Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-qxFd_9UZaYz7v6rm4OvIwjh0EU.roa
File:                     1-qxFd_9UZaYz7v6rm4OvIwjh0EU.roa (raw, json)
Hash identifier:          z3DA3SbBjv/RI2Fr54i0BX00sXTZ4bMoE4DdB0ql8Qs=
Subject key identifier:   FA:AC:45:77:FF:54:65:A6:33:EE:FE:AB:9B:83:AF:23:08:E1:D0:45
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0188B595F4148E14BFDBDD189330BB18ACF1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-qxFd_9UZaYz7v6rm4OvIwjh0EU.roa
Signing time:             Tue 13 Jun 2023 16:28:03 +0000
ROA not before:           Tue 13 Jun 2023 16:28:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48031
IP address blocks:        92.63.183.0/24 maxlen: 24
                          92.63.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b5:95:f4:14:8e:14:bf:db:dd:18:93:30:bb:18:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun 13 16:28:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=faac4577ff5465a633eefeab9b83af2308e1d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:76:d5:88:db:61:d1:99:31:f7:47:b7:f2:
                    56:58:cf:08:5f:c0:17:57:f9:be:8e:ab:7c:79:7c:
                    e7:86:90:87:0c:c7:9b:d2:5e:13:5a:03:6d:54:25:
                    9f:f3:e8:91:18:3d:d9:f3:52:7b:53:39:14:9e:0e:
                    57:41:f9:22:b6:64:cd:c6:4e:8f:b4:b4:d0:e1:db:
                    85:fb:66:d3:56:35:fb:a9:01:49:c5:0b:79:80:d3:
                    96:6c:43:ec:b2:66:5e:89:32:62:9b:59:8a:ba:34:
                    d0:a4:dc:ef:83:52:f2:d1:90:c9:56:49:fc:65:f1:
                    62:95:6e:7e:ab:55:3e:17:43:b9:ff:7a:ff:c1:31:
                    d5:cb:d3:bd:62:e0:b7:88:22:73:58:19:fd:cf:ae:
                    02:eb:4e:e2:e6:c0:50:86:d9:d3:8d:df:f8:a6:68:
                    40:16:b2:64:a0:b3:b8:42:cd:8e:c7:ba:a0:c5:bf:
                    18:44:a9:f7:cf:c2:da:1b:b3:c9:32:1b:1c:eb:78:
                    bd:41:d9:70:08:2d:da:d1:3e:e7:46:0e:86:b8:05:
                    d4:bd:2c:cd:7a:d2:eb:2f:62:ee:75:18:0b:19:23:
                    d2:f7:dc:3d:33:d1:2c:33:dd:51:9f:b1:5e:d1:ec:
                    08:30:48:0b:eb:69:ef:3a:0f:00:df:cb:80:5a:7e:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:45:77:FF:54:65:A6:33:EE:FE:AB:9B:83:AF:23:08:E1:D0:45
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/1-qxFd_9UZaYz7v6rm4OvIwjh0EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:8d:30:e8:75:08:5b:93:28:f4:f6:e3:0b:36:92:5f:d4:
         2d:30:c7:60:4f:e9:96:4e:0f:22:73:37:06:a0:c6:d2:47:fd:
         6a:63:16:6e:e5:cc:85:ee:84:ee:fe:68:7b:d8:0b:41:0f:65:
         f2:89:78:17:a6:57:57:16:87:fb:8f:f8:7e:48:43:85:53:da:
         9e:68:79:14:c5:9e:60:12:df:8a:7c:a9:b6:92:17:8a:ec:f6:
         d5:22:eb:84:f6:aa:f4:00:d5:74:82:84:99:89:3a:8b:7e:26:
         99:ed:80:48:6b:06:91:c7:30:c6:3d:37:93:15:91:2e:6c:ee:
         31:94:26:5d:55:5f:26:ab:4c:5c:c6:e9:ff:d3:b2:d1:3a:65:
         3c:5e:74:6d:6f:4a:2a:87:83:b4:07:33:5f:ce:40:11:54:ee:
         bd:b4:a7:12:5a:dc:82:03:95:d1:64:7c:bb:38:c3:7d:80:bc:
         e7:8e:d8:77:80:d4:69:a4:c9:f5:83:36:92:c0:b9:ac:be:65:
         59:be:db:77:25:6b:4e:57:4c:f4:7d:c2:27:bc:cb:bc:56:73:
         f6:50:69:96:e8:4f:b7:35:50:65:fd:bf:21:cf:6f:eb:4b:82:
         44:3e:82:99:17:2f:5f:8e:1a:8b:67:5e:09:6c:ce:34:6a:68:
         28:46:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----