Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa
File:                     rbH9xhVjUCc8W0EAHebc-qAKWBY.roa (raw, json)
Hash identifier:          JZMXTVrgrQEoZROQ5dLX8qjBMWQBc2KRuigqeN59LXY=
Subject key identifier:   AD:B1:FD:C6:15:63:50:27:3C:5B:41:00:1D:E6:DC:FA:A0:0A:58:16
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       01888CE7A6A0514A1B5403C7B04AA2DCCE88
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa
Signing time:             Mon 05 Jun 2023 18:52:51 +0000
ROA not before:           Mon 05 Jun 2023 18:52:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        37.143.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8c:e7:a6:a0:51:4a:1b:54:03:c7:b0:4a:a2:dc:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: Jun  5 18:52:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=adb1fdc6156350273c5b41001de6dcfaa00a5816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:67:5e:3d:06:b6:d3:a8:be:11:eb:c7:24:
                    49:e9:fc:51:2c:a9:1b:20:62:41:19:22:68:2c:f6:
                    3c:dd:99:89:5b:d9:bb:74:e2:44:18:88:c6:f0:8e:
                    e0:e2:d8:e6:4b:bc:27:71:67:40:7c:6a:15:34:e1:
                    16:9b:1d:94:41:b5:cb:a4:39:a6:ec:96:6f:63:76:
                    30:42:37:1b:4f:1b:36:06:6e:e9:46:41:5d:8b:95:
                    b8:54:2a:aa:0e:bc:84:2d:4b:19:6e:94:28:c0:8a:
                    39:56:50:dc:b4:e3:c4:06:be:24:39:0a:1e:cb:e6:
                    7e:84:57:de:be:ce:fb:e2:fd:ff:1c:f0:a9:1e:eb:
                    c6:2a:99:0b:4a:97:c1:22:d6:53:e6:5a:99:4a:21:
                    ae:98:14:47:3d:c2:1e:06:93:18:dc:a5:8e:2f:be:
                    47:fd:28:25:a9:96:23:bc:bb:e1:c5:54:9c:d6:81:
                    76:9b:e3:d1:f1:8e:bc:47:63:a4:aa:64:42:c5:a1:
                    d3:56:a9:fb:69:a8:70:2e:54:e9:bf:6d:21:d8:a6:
                    da:c8:e1:b6:8b:be:30:4f:eb:af:c7:61:e3:3c:0b:
                    7c:87:fd:80:7a:75:50:96:9f:fe:8c:3b:2d:82:c8:
                    02:e5:37:11:e3:68:21:d2:69:6f:23:5e:7b:2e:23:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:FD:C6:15:63:50:27:3C:5B:41:00:1D:E6:DC:FA:A0:0A:58:16
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/rbH9xhVjUCc8W0EAHebc-qAKWBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.143.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:c5:88:1b:ed:7b:ae:a4:f2:2b:94:70:6e:9c:da:19:c4:
         1a:da:3d:56:4d:ff:74:b0:5b:b4:eb:3f:ff:95:ba:08:48:41:
         f3:23:a1:a8:fd:01:b0:ec:71:c3:c4:3c:aa:ab:34:0a:58:d6:
         e3:dd:b0:8d:66:f2:14:1b:c6:66:36:89:02:ea:e0:69:27:76:
         7b:46:fa:ed:6f:93:de:75:75:31:07:4c:b7:44:7b:c8:fd:b5:
         8d:1d:b0:4e:b5:cc:7e:b2:f4:54:15:93:a9:f6:8b:cf:a3:a5:
         61:8e:35:8b:f2:08:b6:94:4d:ce:d2:61:b7:6d:2b:f3:db:61:
         d7:88:99:83:20:a4:b6:2e:b5:53:5e:b3:21:b2:ad:df:a0:89:
         27:41:05:04:d0:e9:54:07:cf:a1:d3:29:c4:e1:cc:79:ee:5d:
         93:8b:54:39:f2:64:39:ae:72:2c:34:e2:75:d0:c0:e3:54:1b:
         2b:3c:d4:0e:5b:2e:75:80:ba:50:ee:de:17:d3:2f:a9:08:f4:
         ef:02:6f:80:1d:cd:9a:47:91:59:7a:16:42:2c:cb:99:79:ae:
         3d:71:3f:8b:70:c2:ef:52:73:23:e7:f5:b1:70:c8:d7:dd:dd:
         0c:55:3e:13:00:c9:9a:66:2f:8d:1e:fe:13:ce:ff:a2:ad:e7:
         9c:e9:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----