Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/lX0kyPe8GKqFVQehFTvZ4Y-ZjPs.roa
File:                     lX0kyPe8GKqFVQehFTvZ4Y-ZjPs.roa (raw, json)
Hash identifier:          aHc6+MGc7V+kefIerU9n/+MYc3T8IFrJhk2a1sBTr5I=
Subject key identifier:   95:7D:24:C8:F7:BC:18:AA:85:55:07:A1:15:3B:D9:E1:8F:99:8C:FB
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       01856F3919C07A60D3111EC653F06CECE29D
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/lX0kyPe8GKqFVQehFTvZ4Y-ZjPs.roa
Signing time:             Sun 01 Jan 2023 21:24:51 +0000
ROA not before:           Sun 01 Jan 2023 21:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200707
IP address blocks:        185.98.176.0/23 maxlen: 23
                          2a00:8000::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:39:19:c0:7a:60:d3:11:1e:c6:53:f0:6c:ec:e2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Jan  1 21:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=957d24c8f7bc18aa855507a1153bd9e18f998cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:a7:30:ce:97:13:bb:ff:39:64:c1:e0:20:
                    cf:6e:77:64:13:80:c8:50:11:40:7f:65:6c:3e:9d:
                    3b:71:d2:2e:fa:37:95:e6:aa:99:24:0a:a6:98:a0:
                    c1:50:17:33:68:e6:f5:36:fd:f3:77:11:1a:b1:b1:
                    b4:75:f3:30:3b:18:2a:09:23:86:14:cd:ff:9e:8a:
                    82:cb:ff:22:7f:22:3b:8f:21:78:a1:42:96:b1:ee:
                    7b:44:cd:df:9d:12:82:a9:76:c5:dc:97:37:e9:70:
                    33:af:1a:d8:c9:52:02:62:2d:be:88:78:a2:40:bf:
                    82:f2:45:0e:dd:a5:c8:9e:f7:a1:51:4c:c7:4f:4f:
                    ca:2d:62:76:af:9e:c3:b1:cf:4c:f0:3b:bc:6f:20:
                    8f:3f:c6:96:39:52:64:f9:02:90:ec:c5:4a:0a:3b:
                    b9:ff:3e:a8:c8:ba:c5:d4:a6:26:50:d6:8d:61:4a:
                    d7:ab:48:6f:7b:d5:be:e2:ac:f9:ea:8e:32:4b:fa:
                    13:37:b3:99:b2:48:ad:3d:b1:e7:5b:ae:45:9f:07:
                    f7:f7:f6:1c:cb:50:a3:d4:9b:24:a9:c0:c1:1d:82:
                    d6:2f:34:0d:18:99:a3:f3:da:ce:2f:6f:13:03:f3:
                    8d:55:7b:16:23:cd:fe:f7:87:c6:90:f5:52:1d:8c:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:24:C8:F7:BC:18:AA:85:55:07:A1:15:3B:D9:E1:8F:99:8C:FB
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/lX0kyPe8GKqFVQehFTvZ4Y-ZjPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.176.0/23
                IPv6:
                  2a00:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:dd:e7:13:f3:5e:8a:eb:b0:5c:1d:e2:95:a6:cf:d7:d1:5e:
         45:79:ac:d3:30:10:f3:bc:e6:52:2f:e0:2b:99:66:69:cd:f4:
         97:6e:99:25:15:ad:71:60:fd:6f:9b:c7:72:4c:3b:aa:1b:15:
         d3:ce:f8:91:a4:cd:c8:2d:a2:7c:ab:98:f2:7d:9e:64:85:48:
         5c:7c:22:ae:7a:c4:d4:0f:35:82:3f:91:fe:b9:07:cf:b2:a8:
         b4:fc:15:ec:b7:46:2b:f2:42:eb:6c:0d:1b:48:87:a4:9b:4d:
         0f:a2:32:1f:7a:68:4b:2f:3c:3a:50:28:4c:d3:97:b9:79:91:
         ce:09:93:27:97:65:c9:77:02:cd:7f:c7:10:79:96:ad:3e:d9:
         2b:c9:ca:1b:b3:7e:67:3c:64:8c:2c:a9:5d:e1:5d:94:b4:9d:
         6d:2b:86:6f:4c:88:e2:a7:41:84:41:2a:40:3f:19:ba:00:09:
         d9:5b:5c:42:b4:8f:8c:c9:8c:b6:14:bb:76:79:b5:f9:96:4b:
         89:df:13:72:6f:14:25:08:a7:35:12:58:5f:dd:ed:30:32:f2:
         8f:40:a4:3b:f1:b4:d4:d1:de:0d:6f:94:80:4a:d8:86:85:65:
         5e:b1:21:90:f2:af:72:6c:be:aa:6d:f7:ce:1c:d1:aa:0a:66:
         cb:12:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----