Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa
File:                     EA__DfDHztIaw1MHBH_9Tvvu6ps.roa (raw, json)
Hash identifier:          y0cbPANljG7z1ujN2EFvDsvBnkT4iO1Rrb/NVdIGqH4=
Subject key identifier:   10:0F:FF:0D:F0:C7:CE:D2:1A:C3:53:07:04:7F:FD:4E:FB:EE:EA:9B
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       01856F5DB1B1279887925EA1562FC9DA444B
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa
Signing time:             Sun 01 Jan 2023 22:04:49 +0000
ROA not before:           Sun 01 Jan 2023 22:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51966
IP address blocks:        194.0.23.0/24 maxlen: 24
                          2001:678:1b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:5d:b1:b1:27:98:87:92:5e:a1:56:2f:c9:da:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jan  1 22:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=100fff0df0c7ced21ac35307047ffd4efbeeea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:d0:ef:ad:b0:9c:60:a4:19:2e:aa:1f:37:
                    fc:e9:e6:83:ca:66:14:88:ed:f5:98:25:9b:81:f4:
                    d6:9c:96:19:02:40:42:e5:02:13:2a:28:4c:4c:c9:
                    46:51:b4:0e:b8:67:24:bc:f2:6c:40:6a:dc:47:66:
                    7b:4c:89:39:9f:d9:05:0f:76:ea:25:78:48:17:d5:
                    a5:3d:98:e3:d9:31:1f:12:c6:94:3d:72:98:07:d9:
                    d4:86:05:4a:21:4d:5d:be:f5:76:05:8a:f6:38:3d:
                    a9:be:ef:70:37:3f:ed:f7:1a:15:77:59:16:b8:da:
                    8c:85:0f:c1:59:c0:58:3d:0d:53:f9:30:3d:58:53:
                    08:d3:ac:5a:22:fd:bf:70:3a:26:69:f6:89:06:88:
                    1d:42:49:a2:81:8d:78:09:69:64:0f:64:8a:42:cb:
                    61:6b:fc:77:b8:d2:da:10:8c:9a:7f:4d:c5:fe:2f:
                    4e:55:27:cc:11:b7:05:2a:15:bd:d3:52:92:a2:47:
                    65:5d:34:52:17:73:4b:4e:0c:19:4c:44:86:c0:46:
                    c9:1d:03:b3:68:9b:b3:69:a4:9d:49:65:d1:53:f2:
                    f0:0c:80:08:ad:a6:a5:62:41:31:90:79:71:01:f3:
                    03:fa:a4:6a:47:72:df:5f:7e:6e:c6:47:83:36:52:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0F:FF:0D:F0:C7:CE:D2:1A:C3:53:07:04:7F:FD:4E:FB:EE:EA:9B
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.23.0/24
                IPv6:
                  2001:678:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:d2:5b:cf:cb:f6:d4:80:37:65:aa:7b:8c:b7:29:38:cb:
         23:de:f3:9e:0b:92:8c:bb:8b:36:65:62:02:8d:59:78:6a:9d:
         cb:b6:44:4f:e2:c0:ed:21:de:7a:5a:ee:6f:4e:1b:2f:dd:ee:
         1e:72:38:ac:af:63:1b:00:06:56:32:7d:dc:98:1f:32:bc:27:
         ba:58:22:ed:2f:4e:29:17:df:49:83:7c:1f:2f:94:f8:2f:83:
         13:2e:37:3d:f1:55:d0:d8:83:41:ea:09:66:96:9a:be:93:e9:
         3c:84:ad:57:80:e5:b0:7d:99:ef:f1:2e:58:10:3c:20:a5:1e:
         7e:68:16:06:77:dd:cd:40:c1:36:8a:ff:2b:86:c7:c9:ea:0f:
         b1:6d:7c:9c:f3:22:9b:26:70:46:ce:79:0e:f6:64:31:7f:d0:
         fe:e0:01:3e:5e:d2:ab:b9:93:6d:19:73:e1:23:b7:f6:aa:b1:
         b9:89:7c:0a:1e:4e:85:f6:5b:23:8a:97:1a:87:0e:70:5f:a3:
         dc:c0:4d:bd:fa:b6:1d:61:a8:f1:5e:fb:88:5d:3b:42:cb:4e:
         1e:89:f4:0c:3b:91:f5:30:c0:fe:9e:0c:67:72:49:08:40:e6:
         47:1c:93:0f:2e:56:db:5b:ed:a1:b9:6a:b4:70:b6:9b:31:34:
         84:95:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----