Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Ll6joojoSuevd5BE4pj8nWgMoSc.roa
File:                     Ll6joojoSuevd5BE4pj8nWgMoSc.roa (raw, json)
Hash identifier:          JdCirVLO1vVGt+4GukbrYf2q/zkdfys7HsTdtAXAkps=
Subject key identifier:   2E:5E:A3:A2:88:E8:4A:E7:AF:77:90:44:E2:98:FC:9D:68:0C:A1:27
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0188051C6FC55B87A90CD324BFE6C3690485
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Ll6joojoSuevd5BE4pj8nWgMoSc.roa
Signing time:             Wed 10 May 2023 10:02:09 +0000
ROA not before:           Wed 10 May 2023 10:02:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54339
IP address blocks:        87.246.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:1c:6f:c5:5b:87:a9:0c:d3:24:bf:e6:c3:69:04:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: May 10 10:02:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e5ea3a288e84ae7af779044e298fc9d680ca127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:5d:bc:09:c1:e2:86:5e:04:2d:51:98:12:
                    1f:13:f3:64:e2:ec:f3:9a:da:aa:a8:db:0e:18:93:
                    88:9c:7a:cd:34:47:dd:3f:1d:4d:e2:f4:16:4e:37:
                    5c:5c:2b:15:75:4c:de:26:44:0f:fd:6a:e9:d7:00:
                    6b:b1:bf:c1:1f:02:2c:62:b8:d7:4e:da:bb:ea:a3:
                    8d:cf:63:c1:71:ed:f4:62:ab:78:c2:37:33:a8:5c:
                    a5:99:ce:29:2b:86:1c:6d:05:b4:f1:62:0a:2f:5d:
                    97:22:84:60:ab:05:50:3f:56:0d:fb:75:ba:e4:f9:
                    57:7c:43:25:c5:8f:6d:af:8b:ee:8a:3a:8a:96:30:
                    5c:22:2d:c9:21:bb:cb:1d:91:d4:b3:66:2a:a1:f6:
                    b5:61:9b:ca:5e:12:0a:3a:02:ed:36:75:a8:0c:4e:
                    c4:e1:13:4a:d1:0b:09:e2:9b:ef:03:fb:d1:c3:a3:
                    37:6c:79:6f:fa:bc:19:ee:7d:58:25:76:fa:2f:11:
                    1b:e9:4b:24:48:88:bf:53:ae:12:7a:dc:0f:df:01:
                    9a:f8:d7:1d:37:59:7e:c3:1d:c8:8f:60:78:6c:8a:
                    bc:bb:95:15:ba:04:da:7a:97:88:2c:ed:1f:c9:00:
                    0a:37:36:3a:f5:ef:d7:c2:3c:7e:7d:43:7c:4e:ae:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5E:A3:A2:88:E8:4A:E7:AF:77:90:44:E2:98:FC:9D:68:0C:A1:27
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Ll6joojoSuevd5BE4pj8nWgMoSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:0f:4c:ff:28:67:28:e2:4b:77:0d:a5:78:5c:99:8b:60:
         48:6f:0a:0c:f8:47:34:70:bc:0c:23:87:69:65:12:73:01:54:
         0a:49:e6:9e:e9:15:ca:85:bf:9f:a7:43:39:d7:bb:d5:9b:4c:
         32:e2:7a:99:e6:c7:72:22:cb:b5:56:fb:a5:09:70:18:d7:a7:
         5c:22:88:ce:b0:4f:67:c9:c6:f7:c1:73:68:f4:01:5a:98:62:
         b4:2a:e7:e4:c2:28:82:b2:c0:4d:71:10:b9:da:5e:26:58:3e:
         3d:ce:66:ab:47:cb:06:4c:43:fa:af:b0:4c:00:4f:27:05:59:
         98:53:51:54:c0:70:44:9d:b9:21:31:81:e5:b9:6c:b5:1a:e9:
         d4:17:6d:18:07:f9:f3:59:ee:5b:24:17:ed:29:94:44:fd:21:
         36:03:cd:7c:2d:5f:46:38:f1:d2:ac:b3:75:fd:9f:3e:de:28:
         ad:a0:eb:b5:98:65:de:22:87:10:51:66:c7:17:bc:05:bc:c5:
         2e:ba:6d:53:3a:28:ca:36:2a:ae:88:ca:37:28:c3:60:2a:fa:
         f6:83:5e:5e:44:4d:be:6a:5b:44:37:6e:d8:bc:e0:76:92:78:
         97:66:d4:b6:32:3b:54:bb:c1:50:ba:3a:24:d0:bb:88:73:f5:
         8c:a0:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----