Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/wGlTI2RNdYvXuwAgjEvBwtk_iTE.roa
File:                     wGlTI2RNdYvXuwAgjEvBwtk_iTE.roa (raw, json)
Hash identifier:          dlbqilfkEViH1Vz+fGzOUIPckcBuQ3zVfdI+YLiUidU=
Subject key identifier:   C0:69:53:23:64:4D:75:8B:D7:BB:00:20:8C:4B:C1:C2:D9:3F:89:31
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       01859AD21D60D8EA111C9931A02CCE48724C
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/wGlTI2RNdYvXuwAgjEvBwtk_iTE.roa
Signing time:             Tue 10 Jan 2023 08:35:39 +0000
ROA not before:           Tue 10 Jan 2023 08:35:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51696
IP address blocks:        94.142.134.0/23 maxlen: 32
                          2a0c:1000::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9a:d2:1d:60:d8:ea:11:1c:99:31:a0:2c:ce:48:72:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: Jan 10 08:35:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0695323644d758bd7bb00208c4bc1c2d93f8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:2f:eb:a0:1a:b3:11:17:2e:52:81:c0:c4:
                    13:4a:16:db:58:b9:95:7a:27:1d:16:e9:62:ce:2a:
                    db:5e:5d:75:db:04:dd:1a:e4:31:82:5e:36:4c:03:
                    67:75:be:d7:bc:ec:c8:cb:c2:4e:43:35:48:71:e3:
                    44:f2:e7:eb:ce:7c:be:b5:7e:a4:ad:df:46:09:30:
                    5d:77:ab:37:9c:43:20:85:5b:80:14:86:a3:a5:9d:
                    e9:d7:55:c3:5e:60:84:f9:20:53:94:1b:b1:3c:6e:
                    48:46:37:47:e8:3a:82:c6:d0:eb:3a:e5:57:11:b4:
                    59:1c:92:60:be:ec:3a:06:2f:e7:5d:cd:52:8d:f0:
                    61:45:c3:01:35:c1:e2:08:ff:39:72:80:9e:0a:d3:
                    9f:65:74:f4:6a:14:6a:d4:95:1b:e1:89:c8:74:43:
                    cb:6a:11:f6:21:99:af:32:fd:fa:69:4b:f6:02:c9:
                    f0:a5:7c:43:1e:af:56:0e:97:24:0c:0f:d1:7c:dc:
                    3d:ac:4e:b1:3b:8c:cc:6a:9a:17:38:25:5b:12:9d:
                    cf:5b:fa:27:43:79:9d:a9:70:5b:e9:68:bb:ab:fb:
                    85:ab:14:ee:a4:36:e4:e2:66:d4:89:46:e6:68:d3:
                    e3:a3:eb:cc:da:c7:33:54:af:08:d6:70:03:4e:61:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:53:23:64:4D:75:8B:D7:BB:00:20:8C:4B:C1:C2:D9:3F:89:31
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/wGlTI2RNdYvXuwAgjEvBwtk_iTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.134.0/23
                IPv6:
                  2a0c:1000::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:da:38:1d:cc:52:53:e6:34:2d:6c:ce:14:15:61:ef:7b:9f:
         d8:bf:34:a1:4f:65:24:16:57:7b:8d:8f:54:94:8b:16:88:e3:
         d3:e3:8f:f8:ba:29:7d:83:3e:fd:85:bd:71:2f:ba:31:2f:c0:
         dd:be:8f:0f:5c:ca:04:32:b1:8c:02:66:05:30:96:9d:ee:05:
         2d:c8:13:1e:57:bf:00:2a:c9:22:ee:f0:9f:e6:23:c8:26:d8:
         09:2a:a6:fe:80:37:28:6d:5d:b7:a6:2d:c7:fe:24:4b:a4:2c:
         2a:c2:cf:30:35:d8:c7:1d:bb:14:e4:f4:6c:72:28:15:08:66:
         9a:10:80:b5:f9:09:c7:a2:08:d6:b8:87:db:1e:95:d4:61:c5:
         73:13:4f:ef:d3:bb:8b:03:a4:e7:0d:96:73:89:a3:d2:cf:e9:
         44:ae:ed:21:7f:2a:8c:05:f9:8c:87:a0:15:55:f9:8a:7c:15:
         b5:18:38:48:f0:49:ad:36:d8:99:c1:d7:7e:0e:86:35:4f:95:
         42:f4:af:f1:07:13:33:0d:26:4d:91:b5:d3:f7:a5:39:3a:54:
         8b:5a:09:d9:80:84:29:eb:a6:0c:53:7a:36:9b:34:8b:fb:c8:
         4b:52:6b:41:22:14:0c:d5:10:fa:99:17:47:ea:b3:e2:10:e6:
         fe:06:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----