Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa
File:                     x8NtxIQvc6StruW1i7z9KVtt92Y.roa (raw, json)
Hash identifier:          ovNfp/Cn7P0nM08g+Ns172KiRrpZqo8CCNmbacKAKU8=
Subject key identifier:   C7:C3:6D:C4:84:2F:73:A4:AD:AE:E5:B5:8B:BC:FD:29:5B:6D:F7:66
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018B952425745B22F3CC7C4877FCBA4D7C56
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa
Signing time:             Fri 03 Nov 2023 12:24:15 +0000
ROA not before:           Fri 03 Nov 2023 12:24:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        83.147.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:95:24:25:74:5b:22:f3:cc:7c:48:77:fc:ba:4d:7c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Nov  3 12:24:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7c36dc4842f73a4adaee5b58bbcfd295b6df766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:68:f1:62:19:9c:e5:68:a4:83:52:97:fe:
                    13:a9:c1:23:8c:ac:33:37:29:54:9b:71:9f:2f:f4:
                    cb:e4:4a:48:9d:bf:1a:f8:9a:7a:bd:4b:d2:ae:64:
                    cf:29:6b:30:a7:53:a8:53:26:79:0a:ac:28:ea:58:
                    fa:bd:65:48:fc:ea:1e:5d:a2:25:59:c4:ac:06:3f:
                    52:b6:e0:07:b5:01:05:53:b7:3c:0a:32:ab:f9:e1:
                    14:e6:66:e8:ec:a7:72:61:23:cc:ca:10:81:19:f2:
                    6b:5b:b7:e2:0a:77:a1:a9:c6:fc:06:c2:e3:13:46:
                    bf:af:61:23:ea:76:40:e6:63:0e:f6:e7:5f:87:a1:
                    e1:f3:4d:43:57:7c:c3:ba:3d:02:d3:16:f7:8d:a5:
                    19:9d:15:70:65:de:84:62:fd:db:f9:25:db:50:cc:
                    22:cf:11:67:64:f3:31:24:32:42:bb:51:95:09:a4:
                    c2:a9:e6:0a:92:43:ec:13:a8:d3:99:8b:40:c5:e6:
                    cb:4a:32:18:47:bd:f6:68:cd:c6:27:d1:c0:c2:29:
                    b5:7c:bc:4b:a3:f1:fc:6d:b2:e0:05:2a:da:b3:50:
                    6c:b4:f1:d2:69:da:0f:b0:f2:a1:2a:89:e3:df:9f:
                    05:63:c9:91:04:53:e7:62:2e:79:68:34:f4:2a:9b:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:6D:C4:84:2F:73:A4:AD:AE:E5:B5:8B:BC:FD:29:5B:6D:F7:66
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/x8NtxIQvc6StruW1i7z9KVtt92Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:53:5c:02:2e:22:dd:95:5c:12:9d:83:8c:8c:ff:6e:78:cb:
         43:45:f2:0e:42:4d:75:9e:c6:a9:5a:1b:33:f3:bf:a7:94:ed:
         85:60:d6:db:a4:3a:dc:51:3a:d7:73:7a:16:19:fe:43:99:32:
         0c:57:aa:80:41:25:1f:9b:ae:73:71:18:4f:b0:b6:e6:6f:56:
         95:7e:50:57:12:66:75:c0:eb:3b:f0:15:e4:cf:75:2f:95:73:
         0e:d7:58:2b:d8:1e:e1:bd:d1:23:79:75:07:1a:61:79:d0:23:
         8a:f2:81:96:f7:6d:c2:58:6f:3d:33:f9:20:87:eb:31:f5:d3:
         8c:5b:1d:ee:f6:9b:0a:a9:73:be:15:62:54:dc:ed:fd:52:9c:
         0c:7b:ae:c5:f4:45:ea:69:c6:89:bd:63:fc:c9:69:b1:3b:d6:
         9b:0c:15:12:0f:ea:fb:f3:3a:29:71:f2:a7:75:ac:9c:f9:01:
         22:97:23:5f:1a:c1:08:d5:85:88:85:15:bf:3f:8b:08:0a:8f:
         8e:17:98:d0:d6:84:37:4f:cf:69:93:bd:08:2a:70:9d:f7:07:
         44:d2:f8:0e:c0:9c:4a:62:3a:8b:fd:5c:ec:e7:be:39:e7:ad:
         41:6a:3a:bc:d8:a3:bf:1c:c5:3b:2b:04:f0:18:ee:22:67:3c:
         5c:a1:3d:71
-----BEGIN CERTIFICATE-----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