Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v73Mj5iXsxoH6aDJDbRRbFTsaGs.roa
File:                     v73Mj5iXsxoH6aDJDbRRbFTsaGs.roa (raw, json)
Hash identifier:          r3Smf+HlqfSV7rwndzYGB6Uda9gGsLxnpYvj2i31U0g=
Subject key identifier:   BF:BD:CC:8F:98:97:B3:1A:07:E9:A0:C9:0D:B4:51:6C:54:EC:68:6B
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0185C5F3FE7D4868A679364E1BB18D6A7344
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v73Mj5iXsxoH6aDJDbRRbFTsaGs.roa
Signing time:             Wed 18 Jan 2023 17:36:19 +0000
ROA not before:           Wed 18 Jan 2023 17:36:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51714
IP address blocks:        85.117.241.0/24 maxlen: 24
                          2a09:ff00:103::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c5:f3:fe:7d:48:68:a6:79:36:4e:1b:b1:8d:6a:73:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan 18 17:36:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfbdcc8f9897b31a07e9a0c90db4516c54ec686b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:3d:7a:93:d2:09:d1:e3:1f:0e:78:03:5b:
                    01:e1:6c:ab:a0:3e:3f:df:36:be:87:6f:6f:d7:15:
                    48:cf:1b:94:f4:36:41:26:45:6e:62:f8:c0:74:70:
                    07:ce:42:98:f3:18:27:9b:6f:71:0f:81:dd:9b:81:
                    7a:ba:d5:44:37:25:39:85:0a:16:4e:bd:30:4c:52:
                    60:ff:36:f7:0a:79:d3:ff:1f:50:eb:b9:15:e8:38:
                    e8:13:db:bd:2c:f3:0c:e8:c0:3e:95:a8:fd:57:e3:
                    71:9a:d1:8a:80:40:96:88:18:64:02:b9:ee:2f:1d:
                    d6:d9:79:a8:9e:33:9c:8c:d7:4c:95:89:4a:8d:c6:
                    fc:2d:de:e1:eb:1a:52:a5:38:06:ee:ec:27:f2:82:
                    10:3f:1f:c4:2b:f2:88:a3:6f:21:3d:6c:20:b2:19:
                    d3:c9:f6:ca:9f:59:40:60:db:2f:2a:89:56:10:06:
                    16:b8:c1:34:af:70:82:1e:d0:cf:32:9c:c9:fd:3d:
                    d6:16:a4:7c:1a:f9:1e:8d:7f:58:73:78:69:0b:34:
                    e5:19:a5:c7:3b:2b:7f:95:6d:98:31:66:f3:b9:f8:
                    a3:b5:a4:60:78:04:91:b6:3c:2d:d8:44:b8:3f:f3:
                    d7:db:aa:4c:82:8b:ef:a6:18:21:ca:c9:d0:8f:ff:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BD:CC:8F:98:97:B3:1A:07:E9:A0:C9:0D:B4:51:6C:54:EC:68:6B
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v73Mj5iXsxoH6aDJDbRRbFTsaGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.241.0/24
                IPv6:
                  2a09:ff00:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:fa:b4:53:a3:d6:a0:42:82:f4:5d:68:17:77:84:dc:9c:
         7e:a7:55:1d:54:f2:5a:4c:22:3d:76:6e:60:8a:e7:fa:9a:2f:
         62:c7:99:be:e0:ed:e7:02:74:21:54:09:57:67:a9:fb:b3:6e:
         71:a8:5b:d4:c7:e8:8f:fc:11:09:13:0b:ac:05:d6:64:f4:43:
         41:0e:87:dd:5a:e3:f9:eb:56:fe:9e:08:a0:75:12:67:10:50:
         b1:ef:e3:35:1f:59:f2:6b:59:30:ed:9d:d5:9f:17:6b:a1:da:
         e8:e0:7c:e0:b9:20:e9:50:25:b3:f1:68:6e:a0:0d:6d:d5:de:
         ce:a7:ba:2d:e5:3f:93:31:a5:ca:ac:07:62:79:0f:44:34:40:
         28:eb:ed:4f:67:47:c5:a9:a3:61:d4:c4:b4:b1:2c:62:12:a4:
         fb:57:0d:c8:56:a5:50:f0:0c:2f:7a:93:59:bc:40:c0:63:af:
         33:c2:0e:2a:da:54:74:81:5e:ab:cf:c8:45:42:11:0a:71:bd:
         47:18:9e:e2:56:01:19:bd:e0:3f:cc:e5:40:42:93:de:c4:df:
         39:1f:93:9c:3c:c6:32:54:bf:25:5f:49:07:4c:3b:22:78:fa:
         d5:63:3b:e1:6b:d9:71:be:cf:68:72:c8:a2:e4:95:ea:fe:99:
         8e:14:0b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----