Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/1oBRVJbQ8FKJqdVGoA_ne6_h52E.roa
File:                     1oBRVJbQ8FKJqdVGoA_ne6_h52E.roa (raw, json)
Hash identifier:          4XDh9xi/YqKa5V6y71I1rnEhveoSxF8jN3Dv6bGFMjM=
Subject key identifier:   D6:80:51:54:96:D0:F0:52:89:A9:D5:46:A0:0F:E7:7B:AF:E1:E7:61
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       01856DB871162D7E62F8C12C7856396C1B90
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/1oBRVJbQ8FKJqdVGoA_ne6_h52E.roa
Signing time:             Sun 01 Jan 2023 14:24:42 +0000
ROA not before:           Sun 01 Jan 2023 14:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50949
IP address blocks:        194.28.88.0/22 maxlen: 24
                          2001:67c:320::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:b8:71:16:2d:7e:62:f8:c1:2c:78:56:39:6c:1b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Jan  1 14:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d680515496d0f05289a9d546a00fe77bafe1e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:8c:4d:31:bd:b7:25:c4:b6:19:2a:6c:ef:
                    f1:99:fe:d6:43:1c:25:18:dd:b9:b2:7e:5a:7c:21:
                    99:d7:88:9c:b1:10:4b:91:74:96:0b:8c:fe:a0:a7:
                    63:f1:1b:0f:41:cd:89:18:84:9c:0f:5b:7d:63:67:
                    52:af:57:59:9a:c0:fc:c8:9d:28:1c:7e:cb:48:c7:
                    e4:b4:68:03:ff:ec:13:ce:0d:57:a9:48:a1:3b:26:
                    3a:b8:2c:a1:f0:30:f7:b7:e0:c6:35:3c:65:e8:83:
                    f5:77:9b:fc:5d:85:65:0a:1c:3f:b2:d3:7d:33:bc:
                    8f:7b:a7:f5:52:e8:ed:56:5f:89:06:fb:32:44:5c:
                    85:5d:dc:a2:88:c2:97:4e:a7:aa:a2:95:d0:7f:33:
                    44:49:94:c6:01:30:bb:18:84:f3:1d:a8:cc:0a:1d:
                    83:9f:c1:76:1e:48:8a:66:02:9b:a1:06:36:59:95:
                    be:91:75:fd:fc:43:fc:cc:f7:a0:4f:9a:cd:d6:d0:
                    3c:90:c9:8c:73:04:6e:55:1f:0b:46:d8:6e:52:16:
                    a1:53:48:54:93:4f:27:b7:8a:40:94:70:3b:70:95:
                    11:69:29:46:b3:a9:47:dc:8b:94:8b:0a:e4:7a:d6:
                    d2:4f:51:2e:3c:bf:9d:ba:96:0e:91:73:37:6f:05:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:80:51:54:96:D0:F0:52:89:A9:D5:46:A0:0F:E7:7B:AF:E1:E7:61
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/1oBRVJbQ8FKJqdVGoA_ne6_h52E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.88.0/22
                IPv6:
                  2001:67c:320::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:6d:45:b5:ba:bd:2b:49:5c:da:15:d5:58:4c:3d:58:ee:
         e1:b1:86:70:92:51:f0:68:4e:9d:d4:e5:b4:26:c9:d3:72:11:
         f4:e5:9d:11:cf:7b:d0:7d:da:41:4f:ca:6c:fe:bd:39:f9:b9:
         c9:a0:ab:1c:65:9c:bd:df:71:a8:4b:93:e1:11:48:f5:25:cd:
         e9:46:f2:ac:31:e7:c4:de:2d:19:2b:ee:ba:d1:27:b9:f3:78:
         ad:28:80:b7:ca:2e:89:8e:3e:79:7c:59:4e:ba:76:11:fc:0e:
         c2:44:bc:3a:ff:d2:fa:76:81:9a:b1:9f:be:aa:48:1c:16:97:
         54:01:e1:a2:23:4f:1a:f0:6a:a3:ec:03:88:54:c5:a5:c0:1a:
         99:8b:ce:2c:64:83:04:66:3e:df:03:fe:18:6d:5a:5b:d3:ba:
         15:cb:b9:53:ef:98:06:ab:45:83:1e:72:9d:0a:57:f5:d2:82:
         7b:7f:c5:9d:5c:98:44:c0:70:d4:fb:b6:33:bd:63:4a:da:7e:
         24:b9:4f:10:c4:0d:eb:ff:91:d2:d8:d0:2d:ab:df:f8:cf:97:
         30:9e:46:0d:42:1f:27:5b:13:31:61:80:73:3f:b9:53:dd:85:
         67:74:4f:70:6e:5e:d5:ce:f5:39:c2:53:df:d4:66:ab:fb:c6:
         65:f8:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----