Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/ETAVh0LXKpkRXDEXRcTmy8uc_6I.roa
File:                     ETAVh0LXKpkRXDEXRcTmy8uc_6I.roa (raw, json)
Hash identifier:          1WjkG+02pJtfj5K2UsnIgYw3PNlp6ta5oG5o3myB3to=
Subject key identifier:   11:30:15:87:42:D7:2A:99:11:5C:31:17:45:C4:E6:CB:CB:9C:FF:A2
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       01856D4AC602E0AAE95EBC42BBB9EDD1B3E7
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/ETAVh0LXKpkRXDEXRcTmy8uc_6I.roa
Signing time:             Sun 01 Jan 2023 12:24:54 +0000
ROA not before:           Sun 01 Jan 2023 12:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51696
IP address blocks:        94.142.134.0/23 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:c6:02:e0:aa:e9:5e:bc:42:bb:b9:ed:d1:b3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: Jan  1 12:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1130158742d72a99115c311745c4e6cbcb9cffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:2f:37:5f:9c:94:41:37:54:47:84:70:d4:
                    08:d9:de:12:49:80:c2:26:3e:1c:74:6c:d8:9c:02:
                    ec:49:97:f4:6c:e0:a3:be:66:00:d6:5f:a9:84:32:
                    da:85:8d:e1:4a:12:93:2c:6a:e3:33:a1:56:48:91:
                    cf:e2:d1:26:84:f3:92:75:90:fd:21:4a:18:1f:7d:
                    58:7c:ea:95:19:ba:ab:45:d6:eb:8e:f3:65:5e:f7:
                    7a:76:f3:55:f7:14:38:c4:f2:3a:e3:57:5e:6d:da:
                    0f:fc:5b:24:da:ee:a8:7e:62:63:17:78:53:ef:31:
                    45:61:88:02:47:6b:20:9e:b8:6f:fe:38:5d:2a:20:
                    a5:4b:84:45:01:0c:f6:6c:a0:43:81:8d:55:33:21:
                    59:ac:68:f8:f9:15:6d:6a:dd:dd:91:e9:26:c0:87:
                    66:f8:fd:b6:a6:db:91:02:e2:9c:44:3a:62:77:50:
                    07:37:dc:aa:63:d7:7c:a3:21:0c:b2:18:b3:13:cd:
                    ef:3a:b9:37:f0:1d:fc:ee:b7:7a:e6:42:4d:34:ad:
                    2e:17:7d:c0:a5:4c:45:c2:2e:6d:28:19:f1:c0:16:
                    5a:3b:97:60:0e:37:d2:c0:93:fd:6c:79:81:dd:ce:
                    57:41:04:a1:41:40:73:2f:a2:e1:70:1c:04:b0:b4:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:15:87:42:D7:2A:99:11:5C:31:17:45:C4:E6:CB:CB:9C:FF:A2
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/ETAVh0LXKpkRXDEXRcTmy8uc_6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:38:7a:f4:34:5f:88:a2:23:86:d3:dc:57:f0:ef:22:ad:
         37:5f:3d:30:3c:4d:87:8b:fa:07:85:d3:dc:73:4a:ae:5d:f9:
         48:58:0e:24:24:81:eb:d1:8b:5e:90:aa:3c:f7:32:48:7b:96:
         2b:47:4c:2b:5f:94:14:bb:2a:21:2b:ba:08:87:2d:03:4c:df:
         a2:b3:80:29:5c:e0:ee:63:ec:ab:72:4d:11:2f:88:b1:50:4b:
         f0:ff:ff:6a:7b:2e:03:f6:a4:52:e1:f4:46:ce:20:d6:39:4f:
         04:96:cd:03:ad:51:1a:ff:5c:c5:43:3a:f8:ec:39:5c:63:c1:
         28:7d:27:ec:2e:a4:b3:75:0f:e6:72:ca:b7:bf:a4:11:41:4d:
         f2:7a:a8:37:e9:45:62:4d:c1:25:6d:11:b1:b9:d6:96:e7:dd:
         21:dd:10:e8:e1:0b:38:15:ec:02:a2:c4:c7:92:3d:ec:43:82:
         07:b9:c5:ef:82:67:be:3e:6f:6c:5e:3f:e7:b4:5c:c4:d3:a7:
         df:c4:13:c8:d1:0c:83:d7:b6:a6:cc:53:17:86:cd:96:5a:e2:
         20:21:75:78:00:09:75:c4:fc:b6:c3:b2:ae:d2:4e:8c:e4:30:
         32:00:e6:d6:63:f9:1a:21:ac:37:32:f2:94:bb:90:32:db:c2:
         f8:fe:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----