Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cB6WH0zuX40sgo6yvZxlLoy3F3U.roa
File:                     cB6WH0zuX40sgo6yvZxlLoy3F3U.roa (raw, json)
Hash identifier:          0I/CZHF2jecE6VmvzwyISYnV3dHjWHsKZsH0ITZmuQo=
Subject key identifier:   70:1E:96:1F:4C:EE:5F:8D:2C:82:8E:B2:BD:9C:65:2E:8C:B7:17:75
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       01867185762C3338692659C458B148E75984
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cB6WH0zuX40sgo6yvZxlLoy3F3U.roa
Signing time:             Tue 21 Feb 2023 01:10:17 +0000
ROA not before:           Tue 21 Feb 2023 01:10:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        14.102.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:71:85:76:2c:33:38:69:26:59:c4:58:b1:48:e7:59:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Feb 21 01:10:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=701e961f4cee5f8d2c828eb2bd9c652e8cb71775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:62:ba:8e:a6:48:75:be:ea:b8:b4:03:a1:
                    ff:5b:3f:61:ad:2e:38:da:09:57:73:6f:70:a8:f0:
                    6b:46:e5:22:68:29:ab:de:82:ef:0a:e9:58:3b:dd:
                    04:97:f8:63:58:83:20:a6:f2:c8:d8:51:02:c6:e2:
                    e9:29:aa:4a:73:9e:44:47:6d:f4:f6:d8:a3:21:c3:
                    f1:19:df:87:03:fb:1f:9f:42:5d:31:22:38:e8:cb:
                    f9:3b:ae:72:8f:6d:0c:30:ba:ae:14:47:41:8c:41:
                    24:b6:e7:b1:e4:26:b4:bb:2d:9f:85:7e:3b:20:c4:
                    89:26:69:be:0f:66:fe:f6:49:63:ff:80:7a:29:2a:
                    ad:23:1a:ee:a4:26:9f:d9:5d:78:54:3f:d4:73:d5:
                    bb:8a:5a:a4:57:79:00:c6:b3:51:c9:2a:8e:9f:ee:
                    6d:dc:f3:44:0b:d3:4c:38:68:d3:bc:d5:1d:d2:41:
                    07:57:78:be:e5:34:06:20:e4:77:a4:e9:f1:19:e3:
                    11:e1:7e:46:b1:f6:32:5f:4c:1b:c8:a9:ed:89:d8:
                    0f:84:5d:bf:bf:bc:a0:22:03:a7:a6:25:bf:6c:27:
                    0e:73:6c:fd:9e:88:ed:e1:85:1e:7f:36:4d:4c:b4:
                    58:c1:b2:f6:6b:0a:6f:ba:55:e1:37:21:81:32:8e:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:96:1F:4C:EE:5F:8D:2C:82:8E:B2:BD:9C:65:2E:8C:B7:17:75
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/cB6WH0zuX40sgo6yvZxlLoy3F3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:4e:c5:8f:d5:2b:54:56:71:88:1b:72:63:ff:af:85:62:
         ca:02:86:53:fc:69:09:2f:7e:23:a5:e5:ea:7e:90:75:3a:ed:
         45:bc:e3:18:01:c2:55:7e:e6:66:38:0c:fe:3b:25:23:0e:1a:
         84:58:30:c0:c3:f4:1b:d9:8b:bf:73:19:4d:88:5b:d0:61:61:
         d4:34:26:fb:d0:1e:d1:de:74:1d:c4:9d:22:d8:32:7d:b1:f3:
         ad:8f:a0:67:ea:c9:6d:11:4f:09:51:ed:b3:97:a2:b5:74:06:
         81:10:33:5b:a5:f1:92:83:7b:9c:d1:95:40:82:02:20:39:dc:
         ff:52:59:ca:7d:c7:fb:a2:7b:4b:14:7a:91:5f:ae:97:53:39:
         b5:df:52:5a:2e:28:c3:dc:b9:48:2c:e8:3b:00:e0:e0:e5:c5:
         53:99:be:d7:22:bb:df:60:61:e4:70:8f:a2:98:40:c2:ca:1a:
         4c:f8:16:1a:a3:f1:19:e6:44:03:da:12:ab:81:fb:7e:78:3a:
         a5:32:81:41:61:8e:dd:24:01:0a:3a:07:66:42:10:58:70:75:
         a9:e0:0e:19:85:ed:27:7f:98:ab:b7:94:41:a9:16:43:c0:22:
         8b:94:87:29:15:ab:69:9d:b2:90:bb:da:36:35:39:8e:47:4a:
         8b:0c:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----