c:49:54:db:
         cf:68:3e:38:5b:8c:73:24:95:9b:d9:64:ba:4f:96:33:e9:fb:
         ee:93:30:ef:f7:b8:3b:30:75:82:14:18:f5:32:9d:bf:ac:11:
         df:0d:36:8d:e1:a0:81:d2:65:67:06:e2:68:36:ad:8e:18:46:
         e7:49:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----