Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/E2VLHkN8-9TuZgOQmyVbijGBYdM.roa
File:                     E2VLHkN8-9TuZgOQmyVbijGBYdM.roa (raw, json)
Hash identifier:          agoWg1dHeRHSoNRG7k+bK55M+JgM7J6WS/RwE7tT/b4=
Subject key identifier:   13:65:4B:1E:43:7C:FB:D4:EE:66:03:90:9B:25:5B:8A:31:81:61:D3
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018572BA6E1182F03D5835CEB52D503DC433
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/E2VLHkN8-9TuZgOQmyVbijGBYdM.roa
Signing time:             Mon 02 Jan 2023 13:44:58 +0000
ROA not before:           Mon 02 Jan 2023 13:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29119
IP address blocks:        217.113.18.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:6e:11:82:f0:3d:58:35:ce:b5:2d:50:3d:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  2 13:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13654b1e437cfbd4ee6603909b255b8a318161d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:75:8c:ca:e0:0c:47:4e:71:fd:19:1f:6e:
                    d8:45:4a:dc:7c:ef:b4:a5:ff:d9:50:73:6e:4d:12:
                    6f:6e:c7:fe:b5:f5:2d:7d:71:f7:16:07:7c:ec:95:
                    7c:6b:2c:57:5b:06:68:0c:cc:68:8b:7e:fc:8d:ac:
                    20:40:b5:98:28:50:07:2c:20:76:c2:d0:a1:2e:40:
                    0f:9e:0a:b1:f3:49:fc:f8:51:c3:c3:70:c9:f8:f1:
                    a4:c6:89:6b:b5:2a:2a:a0:89:76:14:52:4f:64:45:
                    1d:ff:49:15:4a:4b:7a:af:54:1e:13:34:50:23:0e:
                    e1:44:1a:18:4c:e5:47:41:a2:f5:46:2e:a6:b9:1c:
                    f8:39:8f:4a:77:3d:00:ce:db:9a:fa:43:61:63:66:
                    16:3f:27:89:ea:39:36:97:46:8b:53:75:e4:c3:eb:
                    bd:46:c1:44:4a:fe:cb:6a:96:5f:73:7c:71:3a:fa:
                    5e:72:8c:db:ac:bb:f8:be:59:dd:dc:e5:3c:a8:85:
                    5e:89:63:76:e7:4a:3c:8e:31:65:43:4a:0d:34:31:
                    34:fd:66:54:19:b3:26:67:1b:eb:a1:db:c5:99:d9:
                    4f:20:a7:66:4a:c8:23:0b:0c:be:af:93:65:3a:bb:
                    5b:bc:ce:37:40:2d:98:51:aa:a8:83:1f:82:d1:53:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:4B:1E:43:7C:FB:D4:EE:66:03:90:9B:25:5B:8A:31:81:61:D3
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/E2VLHkN8-9TuZgOQmyVbijGBYdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:21:00:92:74:42:2d:78:8f:d7:cb:22:ef:fb:bc:f9:a0:42:
         1f:46:2a:6f:ff:9f:75:a3:e1:c2:3d:fd:6c:7c:9a:72:5d:ce:
         e3:35:bc:c5:af:07:c9:54:2a:b3:7a:b0:23:f5:49:a6:28:79:
         75:e7:8d:98:9c:e1:3d:8b:96:67:d2:9a:34:49:f7:c9:1a:cb:
         82:df:14:74:e5:d6:fe:60:58:4c:5a:1d:0d:24:84:99:36:89:
         03:3d:9d:ff:1c:9b:1e:9c:07:46:7f:9d:ce:6b:2e:e6:96:97:
         81:e5:3d:d3:f4:93:99:3d:c3:d8:6e:39:b0:bc:38:a7:cc:b0:
         da:a5:6c:8f:ba:0f:c1:e5:c0:d0:fb:29:0f:bd:be:27:30:2f:
         56:cf:1b:f1:00:3d:4e:90:f5:08:ca:22:a3:45:9d:ee:26:5b:
         58:13:d4:88:d1:43:74:e1:31:be:5a:2a:9e:b4:e1:e9:11:7f:
         e3:fd:68:db:f3:42:e0:27:1c:51:7e:a2:90:df:cc:26:b2:ec:
         47:cb:e5:2b:4b:49:e6:16:40:e9:e8:9f:71:a5:5d:82:c7:cb:
         b1:6c:c2:7f:46:ca:15:5b:e6:97:5c:d9:0c:65:e9:a9:53:71:
         b5:61:3f:6b:19:db:0a:24:ba:35:7d:a8:d9:32:80:dc:63:3a:
         da:21:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----