Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa
File:                     4NAjCtKuTILOBkrhXHNdIsIIENw.roa (raw, json)
Hash identifier:          Bw9g0W3rQhJpYoim2VF05Qg334rEmPzwJrWn5F2G98Q=
Subject key identifier:   E0:D0:23:0A:D2:AE:4C:82:CE:06:4A:E1:5C:73:5D:22:C2:08:10:DC
Certificate issuer:       /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial:       018AB78627D684B1EDC1E20E232D384F3DCD
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa
Signing time:             Thu 21 Sep 2023 11:35:37 +0000
ROA not before:           Thu 21 Sep 2023 11:35:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        188.208.196.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b7:86:27:d6:84:b1:ed:c1:e2:0e:23:2d:38:4f:3d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
        Validity
            Not Before: Sep 21 11:35:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0d0230ad2ae4c82ce064ae15c735d22c20810dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:e8:9b:36:84:b6:cd:2a:93:27:c8:70:a5:
                    71:8b:63:8f:72:fb:75:32:a7:b5:b5:48:1f:1a:d1:
                    72:fa:43:39:f8:73:d3:2b:f0:ef:33:e7:e6:01:2b:
                    d9:10:82:6d:3b:99:e1:97:25:14:0a:27:26:1f:aa:
                    c4:44:ab:3b:c2:5b:b0:26:40:47:fd:1a:e0:c9:91:
                    6a:2e:b2:2e:f4:6e:ed:5e:3a:11:7c:7d:af:db:55:
                    6d:2a:d5:6b:dc:91:f0:30:8e:8d:9b:78:79:0a:40:
                    12:03:f1:06:81:dc:75:19:7e:f9:5e:51:94:e9:41:
                    43:c5:ab:33:13:30:30:59:4e:64:33:b9:0c:ae:11:
                    af:40:e3:01:ac:b5:73:97:00:c6:5b:db:e2:ed:03:
                    37:86:76:f4:1b:aa:34:aa:d3:cd:42:18:04:1c:45:
                    c7:73:62:c9:81:64:50:72:11:18:70:dd:0c:d8:55:
                    df:e1:0a:bb:2a:93:ec:f7:d9:3c:02:fb:38:c0:9f:
                    86:36:7e:b6:8b:9a:4c:35:ae:df:09:42:94:2c:6c:
                    6a:a9:1d:b7:64:40:ef:50:49:99:e1:e5:18:e9:0c:
                    3e:a3:61:78:b6:4c:40:f5:ce:c0:3a:7e:98:fb:ba:
                    41:3d:c2:2a:20:a9:d6:cf:a1:d2:15:21:ec:9e:5a:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:23:0A:D2:AE:4C:82:CE:06:4A:E1:5C:73:5D:22:C2:08:10:DC
            X509v3 Authority Key Identifier:
                keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/4NAjCtKuTILOBkrhXHNdIsIIENw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.208.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:89:d9:1d:64:26:bd:ab:50:02:e6:ad:b3:e2:6a:84:da:63:
         6e:ab:ce:ca:ea:e6:8c:27:43:3f:08:90:95:99:6f:54:f8:c3:
         04:65:d7:9b:b8:ff:5c:93:81:2c:fa:d6:17:2a:2c:99:2a:e8:
         ac:3b:e2:80:b8:10:85:93:37:56:1d:80:93:00:28:3a:05:16:
         7a:a7:2c:11:67:74:b9:51:14:2e:39:de:96:d4:74:9a:38:76:
         0d:57:cf:7d:dc:b1:52:a3:dc:4d:07:c3:03:ae:fe:4b:fd:0b:
         fc:4d:81:22:97:07:bf:4c:2d:a0:a7:ac:d9:56:10:89:32:05:
         5c:49:08:c1:f9:69:9b:3f:d0:2f:f2:42:0c:a4:49:89:6c:d3:
         c2:8b:42:a6:33:56:99:2d:8c:ab:0e:b8:a5:c2:e8:8b:38:08:
         99:cf:12:84:ed:83:96:3b:80:b4:03:0a:a8:54:b4:ee:35:be:
         23:8b:fe:e9:5c:87:10:e7:ce:26:79:1b:a2:92:57:6f:4a:6b:
         61:d3:3a:cb:8f:12:46:e5:c7:94:2c:f2:93:13:39:d3:0f:c3:
         2f:52:35:f5:44:fa:d9:13:82:2d:56:32:af:71:75:38:a2:d3:
         19:95:0c:ac:6e:08:17:4e:03:88:96:f3:1a:ff:5a:a7:c7:1c:
         9a:ed:5f:4c
-----BEGIN CERTIFICATE-----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