Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa
File:                     2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa (raw, json)
Hash identifier:          93KjYBngvMwR3MrE/Rumiq7fCMe5U5RpsDe6ctEr32s=
Subject key identifier:   D9:4D:F5:06:5D:86:5A:8C:1C:66:45:99:E3:CC:31:9F:15:3E:06:74
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       01888F7AE48D110B4CA6884D07CBA4CE228B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa
Signing time:             Tue 06 Jun 2023 06:52:55 +0000
ROA not before:           Tue 06 Jun 2023 06:52:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.242.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8f:7a:e4:8d:11:0b:4c:a6:88:4d:07:cb:a4:ce:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Jun  6 06:52:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d94df5065d865a8c1c664599e3cc319f153e0674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:69:b3:be:7e:d5:74:f2:b6:47:91:70:d3:
                    2a:d3:b2:aa:d1:90:2d:b1:6a:a7:08:f2:2b:07:e7:
                    85:01:85:43:51:86:11:ca:05:a0:94:68:68:57:ea:
                    25:b9:30:4c:bb:dd:f3:44:44:8c:58:b7:5c:40:e4:
                    d1:24:e9:9c:ef:ef:70:41:8d:21:cc:ae:37:27:7b:
                    27:1b:e4:3b:76:7b:1e:dd:10:ad:a9:5f:c1:34:74:
                    dc:7a:70:01:59:c3:fb:42:12:9d:4d:b3:af:17:71:
                    7b:3f:63:68:bc:61:ac:b7:fd:33:79:3e:56:e1:9d:
                    6f:d5:85:66:1c:cf:c6:6a:8e:0c:36:0f:72:1a:c5:
                    9e:a5:f0:29:a4:93:57:67:ea:99:b8:2b:34:80:f3:
                    78:d7:a2:c9:ce:d6:ea:59:dc:59:24:f8:33:04:b6:
                    e9:5b:19:77:20:ba:af:f3:98:dd:f0:b7:2d:51:b0:
                    88:d0:1b:f1:f5:ad:3b:bf:c9:22:95:54:fc:3f:bb:
                    51:fa:4c:d6:28:87:ec:9f:6e:11:51:87:af:1c:48:
                    9a:f4:53:a8:b3:68:d8:5c:dd:2a:63:33:f6:59:21:
                    0d:12:b5:b8:05:58:b9:a8:36:ea:82:b6:60:9a:55:
                    19:ef:22:eb:fb:32:d2:a0:3d:1f:d7:1e:43:b8:1c:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:F5:06:5D:86:5A:8C:1C:66:45:99:E3:CC:31:9F:15:3E:06:74
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/2U31Bl2GWowcZkWZ48wxnxU-BnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:2a:cf:9e:35:ba:b4:ea:5d:75:f2:da:ef:91:ee:e9:03:
         66:38:c1:ac:f3:67:24:8a:bc:b2:58:3b:3b:6b:14:49:d1:2e:
         6e:5f:c5:9b:b5:bb:a8:5b:b4:04:2f:eb:ba:09:8a:33:0f:73:
         7c:cb:7d:1f:9c:04:1f:13:3d:76:9d:04:fa:9e:4c:40:ca:01:
         52:08:50:42:57:23:89:1c:02:df:5f:7a:78:f7:22:d0:ea:12:
         4f:8c:1c:b4:bf:fa:b4:4e:d7:6d:7e:ea:f8:23:ff:10:ba:41:
         58:c8:5c:a0:6c:06:9f:22:fd:da:1c:7e:95:0c:f2:c6:a0:14:
         3e:df:80:e5:98:25:58:ce:53:c9:eb:5f:ff:ee:0b:3e:93:87:
         ec:ea:cd:cf:92:96:08:67:9d:a6:09:91:64:85:bd:0a:a0:2b:
         a9:ef:27:66:6a:94:19:d7:5d:01:2a:86:f8:89:2c:08:ee:66:
         e1:82:11:91:76:67:bd:2b:81:e5:52:5a:22:df:43:c6:3c:2e:
         15:a1:98:1d:a1:a5:8a:48:01:e2:d4:55:58:77:2a:70:19:ee:
         45:b6:86:ea:5b:a7:28:8f:da:ae:d8:ca:d4:70:4d:a2:80:17:
         70:65:16:46:61:e4:d7:97:0e:db:e7:89:05:4a:60:f3:2a:29:
         1a:30:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----