Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/1-XaU3HwkHxSk1mhtwK7mStyxOoE.roa
File:                     1-XaU3HwkHxSk1mhtwK7mStyxOoE.roa (raw, json)
Hash identifier:          cXZXtoftA2PRGzZz2Z/t1H45T37k9ysZuseB5XpAghw=
Subject key identifier:   F9:76:94:DC:7C:24:1F:14:A4:D6:68:6D:C0:AE:E6:4A:DC:B1:3A:81
Certificate issuer:       /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial:       018A666EBCA015D1FD585E3D3A7D12512A67
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/1-XaU3HwkHxSk1mhtwK7mStyxOoE.roa
Signing time:             Tue 05 Sep 2023 17:40:47 +0000
ROA not before:           Tue 05 Sep 2023 17:40:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205158
IP address blocks:        194.56.182.0/24 maxlen: 24
                          2a11:3a00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:66:6e:bc:a0:15:d1:fd:58:5e:3d:3a:7d:12:51:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
        Validity
            Not Before: Sep  5 17:40:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f97694dc7c241f14a4d6686dc0aee64adcb13a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:1b:6c:d3:a6:6c:f0:14:a8:ab:54:38:d8:
                    c1:b6:89:07:9d:2e:18:45:06:61:3f:4d:7b:f8:56:
                    0b:19:83:8d:5e:2b:1d:25:88:a9:1a:30:1d:db:ca:
                    05:28:6a:c8:d7:15:2a:e7:b6:83:af:7a:a0:42:ce:
                    e7:7a:c7:26:8c:af:53:13:09:98:2b:0c:88:98:48:
                    d8:ff:a6:c5:1c:f0:10:46:ff:e3:39:36:39:31:ed:
                    3c:1b:d8:6e:27:e4:58:d0:b3:85:ab:37:9f:f9:dd:
                    65:12:bd:08:b6:ad:15:fe:cb:7d:6f:f3:a0:71:af:
                    d5:dc:3c:24:5a:6d:bc:aa:0b:95:58:08:29:61:95:
                    1a:b0:98:dd:1f:bd:8b:1f:ca:0f:35:1c:1c:f1:b5:
                    4b:8b:f5:04:35:a4:56:cf:c0:fc:6c:e7:bc:09:9b:
                    be:50:5e:fc:e1:57:13:2a:97:e8:7b:e7:d7:d9:c3:
                    6d:de:65:28:f6:d9:71:0a:8c:6a:0b:27:35:00:15:
                    7b:2a:51:b4:cf:0d:74:31:4a:22:65:dc:ce:66:c0:
                    be:81:8d:38:15:e9:fe:01:31:ea:ca:8c:27:92:f9:
                    50:02:92:ac:2c:59:77:d3:c1:3f:aa:85:8d:ff:85:
                    4a:56:77:87:2e:c9:c0:f8:ab:00:9f:6a:7a:0f:d1:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:94:DC:7C:24:1F:14:A4:D6:68:6D:C0:AE:E6:4A:DC:B1:3A:81
            X509v3 Authority Key Identifier:
                keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/1-XaU3HwkHxSk1mhtwK7mStyxOoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.182.0/24
                IPv6:
                  2a11:3a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:1e:00:9a:e5:44:95:81:ca:e8:5b:0e:a6:63:88:8b:8c:
         ce:88:f5:5a:cf:e6:aa:a2:08:3d:d3:55:01:81:a7:00:43:f3:
         e3:eb:c8:46:40:39:7a:c1:64:d2:63:53:d2:c6:1e:6b:26:55:
         fd:7f:1c:36:c9:44:b4:43:d2:2b:36:d8:c2:c6:c4:10:e3:28:
         d5:99:2f:32:0e:62:64:db:37:62:3a:60:c5:08:85:91:04:43:
         93:2f:d0:88:28:83:6d:3e:22:df:e7:4e:74:97:6c:17:72:e4:
         a2:ec:16:7c:4d:01:94:e3:61:8c:5a:e3:0c:a2:3e:b0:1e:21:
         4d:7b:14:ae:87:24:ed:ad:93:29:80:7f:d8:5f:9a:20:fa:f7:
         95:e2:e6:b2:80:81:19:7c:21:1f:fc:4c:09:c0:65:b8:1e:74:
         ab:de:f9:17:03:dc:17:d4:b2:45:71:71:2b:5b:52:9a:51:c5:
         58:55:27:6e:3c:3d:4f:9b:e0:44:9c:87:ce:3d:f0:2a:c3:69:
         dc:63:10:d4:0d:4a:1e:60:89:f1:71:b0:58:f3:aa:59:e0:97:
         1f:e9:c8:c8:05:8c:cf:bb:55:f9:52:08:c3:9d:34:07:8b:cd:
         2e:ef:e9:9d:98:61:bd:3b:55:69:5b:67:ce:ee:62:f8:d1:1c:
         06:0c:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----