Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/syx7EKKqROWnLBmAwHL1w_qfrNk.roa
File:                     syx7EKKqROWnLBmAwHL1w_qfrNk.roa (raw, json)
Hash identifier:          mPY5l+e19pwztRLgAUmlU9wDYhXPHdqWiKGpPfdL43w=
Subject key identifier:   B3:2C:7B:10:A2:AA:44:E5:A7:2C:19:80:C0:72:F5:C3:FA:9F:AC:D9
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       018835394277A6E3B3547D51A91B92975412
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/syx7EKKqROWnLBmAwHL1w_qfrNk.roa
Signing time:             Fri 19 May 2023 18:15:24 +0000
ROA not before:           Fri 19 May 2023 18:15:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        46.3.73.0/24 maxlen: 24
                          46.3.77.0/24 maxlen: 24
                          46.3.75.0/24 maxlen: 24
                          46.3.74.0/24 maxlen: 24
                          46.3.72.0/24 maxlen: 24
                          46.3.76.0/24 maxlen: 24
                          46.3.78.0/24 maxlen: 24
                          46.3.79.0/24 maxlen: 24
                          46.3.4.0/24 maxlen: 24
                          46.3.6.0/24 maxlen: 24
                          46.3.7.0/24 maxlen: 24
                          46.3.5.0/24 maxlen: 24
                          46.232.24.0/24 maxlen: 24
                          46.232.27.0/24 maxlen: 24
                          46.3.16.0/24 maxlen: 24
                          46.232.29.0/24 maxlen: 24
                          46.232.25.0/24 maxlen: 24
                          46.232.28.0/24 maxlen: 24
                          46.232.26.0/24 maxlen: 24
                          46.3.17.0/24 maxlen: 24
                          46.232.30.0/24 maxlen: 24
                          46.3.18.0/24 maxlen: 24
                          46.3.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:35:39:42:77:a6:e3:b3:54:7d:51:a9:1b:92:97:54:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: May 19 18:15:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b32c7b10a2aa44e5a72c1980c072f5c3fa9facd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:7f:d2:2f:7d:83:7c:68:98:dd:ba:e8:7e:
                    01:11:31:75:a1:d1:d1:a3:d5:46:97:91:14:86:32:
                    9b:7b:1e:06:df:6c:ab:84:94:d5:93:7f:4b:19:92:
                    75:73:aa:b2:d0:4f:60:7f:20:14:42:90:a2:ad:70:
                    4d:ac:35:fb:cd:bd:41:dd:a9:d9:c3:90:d3:c1:7b:
                    d3:e5:76:2d:ee:30:c9:9e:0a:60:1f:dc:41:8b:43:
                    ff:be:71:c3:a7:cb:97:9c:67:2e:1c:71:89:17:1a:
                    00:b6:9b:e8:c3:92:54:fd:c2:a2:78:37:7b:de:4b:
                    8f:26:d4:78:ab:c3:dc:41:a2:fa:e8:ff:f0:49:89:
                    14:57:4e:e8:3f:5d:08:0a:29:ed:9e:b5:4b:1a:8d:
                    74:98:01:90:1d:e8:e7:8c:11:90:dc:3b:b7:72:c4:
                    01:fe:95:85:c3:06:2b:89:1e:80:93:54:ef:ff:14:
                    1a:81:6c:6a:42:f7:a4:78:1b:e2:a2:f9:f2:2b:5b:
                    6e:d7:a1:2f:f8:7f:05:0a:69:7d:e1:13:55:d4:1a:
                    fd:30:52:d9:8f:86:cc:2d:a0:5e:23:c1:1b:af:ab:
                    3b:69:6c:4b:89:b5:f2:65:a0:04:90:d4:42:8b:8c:
                    95:0e:19:c8:69:53:e5:3c:18:3d:ee:5c:7e:c3:fc:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:7B:10:A2:AA:44:E5:A7:2C:19:80:C0:72:F5:C3:FA:9F:AC:D9
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/syx7EKKqROWnLBmAwHL1w_qfrNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.4.0/22
                  46.3.16.0/22
                  46.3.72.0/21
                  46.232.24.0-46.232.30.255

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:eb:b3:e8:9f:cb:cb:2f:c4:65:15:e1:5a:fe:86:c4:aa:
         0d:0d:24:81:e3:1b:22:65:ab:83:69:87:0a:85:9a:ad:a4:87:
         32:b3:c2:c5:1c:a9:69:ab:3e:7c:ee:b3:c5:72:e1:4d:55:e0:
         5a:6f:e4:1b:1c:4b:34:11:44:f5:ca:88:c5:84:c1:c6:56:bd:
         9a:3c:05:ce:f0:d2:c8:87:c7:a3:90:e0:f1:a7:f4:30:b2:4f:
         f2:72:3b:d6:4e:1a:01:8e:4a:6b:44:e4:2c:f9:89:2d:e5:51:
         43:3b:23:81:15:0f:6b:e2:0f:55:d4:71:7f:28:f3:6a:9d:b7:
         80:43:8d:ed:89:f6:f8:77:2d:4b:61:be:15:1f:11:df:5f:1e:
         b5:20:6e:3f:1f:b9:15:4e:85:8f:c0:54:aa:37:da:f9:81:6c:
         3b:91:e7:4a:78:58:d7:82:df:dc:76:96:6e:5d:89:8e:de:dc:
         eb:ce:2b:24:7d:e4:57:37:6f:45:b4:1a:e8:66:c2:9d:fa:4c:
         60:0d:03:d2:d2:a3:66:a5:e7:7e:e6:98:08:45:20:b8:58:5f:
         a6:c7:ce:bc:8c:6f:2b:50:5a:04:aa:ef:3b:a5:a2:a0:bd:ee:
         06:77:43:62:06:16:4a:13:d0:2b:10:67:7c:ea:30:8e:5b:0f:
         87:0c:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----