Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa
File:                     jGPiSeMJqaMlfPF8cir7c4qAkbs.roa (raw, json)
Hash identifier:          VF/Y5y6oERDtY+HF8dL08onodiHde22MashQx3rFiEY=
Subject key identifier:   8C:63:E2:49:E3:09:A9:A3:25:7C:F1:7C:72:2A:FB:73:8A:80:91:BB
Certificate issuer:       /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial:       018940022CB2274F47E5141F300499BA6DBA
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa
Signing time:             Mon 10 Jul 2023 13:33:51 +0000
ROA not before:           Mon 10 Jul 2023 13:33:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.127.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:40:02:2c:b2:27:4f:47:e5:14:1f:30:04:99:ba:6d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Validity
            Not Before: Jul 10 13:33:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c63e249e309a9a3257cf17c722afb738a8091bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:ee:74:7d:46:6b:21:b1:29:93:f2:fb:2b:
                    c1:9c:7a:57:46:74:18:40:3d:81:b1:64:32:ab:3f:
                    fa:8d:24:3e:04:b3:21:a1:11:17:a6:0e:bb:a8:4c:
                    10:56:e5:6f:b6:c1:4e:21:ba:5f:05:b6:b2:7d:16:
                    7f:10:4b:ed:5d:33:99:48:b6:17:c4:d9:81:5d:3a:
                    ba:a2:e4:57:46:9b:62:f8:c1:90:32:7e:3b:88:7b:
                    db:ba:36:12:f4:b6:6d:a7:11:85:ad:49:44:05:f2:
                    6a:68:f6:85:2e:32:b1:ed:4f:10:8f:ec:65:02:20:
                    e9:df:9a:3e:7b:10:e4:aa:4b:79:5d:83:4f:c3:cd:
                    d1:8e:38:f9:22:53:2f:21:83:a8:7b:0e:a2:a0:60:
                    80:ac:2c:fa:a0:31:bb:69:54:ca:95:bc:86:f1:f0:
                    d1:e3:45:91:bb:8d:cb:d4:59:ea:cd:6a:b5:86:2e:
                    9a:70:dd:2b:06:17:ae:eb:bf:f6:16:c7:43:74:a0:
                    48:70:c2:66:a3:19:07:f0:08:f5:99:21:39:f5:79:
                    63:e8:2c:a7:07:c5:b6:d2:9b:96:98:50:20:d4:5a:
                    60:ab:b2:93:ac:04:66:8a:e5:9c:d6:99:00:c5:21:
                    94:fa:2b:1d:42:b0:fc:97:da:1f:e2:b0:46:9e:78:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:E2:49:E3:09:A9:A3:25:7C:F1:7C:72:2A:FB:73:8A:80:91:BB
            X509v3 Authority Key Identifier:
                keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/jGPiSeMJqaMlfPF8cir7c4qAkbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:53:ce:f9:48:16:7c:1a:96:c4:8d:a4:98:90:7d:fe:49:
         bb:eb:34:5c:60:b1:6a:23:97:fa:34:52:19:d6:fe:e1:e0:e9:
         a7:5b:8c:09:45:b3:36:84:c0:61:6a:a4:ac:35:6b:0f:82:fd:
         8f:32:20:22:12:8a:f4:05:db:3d:bc:d1:4c:48:fa:a4:43:bd:
         16:ce:03:bd:e6:4c:ab:dd:22:c0:f6:3c:3b:76:07:f8:68:f5:
         31:52:50:d8:a6:8b:f3:be:40:bc:59:30:54:ab:00:de:49:24:
         7c:43:2a:2e:de:df:4e:03:ae:fa:5c:57:c5:fb:16:de:97:69:
         80:75:54:26:af:24:a5:5b:51:7d:7b:ce:bb:a4:e6:d1:78:0a:
         71:5f:96:79:40:b7:b8:e8:78:c5:8d:87:13:2e:9e:a1:6d:4f:
         65:67:b8:1c:6d:e8:17:96:08:ba:e3:eb:f4:3e:aa:e3:35:90:
         17:8a:8f:74:91:76:ba:22:47:f3:b8:c9:57:fa:f5:b8:49:e1:
         8d:4e:53:1a:2c:e0:af:a2:6e:2e:8f:8a:f0:14:ce:3e:92:60:
         ae:45:34:b0:14:11:5b:83:bf:2c:67:26:32:21:31:f2:ee:f6:
         09:4f:51:d6:bd:ab:22:e9:40:9d:8e:31:e0:be:03:ac:ea:ec:
         82:f5:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----