Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa
File:                     nSu92TvJHR_K928_81-xCH1xWVk.roa (raw, json)
Hash identifier:          tu1gv4EBc8YrVkJamTGgeIR7Vs2KJ2PP+LQB1o3m1fI=
Subject key identifier:   9D:2B:BD:D9:3B:C9:1D:1F:CA:F7:6F:3F:F3:5F:B1:08:7D:71:59:59
Certificate issuer:       /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial:       0188B9F11198A99951C9EFC6AE5AE39AE96B
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa
Signing time:             Wed 14 Jun 2023 12:46:03 +0000
ROA not before:           Wed 14 Jun 2023 12:46:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197938
IP address blocks:        146.0.0.0/20 maxlen: 20
                          2a04:e540::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:f1:11:98:a9:99:51:c9:ef:c6:ae:5a:e3:9a:e9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
        Validity
            Not Before: Jun 14 12:46:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d2bbdd93bc91d1fcaf76f3ff35fb1087d715959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:e5:75:c0:46:14:17:6b:48:fd:13:f2:3f:
                    d0:50:68:d2:18:51:84:d6:ac:d8:84:af:d1:9b:4d:
                    a5:8e:aa:cf:3f:1c:f4:01:75:4e:dd:55:60:0d:40:
                    9e:40:bd:e4:ab:ba:9c:11:a6:4e:9f:44:f9:dc:a2:
                    8e:68:df:f9:57:69:13:7e:a1:d9:91:e9:c0:f7:60:
                    14:5e:5e:b7:9c:71:1e:b4:40:dc:40:4d:25:e3:ce:
                    61:5e:8e:64:37:9c:e6:c5:d4:e9:77:7b:d5:12:9b:
                    34:07:74:14:e4:d9:23:e3:ec:7b:00:09:56:49:8f:
                    a0:a8:93:74:af:53:97:c4:91:3f:f5:b9:3f:a1:59:
                    bb:75:af:dd:2e:c3:78:2d:c8:48:12:c4:84:d0:0f:
                    b0:e5:1d:d3:db:c2:f9:ca:1d:b3:ed:0b:12:89:a4:
                    4d:6b:f0:de:54:ac:e7:0e:7c:60:dd:05:db:53:4a:
                    7e:cf:38:bd:eb:07:ce:40:7b:65:af:04:4c:21:3e:
                    7a:a4:d5:6e:db:04:3b:d9:ae:00:dc:c4:2a:aa:e3:
                    e2:18:f4:5b:c8:7c:39:a1:f6:e4:07:25:70:c5:79:
                    95:df:4b:17:07:e0:bd:f3:da:43:2e:60:95:a0:e5:
                    3d:d5:7a:22:d8:c0:19:91:93:02:d9:f7:ff:6b:66:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:BD:D9:3B:C9:1D:1F:CA:F7:6F:3F:F3:5F:B1:08:7D:71:59:59
            X509v3 Authority Key Identifier:
                keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.0.0.0/20
                IPv6:
                  2a04:e540::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:25:9b:93:21:cb:21:14:ec:2e:a7:88:ff:b5:e3:c5:f1:ba:
         0c:7f:d3:91:e2:e4:fc:d9:86:dd:bf:c0:01:a5:f2:4c:62:b5:
         13:04:9a:ca:62:1a:9a:b6:86:05:40:08:db:f2:4b:16:58:22:
         f7:5c:31:c0:c5:12:f1:08:3e:1e:fc:52:bb:7f:43:83:4a:a4:
         34:b4:cb:58:f4:0e:be:49:23:21:5a:c0:04:47:96:b0:e3:cf:
         d7:3b:17:84:d0:96:1c:2a:44:40:30:32:0d:33:a8:9a:e8:67:
         5e:75:19:99:8c:30:91:5d:74:92:d9:ad:f5:e6:f4:83:a0:37:
         e4:8c:ce:ad:46:9d:6b:13:84:f4:2a:57:d1:cc:c2:f2:3f:aa:
         6a:5d:b5:aa:47:4c:b5:37:b4:e9:6d:5d:05:a0:be:c2:c9:13:
         05:9e:cc:42:94:7a:ca:8e:5b:94:38:12:be:7c:9e:aa:cc:0a:
         41:2b:06:f0:cc:99:5a:85:1b:69:9a:59:52:60:74:ec:18:d3:
         14:a1:24:37:07:5b:08:16:33:c1:f4:51:7d:a5:35:75:79:57:
         00:e2:87:72:3a:0e:cb:4a:fd:f7:af:1c:a8:6a:fd:fb:db:9f:
         2b:8f:fe:a6:f7:33:8e:38:31:99:f0:09:a7:ce:1d:69:b2:48:
         df:4b:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----