Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_jnDoV_ViCkSWujiCl7EZQBCQzI.roa
File:                     _jnDoV_ViCkSWujiCl7EZQBCQzI.roa (raw, json)
Hash identifier:          SpnZJOrG5viLxGdq/1yuRMDoQkt5mmllZATV6DevCHE=
Subject key identifier:   FE:39:C3:A1:5F:D5:88:29:12:5A:E8:E2:0A:5E:C4:65:00:42:43:32
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       0187A413EA1782EDFD774F22374D692EBC4E
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_jnDoV_ViCkSWujiCl7EZQBCQzI.roa
Signing time:             Fri 21 Apr 2023 13:49:41 +0000
ROA not before:           Fri 21 Apr 2023 13:49:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15557
IP address blocks:        89.226.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a4:13:ea:17:82:ed:fd:77:4f:22:37:4d:69:2e:bc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Apr 21 13:49:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe39c3a15fd58829125ae8e20a5ec46500424332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:6c:90:5a:72:d6:89:47:c4:39:27:d9:d5:
                    83:44:af:91:e8:0d:8b:95:b7:43:71:13:90:df:73:
                    ad:94:11:67:3d:f3:eb:10:0c:22:32:4a:0a:6b:33:
                    35:61:e8:20:c9:9b:b6:5e:33:33:31:7b:6e:57:5b:
                    45:bf:a4:55:22:c6:32:92:22:11:98:48:ae:8d:28:
                    11:9c:54:79:2d:bc:7e:47:c0:4d:7d:ff:a6:c3:d1:
                    93:8b:ef:d4:23:69:79:df:55:37:63:57:2b:2d:44:
                    0a:bb:54:7d:fc:f5:dd:ce:3e:61:c1:e8:66:11:9f:
                    33:ec:58:2d:2f:c3:b6:83:d3:ce:24:30:55:91:da:
                    b7:19:a1:47:8c:55:44:13:f9:26:6b:4a:06:38:ef:
                    43:61:ee:da:3f:0a:d6:94:04:7b:0a:5c:d5:b3:80:
                    56:c3:2a:e0:1d:f4:1a:2e:66:87:07:35:61:0c:88:
                    a1:95:26:23:f8:ce:90:df:66:a8:d9:bc:8b:5c:7e:
                    1b:6f:ee:1f:92:19:15:a3:ae:fd:e6:59:54:31:d7:
                    32:79:85:71:94:0b:6d:01:43:bc:6a:25:59:ca:a5:
                    50:df:73:3d:90:e0:53:d1:05:36:87:e8:5d:5a:0e:
                    ba:c8:39:7a:ae:5c:77:13:b0:dd:ac:de:c3:51:8d:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:C3:A1:5F:D5:88:29:12:5A:E8:E2:0A:5E:C4:65:00:42:43:32
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/_jnDoV_ViCkSWujiCl7EZQBCQzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:95:82:e4:cf:7e:09:4e:29:61:c1:e0:67:49:e2:39:cf:
         69:f7:46:a4:2d:07:a4:e8:14:90:12:ff:42:fe:4c:4c:e1:84:
         6c:8d:e1:7b:30:95:76:2a:56:47:21:19:57:c0:a7:a7:fc:54:
         ee:81:27:91:1b:72:f3:9b:3f:ce:b4:b7:ce:ea:85:43:ac:3e:
         47:23:8e:c3:e4:55:90:ca:25:81:3d:c8:5b:6e:e4:03:18:56:
         d6:5e:ed:a9:3a:01:44:f7:15:ac:d2:09:86:15:e3:6e:50:89:
         41:50:e2:3f:3b:ac:8a:52:f5:c8:39:af:e8:e9:d4:6d:a5:e5:
         81:c4:3a:56:db:5f:81:0b:08:13:eb:16:8e:08:5d:25:4c:fb:
         6d:c9:8f:67:44:77:d7:8e:49:dc:1f:c1:81:63:a2:4e:dd:63:
         c9:4c:b0:25:4b:9a:9a:bc:6e:d0:de:be:c6:66:fa:d3:0a:90:
         20:18:bd:71:ab:c9:9f:9d:fa:bf:8e:41:fc:84:a4:76:3e:9e:
         9e:a7:94:00:29:c3:69:c7:75:8d:bd:a9:9a:3d:c0:01:00:74:
         d9:b3:3e:b2:ba:ae:5a:60:ee:ad:67:04:05:07:25:1f:36:c5:
         fc:92:05:8f:91:27:c7:0a:d9:11:14:ec:78:67:83:28:10:a0:
         a9:f1:5c:9f
-----BEGIN CERTIFICATE-----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