Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Q3vpqT-1CBBU_4qHl97el0tWeX4.roa
File:                     Q3vpqT-1CBBU_4qHl97el0tWeX4.roa (raw, json)
Hash identifier:          6J9pPlluAyNXDQPBv8oCQ5KwUMaxaO9h0EFH/8zt76s=
Subject key identifier:   43:7B:E9:A9:3F:B5:08:10:54:FF:8A:87:97:DE:DE:97:4B:56:79:7E
Certificate issuer:       /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial:       0185E4425FBA021CDE98700D893C39E60C22
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Q3vpqT-1CBBU_4qHl97el0tWeX4.roa
Signing time:             Tue 24 Jan 2023 14:50:33 +0000
ROA not before:           Tue 24 Jan 2023 14:50:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200195
IP address blocks:        138.124.181.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:42:5f:ba:02:1c:de:98:70:0d:89:3c:39:e6:0c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
        Validity
            Not Before: Jan 24 14:50:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=437be9a93fb5081054ff8a8797dede974b56797e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:0d:55:37:2e:45:47:7c:51:a6:5d:42:fa:
                    a1:da:87:10:ea:35:56:eb:ba:eb:d2:66:84:e7:a1:
                    ba:1d:73:59:76:37:52:50:ee:76:15:30:98:76:6d:
                    eb:14:62:ce:00:8f:4a:de:9b:b0:c9:6c:44:48:d7:
                    27:1b:d7:73:57:dd:c2:f9:df:68:a1:f3:26:e9:ff:
                    99:6f:e0:d0:53:2f:91:f9:98:e3:96:dc:e8:30:1c:
                    e6:ec:0f:8b:34:c7:40:47:1f:1a:c6:13:b7:82:06:
                    51:76:b7:e2:37:f1:52:d0:6b:77:7d:a8:57:c7:63:
                    1c:ef:4b:18:70:42:6c:5a:52:79:5b:fd:06:ae:f3:
                    48:68:57:9e:02:e4:ca:1e:6c:eb:a4:a4:74:88:5c:
                    33:2b:5d:37:db:5e:b3:21:36:ff:73:a3:61:c1:4c:
                    7b:c0:ae:26:f9:83:ad:bd:39:2f:66:6e:14:d9:4b:
                    8c:03:a2:2b:fb:41:df:30:e5:b1:32:18:14:55:af:
                    40:a7:9b:f1:e9:90:d1:de:f0:86:09:8b:5f:0f:b0:
                    56:3f:e5:17:c6:3a:00:f1:4e:c2:e4:8e:cc:1e:3a:
                    4e:8f:b9:ea:0a:e7:0f:b6:0d:e3:7e:13:e2:a1:b1:
                    fc:58:22:e9:65:44:d2:d5:45:19:d1:a4:78:4a:90:
                    64:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:E9:A9:3F:B5:08:10:54:FF:8A:87:97:DE:DE:97:4B:56:79:7E
            X509v3 Authority Key Identifier:
                keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Q3vpqT-1CBBU_4qHl97el0tWeX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.124.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:40:b7:07:82:7d:a8:2e:79:62:ca:e9:52:50:c7:c2:4f:29:
         59:a3:90:c3:e5:c5:3c:0f:f5:b0:0d:5e:2f:49:6d:17:ef:41:
         72:53:58:09:a3:e5:aa:27:0c:95:ee:1f:c2:0d:e2:a5:0b:71:
         ce:eb:5f:9f:bf:91:90:8c:5a:87:66:78:3e:fc:df:85:e9:04:
         7d:1c:32:fb:aa:db:90:5d:21:c6:5b:12:4f:32:ff:ed:60:12:
         16:32:a7:a1:1e:ff:45:5e:b7:1b:c5:f5:1f:49:f6:f4:36:bd:
         7d:9e:46:f9:17:7d:26:2f:9c:7c:91:2b:b9:91:ae:fe:c8:68:
         c6:2a:2c:d7:b6:85:6f:8a:58:c6:37:02:9f:08:26:a4:12:1d:
         07:bd:fe:e3:1a:92:5e:00:ae:05:08:ca:dd:c9:2f:36:18:b2:
         67:64:35:72:b5:ec:d1:f7:20:eb:6c:04:b8:74:e3:21:5a:f7:
         d6:62:95:a8:0a:bf:8a:63:5b:30:14:49:c5:a9:54:7c:da:ff:
         66:d2:69:6f:86:9c:f7:7a:d3:37:fc:58:8b:15:3e:df:69:76:
         0b:a6:09:db:cf:7c:25:e5:da:bc:30:48:92:49:5a:71:4f:0d:
         55:e1:1b:49:5a:8c:2f:a7:25:e2:a9:53:3e:26:49:07:6e:dc:
         e2:92:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----