Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/1-GOYntK5Mph9yxXaV2l-8gzLWUA.roa
File:                     1-GOYntK5Mph9yxXaV2l-8gzLWUA.roa (raw, json)
Hash identifier:          39OAzI7Cp+z1H0evvfCYwd5yY+duk/nexyRtBmPKNHg=
Subject key identifier:   F8:63:98:9E:D2:B9:32:98:7D:CB:15:DA:57:69:7E:F2:0C:CB:59:40
Certificate issuer:       /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial:       018CA284263E7B5AE40001A7E30445329195
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/1-GOYntK5Mph9yxXaV2l-8gzLWUA.roa
Signing time:             Mon 25 Dec 2023 19:46:58 +0000
ROA not before:           Mon 25 Dec 2023 19:46:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42926
IP address blocks:        45.84.189.0/24 maxlen: 24
                          2a0f:e80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a2:84:26:3e:7b:5a:e4:00:01:a7:e3:04:45:32:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
        Validity
            Not Before: Dec 25 19:46:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f863989ed2b932987dcb15da57697ef20ccb5940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:67:5d:58:b2:44:23:8f:94:8b:57:4d:5e:
                    e5:49:58:bb:5d:2f:d9:e6:6b:a4:c1:b1:b0:9f:c1:
                    39:42:21:c9:84:ff:0f:22:9f:13:72:d2:4c:84:7d:
                    6f:3f:9b:69:2c:42:e1:82:18:44:9e:60:73:14:0e:
                    19:d9:8e:e4:99:51:03:99:7c:1c:0b:c5:5c:ad:db:
                    b4:4e:2b:89:73:59:6f:f6:05:c5:cb:76:07:6b:4e:
                    a2:72:a5:6c:35:93:39:34:c6:03:51:3e:a3:3c:c9:
                    b5:8d:65:9c:17:12:42:10:f9:43:23:eb:06:07:85:
                    ca:a0:a5:f3:e7:2e:9b:3b:b4:64:22:0a:c9:c2:7e:
                    aa:13:45:af:42:aa:24:8c:99:45:28:bb:08:f4:07:
                    03:7d:ab:8c:95:0a:0c:70:9a:e0:b5:4a:ac:9c:bb:
                    9c:fb:5e:40:11:2c:9e:af:e2:23:1f:af:a4:8b:7b:
                    0d:57:d0:5e:c8:79:a9:e6:fc:a5:6e:fc:67:a8:e7:
                    52:73:09:a5:e0:a1:3a:8a:23:f5:54:ac:f6:bc:a7:
                    df:aa:7f:c0:26:1c:ae:40:79:5b:72:d8:2c:2a:bb:
                    dc:44:88:07:b3:c7:2d:fa:2b:35:41:ce:c4:0b:14:
                    c4:df:15:d5:b9:f9:6c:c3:04:b2:2b:0b:3e:8a:67:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:98:9E:D2:B9:32:98:7D:CB:15:DA:57:69:7E:F2:0C:CB:59:40
            X509v3 Authority Key Identifier:
                keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/1-GOYntK5Mph9yxXaV2l-8gzLWUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.189.0/24
                IPv6:
                  2a0f:e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:a2:bc:2e:0c:ba:44:26:86:eb:9d:e8:51:11:d8:90:06:
         9d:85:94:05:81:be:74:e2:fc:48:fe:6d:5c:21:64:68:5b:42:
         3c:b0:67:0f:e3:e0:1f:3b:1e:79:11:a4:90:15:8d:04:68:0d:
         aa:4f:a9:f1:e2:01:50:91:38:f5:79:be:1c:2a:03:84:21:e2:
         5d:f4:4c:14:ee:01:e9:ae:3c:60:b1:1c:7f:12:84:3e:a7:ea:
         09:7e:4a:d1:04:88:55:6c:c0:46:25:ab:33:dc:78:ee:73:82:
         cb:b3:91:1c:4a:72:c1:89:fb:4d:7e:13:f2:38:0e:2f:d1:5c:
         71:e5:e2:15:25:de:b5:c9:ad:de:40:86:85:cf:e2:3a:15:5f:
         5a:16:c9:6e:cf:48:a5:e9:1b:9e:8a:11:13:d7:ca:fc:e8:5b:
         5e:6d:37:d3:f3:5e:f1:c4:f3:3a:15:4b:f4:15:a6:e8:ca:22:
         5b:95:e4:3e:10:77:9f:4f:df:ad:d1:95:2a:a2:4c:ac:9b:bf:
         f3:9a:98:8f:ce:02:11:1e:d4:3d:cf:7a:dc:5b:33:de:8f:7e:
         c1:01:5d:5a:90:fc:89:10:12:e2:55:ef:f7:84:30:26:b5:9f:
         d2:68:fa:fe:de:cc:4e:b4:4b:c6:f3:ad:49:b4:24:1c:17:50:
         84:99:81:a6
-----BEGIN CERTIFICATE-----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