Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/enU1Vwh-HiyG-azD6bgvULeS18c.roa
File:                     enU1Vwh-HiyG-azD6bgvULeS18c.roa (raw, json)
Hash identifier:          CFFzzGtvWr+/hbH8mM6uWnm3avpR4TOimW3QVMi/SRE=
Subject key identifier:   7A:75:35:57:08:7E:1E:2C:86:F9:AC:C3:E9:B8:2F:50:B7:92:D7:C7
Certificate issuer:       /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial:       018CC5003F2711F4912E9680E4DFFF3C6236
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/enU1Vwh-HiyG-azD6bgvULeS18c.roa
Signing time:             Mon 01 Jan 2024 12:29:36 +0000
ROA not before:           Mon 01 Jan 2024 12:29:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60111
IP address blocks:        185.126.108.0/22 maxlen: 22
                          2a06:c080::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:3f:27:11:f4:91:2e:96:80:e4:df:ff:3c:62:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
        Validity
            Not Before: Jan  1 12:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a753557087e1e2c86f9acc3e9b82f50b792d7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:7b:50:0c:9e:d5:a6:30:e6:7f:ad:25:36:
                    15:62:d5:82:e8:f0:47:bc:dc:db:d3:b5:5e:3d:b2:
                    ec:be:6c:55:aa:b0:25:96:46:15:84:87:dd:e2:9f:
                    38:bc:c1:b3:76:42:31:2a:91:f9:20:b1:31:f0:0a:
                    ec:6d:40:6a:03:ab:84:f9:13:2d:02:e3:d9:34:67:
                    16:e0:42:f8:68:42:64:75:51:87:44:e3:0f:e9:7b:
                    b2:39:2c:ad:e6:22:d8:18:5e:64:64:f0:86:1b:95:
                    95:d4:24:22:cf:a6:12:ca:d9:63:32:4a:95:2e:3d:
                    9e:83:bf:93:96:57:2f:f0:12:42:f0:f9:a6:ca:66:
                    60:3c:40:df:7f:f6:a2:cc:3f:ee:e7:1f:af:64:a7:
                    54:92:c8:a5:c8:a4:61:14:23:33:d2:24:5f:66:06:
                    09:a4:3e:bc:f3:1f:2a:bc:81:0e:47:5e:74:e4:80:
                    1b:f4:df:a9:ae:e5:ab:43:92:f8:50:75:c9:77:ae:
                    c4:55:63:61:e2:ac:2b:8a:3c:93:09:91:17:f2:e9:
                    0c:f9:02:a0:17:1f:01:fa:51:04:05:13:65:dc:fd:
                    22:a7:25:7f:cd:e6:1f:1d:e6:82:cc:22:a1:40:ab:
                    87:83:43:c3:aa:81:6a:f2:10:e0:5b:dc:a1:ac:71:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:75:35:57:08:7E:1E:2C:86:F9:AC:C3:E9:B8:2F:50:B7:92:D7:C7
            X509v3 Authority Key Identifier:
                keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/enU1Vwh-HiyG-azD6bgvULeS18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.108.0/22
                IPv6:
                  2a06:c080::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:29:b2:b7:65:8e:18:6d:f6:5b:19:56:51:ce:0c:9d:93:
         02:79:f3:ca:6a:df:b3:58:84:d1:e1:42:64:1b:3e:30:bb:9e:
         5b:f3:4c:c8:ec:b3:16:f0:9a:f2:9b:3e:90:c6:82:54:f9:98:
         04:db:96:da:b6:a6:74:6e:b1:6a:07:9c:af:77:62:6b:ed:24:
         bb:e4:d3:aa:66:41:81:cf:ee:d6:88:80:17:7a:1f:ef:07:29:
         87:78:e9:45:1a:f4:ee:ed:83:46:c4:17:42:10:f6:45:c9:e6:
         6e:8e:17:5c:a6:9b:ac:96:23:f2:8b:35:13:3e:ad:1b:1e:e0:
         f2:36:d5:6b:a7:2c:92:54:22:6b:bd:39:3a:90:16:cd:a2:34:
         06:7a:d9:7f:4f:92:56:56:80:8d:2f:f1:6b:7e:68:03:9d:93:
         43:1d:cc:d2:68:db:ad:8d:c2:1a:a1:f1:7f:00:ec:86:47:b9:
         14:e8:c9:76:5c:14:8d:8e:68:55:bb:44:46:67:bb:92:6d:95:
         04:9a:17:06:0a:3e:51:0c:19:75:f0:a5:ca:38:d5:8b:58:00:
         05:9e:22:96:7d:f1:20:45:8a:a4:12:f4:a0:15:64:85:55:16:
         f9:07:5e:9b:9d:c6:78:9b:01:b9:ad:0f:2d:05:28:b8:b0:80:
         8b:f7:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----