Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CCELz_H1qvFE9R5JxW8g861SSe8.roa
File:                     CCELz_H1qvFE9R5JxW8g861SSe8.roa (raw, json)
Hash identifier:          S3ITPaquGzBtHEBa5DTEvfSWbSQjKhdk/mOWrfXuNPU=
Subject key identifier:   08:21:0B:CF:F1:F5:AA:F1:44:F5:1E:49:C5:6F:20:F3:AD:52:49:EF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018802C6972FB42E5810756D7B367ACDEEE7
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CCELz_H1qvFE9R5JxW8g861SSe8.roa
Signing time:             Tue 09 May 2023 23:09:09 +0000
ROA not before:           Tue 09 May 2023 23:09:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        146.247.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:02:c6:97:2f:b4:2e:58:10:75:6d:7b:36:7a:cd:ee:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: May  9 23:09:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08210bcff1f5aaf144f51e49c56f20f3ad5249ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:3a:28:f6:2a:c9:18:0e:80:22:47:2a:cf:
                    77:79:dd:b7:40:b3:cf:86:dd:1c:30:d9:06:de:ef:
                    7c:c1:03:75:c8:67:07:d4:74:4c:ac:f2:58:f1:a0:
                    04:05:dd:76:51:40:c0:bf:29:e3:0f:61:77:fe:aa:
                    6d:16:2e:27:aa:8b:37:00:ae:91:a4:ac:b9:12:ee:
                    6d:48:86:16:48:b5:0f:dd:70:2c:56:a0:0e:45:1e:
                    f8:62:a4:55:8e:25:a4:36:f5:e4:50:b8:f3:af:5c:
                    a2:cf:16:df:09:7a:2a:86:db:a3:26:0f:d7:d6:60:
                    d0:0b:18:94:3e:f8:8a:91:5e:af:ec:e1:52:5b:75:
                    d0:1c:34:20:83:9e:0f:6b:7e:a8:b5:5b:c9:ab:6f:
                    b4:35:4b:8c:b8:5b:0c:1d:a7:7e:7a:2b:07:60:39:
                    16:b9:3a:56:0f:32:33:f9:93:da:7a:b1:74:58:b2:
                    95:81:65:81:4c:f9:6e:a7:9f:6f:d4:59:21:a7:b4:
                    c0:a7:d9:d2:b0:61:10:b6:09:da:66:71:bf:ca:4d:
                    5b:81:28:71:ef:33:02:ec:95:51:1a:63:81:c9:99:
                    dd:58:71:1e:c7:42:cc:57:9e:46:18:73:6d:65:1c:
                    b2:6b:7a:ec:c3:03:92:46:ef:88:a5:68:97:cb:9a:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:0B:CF:F1:F5:AA:F1:44:F5:1E:49:C5:6F:20:F3:AD:52:49:EF
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/CCELz_H1qvFE9R5JxW8g861SSe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:30:02:fb:d5:29:b1:5e:b1:b2:58:e4:f9:6e:80:e2:a6:
         02:b1:0c:81:49:89:a3:9a:8e:61:da:4f:e0:e4:fb:08:80:79:
         54:83:4d:12:93:5f:44:95:54:da:b0:ca:83:32:10:0b:c2:d3:
         3a:80:ed:c1:f1:76:a1:93:fb:91:71:ad:5f:9c:52:48:a3:ac:
         de:7f:70:25:7d:92:b2:f0:b7:91:62:f8:1d:14:e4:87:a4:bf:
         41:f0:06:17:a7:82:17:f2:90:74:b1:6e:67:14:c7:07:99:31:
         a5:23:b0:b1:00:cf:ea:50:ac:0e:46:b3:41:95:76:01:a5:28:
         ec:5c:c1:9f:cc:7f:83:91:dc:87:55:0f:8a:99:53:d3:99:5a:
         dc:37:44:f3:22:b0:61:ca:82:08:5e:7e:45:42:b9:4a:01:f7:
         ec:af:a8:aa:04:8b:ed:c3:45:82:6f:39:a3:a9:1b:ce:e9:c9:
         34:72:f2:6b:88:fe:92:d4:7e:da:18:50:fa:89:31:1c:49:eb:
         01:df:da:6c:98:2c:36:01:55:39:a3:ec:d5:90:81:86:07:16:
         97:0e:64:c0:51:6b:a3:6b:bb:ca:37:63:d3:0f:e9:20:1f:bd:
         2f:ec:8d:ba:61:01:b0:6a:74:34:42:29:a7:b3:fa:7a:37:22:
         1d:76:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----