Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa
File:                     8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa (raw, json)
Hash identifier:          /jKZ7zrdtx7uU8wZ+IrLGcRToJmLpt/n4j4B15nB0Q0=
Subject key identifier:   F1:78:57:D1:20:2B:FC:DD:D6:F1:D9:50:FB:C8:D2:8B:64:F9:65:8E
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       018570E76572BA969CCA46A77FC154845A79
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa
Signing time:             Mon 02 Jan 2023 05:14:51 +0000
ROA not before:           Mon 02 Jan 2023 05:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44574
IP address blocks:        193.150.34.0/24 maxlen: 24
                          91.230.181.0/24 maxlen: 24
                          193.104.113.0/24 maxlen: 24
                          95.215.174.0/24 maxlen: 24
                          95.215.175.0/24 maxlen: 24
                          2001:678:498::/48 maxlen: 48
                          2001:678:4a0::/48 maxlen: 48
                          2001:67c:16d1::/48 maxlen: 48
                          2001:67c:1954::/48 maxlen: 48
                          2001:678:4a4::/48 maxlen: 48
                          2001:678:49c::/48 maxlen: 48
                          2001:67c:16d0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:65:72:ba:96:9c:ca:46:a7:7f:c1:54:84:5a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Jan  2 05:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f17857d1202bfcddd6f1d950fbc8d28b64f9658e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:7d:9a:6e:dd:8a:8f:d5:14:14:5f:5e:0a:
                    53:c7:28:af:e6:96:f9:3c:e3:04:c6:d0:c0:65:90:
                    70:e3:f4:38:6a:6e:2a:3c:57:e8:ea:04:45:8e:8f:
                    5a:7d:a3:84:e5:bf:b6:bf:f9:8b:65:3a:df:33:5a:
                    d8:7d:f2:d8:d9:4d:c2:a2:61:c8:fa:5b:35:39:47:
                    1a:80:a6:4f:6d:b4:f6:ed:cf:a8:35:86:72:cd:d1:
                    b3:7f:3f:64:bb:e3:59:21:e5:1f:58:5b:66:84:82:
                    81:24:64:12:b1:24:b0:d4:d9:5c:ff:93:fd:93:74:
                    63:e3:6d:18:9d:02:77:d0:05:ce:04:b2:20:13:ed:
                    d9:ee:5b:b1:f1:fa:f6:3d:13:1d:99:a5:1d:60:7f:
                    27:af:bf:41:e8:1a:24:05:28:83:c3:08:39:76:72:
                    65:a8:93:4f:e4:8a:69:e3:58:a0:72:e6:73:d1:c8:
                    ce:4d:8c:14:d8:89:34:03:3e:f3:7d:d5:d4:1d:9c:
                    b9:92:02:96:1d:4e:66:05:7a:9e:ac:1d:6c:af:cb:
                    35:73:17:4d:6e:7f:74:eb:9e:0e:fb:68:04:92:03:
                    d2:b5:22:44:f2:71:bf:e6:3c:2d:fd:88:b3:25:60:
                    a5:dc:e8:4d:01:c6:bc:82:da:7b:4b:17:0a:e0:c5:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:57:D1:20:2B:FC:DD:D6:F1:D9:50:FB:C8:D2:8B:64:F9:65:8E
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.181.0/24
                  95.215.174.0/23
                  193.104.113.0/24
                  193.150.34.0/24
                IPv6:
                  2001:678:498::/48
                  2001:678:49c::/48
                  2001:678:4a0::/48
                  2001:678:4a4::/48
                  2001:67c:16d0::/47
                  2001:67c:1954::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:7a:22:41:43:30:f6:9f:d0:eb:82:49:fa:a7:3e:9a:3e:
         81:3b:8e:9d:ed:f5:c0:3b:ea:a0:a3:9c:fa:72:fb:72:95:36:
         7a:7d:b3:e1:ac:43:e3:2e:62:0c:8b:30:59:e2:c4:cb:94:ea:
         59:6c:48:52:ab:47:62:a9:55:97:ef:d8:34:3a:b0:54:ef:75:
         b7:94:32:71:c3:fe:eb:8b:85:21:d5:ab:06:e2:a6:44:42:4c:
         21:02:1e:e9:22:b7:0e:a5:0a:88:a4:21:4e:b2:0f:ba:43:c9:
         bf:16:d8:99:5f:13:ed:41:95:cf:39:9c:7c:0e:b6:a7:d5:d8:
         15:85:b5:98:f3:ed:89:87:14:a2:5a:09:b0:a3:c8:c7:6d:27:
         e9:99:b1:6f:2e:41:9a:89:dd:55:9a:39:01:fc:28:6d:57:d2:
         92:00:15:06:6c:da:e1:d9:d6:67:09:73:7f:d8:e2:0a:9b:6a:
         ef:21:0d:76:84:02:3b:75:50:f4:a3:9f:95:57:82:39:7a:ab:
         a1:1a:93:45:74:d1:22:bb:fb:d1:73:16:19:7b:f9:90:ff:df:
         f1:28:7b:10:c4:79:fb:e5:3a:36:67:35:b3:66:99:33:57:67:
         03:d1:b4:c9:b3:03:88:c5:73:1a:9f:e1:31:58:27:30:ab:7e:
         3e:e0:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----