Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/3kJ98OhPcCvGs_7BDv47CsPf1YM.roa
File:                     3kJ98OhPcCvGs_7BDv47CsPf1YM.roa (raw, json)
Hash identifier:          ExGcTfpnHT4yP9pu0xMyLk4+k8YtWrfsCReB+cHSYBQ=
Subject key identifier:   DE:42:7D:F0:E8:4F:70:2B:C6:B3:FE:C1:0E:FE:3B:0A:C3:DF:D5:83
Certificate issuer:       /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial:       0185E2B820F96309C11294223AD8424FD74E
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/3kJ98OhPcCvGs_7BDv47CsPf1YM.roa
Signing time:             Tue 24 Jan 2023 07:39:55 +0000
ROA not before:           Tue 24 Jan 2023 07:39:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29624
IP address blocks:        82.212.192.0/19 maxlen: 19
                          2a00:cb0::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e2:b8:20:f9:63:09:c1:12:94:22:3a:d8:42:4f:d7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
        Validity
            Not Before: Jan 24 07:39:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de427df0e84f702bc6b3fec10efe3b0ac3dfd583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:11:e2:a9:b2:f4:a5:b8:0f:3c:b9:0e:72:
                    68:5f:aa:3c:f4:16:df:50:5e:a5:e0:5e:75:6f:6b:
                    6a:64:fc:33:04:b7:e6:94:af:83:3a:de:51:8a:11:
                    5c:9b:1d:93:06:81:f6:d0:b1:b6:19:5d:23:3e:33:
                    02:98:0f:14:e3:86:e4:c8:51:6e:ae:8f:01:17:e1:
                    fa:3f:d5:08:60:ad:22:88:a7:97:9f:3f:71:0f:65:
                    9c:37:cd:df:70:73:8b:3b:8c:d7:fe:71:c5:49:c4:
                    08:2e:ca:61:cf:e1:91:3c:b6:ce:41:87:d3:d9:87:
                    ae:76:43:05:64:d6:29:dc:d8:fe:f0:41:8c:2a:74:
                    3d:46:04:1c:f5:a9:e9:26:ba:f2:aa:ea:d7:20:86:
                    7b:be:b8:e8:af:6e:43:be:7e:82:d7:4b:a3:de:29:
                    58:e2:9a:7f:8e:e2:c7:3b:84:e2:46:9b:19:a2:5f:
                    31:6c:6f:7d:63:d8:95:f4:57:35:ba:0a:c2:28:77:
                    8e:6e:76:26:b8:6b:d7:ab:35:f4:bc:96:19:fe:95:
                    9f:5a:02:10:fa:26:aa:6d:34:0c:92:fb:ac:8b:04:
                    83:39:f8:2b:38:25:1e:32:16:12:e4:c3:29:ff:d0:
                    b5:d6:68:3d:31:cf:b9:e8:6f:d3:6c:87:21:e5:42:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:42:7D:F0:E8:4F:70:2B:C6:B3:FE:C1:0E:FE:3B:0A:C3:DF:D5:83
            X509v3 Authority Key Identifier:
                keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/3kJ98OhPcCvGs_7BDv47CsPf1YM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.212.192.0/19
                IPv6:
                  2a00:cb0::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:bd:dc:ef:53:1a:7c:db:df:49:42:8b:e6:64:a8:b4:a4:
         85:9c:bb:a8:71:62:6c:0b:88:bf:77:ef:a0:41:ed:00:84:db:
         f8:ed:f4:ba:21:57:11:2b:ce:49:77:a8:83:9d:a3:7c:bf:bb:
         36:7f:4c:76:a0:61:88:b2:1d:9c:32:4c:37:26:dc:72:da:bb:
         c3:d5:cf:9b:0c:48:19:4b:ed:87:11:7a:b8:f2:77:d7:f5:93:
         1d:e9:19:e6:ab:81:67:07:64:63:fb:bf:85:87:d4:a4:dd:c5:
         70:90:ff:86:f3:c9:31:16:90:7f:c8:d0:60:b5:bc:a8:53:a3:
         9a:fb:42:a5:e1:06:77:be:f9:b7:79:81:51:a0:37:84:2b:a2:
         59:c4:bc:e4:25:da:12:bb:20:b4:0d:d9:88:99:64:c0:2d:29:
         f3:50:17:c8:f0:39:ab:1d:3a:b9:da:76:7d:15:dc:07:e8:32:
         8b:1d:6d:6d:4e:0a:e4:18:ff:fc:37:59:67:fc:8d:07:d9:eb:
         5b:2d:5b:65:ed:8d:37:1e:4d:0e:30:25:14:f0:7c:6c:4d:cc:
         3c:ed:db:3a:53:61:ae:d8:5a:ea:51:17:2e:f6:4a:ad:8c:6f:
         b3:56:2c:db:74:18:e9:ee:b3:80:e4:a0:d1:fa:af:57:a5:d3:
         a9:0e:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----