Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/uwLgeTwHUl_7xHZqMCaq2pPMxBI.roa
File:                     uwLgeTwHUl_7xHZqMCaq2pPMxBI.roa (raw, json)
Hash identifier:          x8aoaGJ4usOW1yKgJd/UBQLtqtsMVi+7sfI2F26iLjM=
Subject key identifier:   BB:02:E0:79:3C:07:52:5F:FB:C4:76:6A:30:26:AA:DA:93:CC:C4:12
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       018798E511A3FC5CF0DCB45EBAC7D2C0132C
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/uwLgeTwHUl_7xHZqMCaq2pPMxBI.roa
Signing time:             Wed 19 Apr 2023 09:42:41 +0000
ROA not before:           Wed 19 Apr 2023 09:42:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60542
IP address blocks:        185.190.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:e5:11:a3:fc:5c:f0:dc:b4:5e:ba:c7:d2:c0:13:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Apr 19 09:42:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb02e0793c07525ffbc4766a3026aada93ccc412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:2a:8b:12:07:55:76:ac:e3:1f:74:40:47:
                    08:a1:62:c7:5a:df:fb:cf:bf:10:54:7e:6f:21:f1:
                    69:24:64:d5:29:34:8d:93:f1:cf:a1:e9:71:17:b3:
                    9f:50:88:86:60:c7:ff:b7:3a:61:b4:6c:10:bf:eb:
                    83:32:a3:66:60:2b:d0:50:1a:15:ad:f2:ab:ab:be:
                    2a:6d:77:90:5d:78:c0:7c:cc:84:65:96:5c:9b:da:
                    98:44:77:7b:33:19:8b:0c:6d:29:79:5b:86:07:a4:
                    f5:f9:b8:70:c3:e1:be:3b:29:cf:c5:ac:97:7f:c1:
                    29:e3:13:4c:dc:ef:37:1f:6b:19:56:19:8c:fc:3d:
                    5a:27:07:55:f1:6b:35:9b:7b:68:32:b6:56:44:5f:
                    b5:65:82:67:63:76:f7:4a:ef:60:bd:3a:dd:21:9e:
                    20:e7:84:88:40:c4:5d:c7:b4:1b:d9:40:94:9f:c1:
                    f0:3a:9f:cb:c8:89:6c:41:ee:58:49:21:6f:95:6a:
                    b7:b8:77:d4:8a:cb:3e:86:5a:b5:8b:7a:73:8c:c4:
                    5e:08:f4:70:32:0f:3b:ea:da:45:18:ab:45:48:17:
                    5b:07:34:16:24:1f:e5:2e:c5:2e:8a:51:8b:3b:80:
                    0e:88:2f:e5:0e:2d:53:99:55:95:7e:20:72:7d:30:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:E0:79:3C:07:52:5F:FB:C4:76:6A:30:26:AA:DA:93:CC:C4:12
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/uwLgeTwHUl_7xHZqMCaq2pPMxBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:a5:36:db:40:fc:de:d4:49:ee:0f:81:9e:bf:7a:c4:5d:
         02:10:47:9a:de:5f:2c:8d:b6:89:2d:ad:97:ba:c1:90:c1:98:
         d1:b5:24:ed:7d:79:cc:e9:48:9c:15:4f:26:03:e9:f5:ed:35:
         14:64:9c:95:ae:66:52:01:ca:5a:4e:c2:01:1c:43:dc:a6:e4:
         06:c2:55:f1:ff:54:0f:11:32:cf:6a:57:93:4d:0e:1a:fb:8d:
         3e:03:6a:2a:74:b9:14:bd:1e:9b:c2:bb:fe:c4:b8:40:de:c0:
         81:3f:66:eb:a5:23:be:00:99:23:cc:80:fd:da:bc:be:f1:1a:
         9d:da:7b:59:99:8c:98:83:5c:ff:92:4b:40:cb:36:1c:5a:e3:
         1b:26:6e:f9:3c:33:60:fb:03:f1:b7:45:a8:b2:52:5a:0f:e2:
         38:d0:26:82:43:93:1c:a7:52:45:ba:a4:97:b1:07:24:f1:69:
         33:b6:f1:28:10:03:58:db:d9:2b:4a:95:80:d2:02:fa:3c:5a:
         9f:b1:9a:58:f9:79:12:97:80:60:5e:d7:9d:b4:31:6c:7b:a7:
         6b:96:d1:a3:2a:55:5a:4d:b6:4c:7a:81:fb:2f:dd:5c:b5:8f:
         7a:5c:eb:4e:ec:57:ad:ba:29:ff:93:33:6d:94:75:d8:f1:80:
         bc:4c:1d:34
-----BEGIN CERTIFICATE-----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Generated at Wed Nov 8 17:29:00 2023 by rpki-client on console-ams.rpki-client.org