Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/562e48-9e2b-499d-92bd-e27411f07945/1/tvUFiVoPEtK12EElkjFcHBjibGM.roa
File:                     tvUFiVoPEtK12EElkjFcHBjibGM.roa (raw, json)
Hash identifier:          i/4sAb0S2eHbp6X2l+01rbeyniTjA2WAZm45d020i8c=
Subject key identifier:   B6:F5:05:89:5A:0F:12:D2:B5:D8:41:25:92:31:5C:1C:18:E2:6C:63
Certificate issuer:       /CN=10642fdd4046e5a53d834cc7b2ca2758a8abda5a
Certificate serial:       0185715E79016CD74BE8D5C8604D4FF39AAC
Authority key identifier: 10:64:2F:DD:40:46:E5:A5:3D:83:4C:C7:B2:CA:27:58:A8:AB:DA:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGQv3UBG5aU9g0zHssonWKir2lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/562e48-9e2b-499d-92bd-e27411f07945/1/tvUFiVoPEtK12EElkjFcHBjibGM.roa
Signing time:             Mon 02 Jan 2023 07:24:54 +0000
ROA not before:           Mon 02 Jan 2023 07:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208229
IP address blocks:        185.228.64.0/22 maxlen: 22
                          2a0f:1c40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:5e:79:01:6c:d7:4b:e8:d5:c8:60:4d:4f:f3:9a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10642fdd4046e5a53d834cc7b2ca2758a8abda5a
        Validity
            Not Before: Jan  2 07:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6f505895a0f12d2b5d8412592315c1c18e26c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:c5:48:c0:15:71:0f:5d:5d:76:f7:62:ce:
                    82:7c:1a:da:43:fb:bb:21:25:74:34:a1:49:0f:40:
                    ec:1d:d3:bd:79:55:b7:87:8d:81:fd:83:4a:f6:17:
                    b1:9e:7e:42:d3:46:e9:97:99:23:4e:c9:51:47:3e:
                    f2:20:56:e8:23:dc:74:18:38:b6:4b:26:6a:76:08:
                    cd:49:52:71:f0:24:ee:03:a9:eb:5d:95:58:f0:48:
                    72:8f:87:be:f3:26:83:59:ad:33:b0:3a:2b:c6:8b:
                    44:c5:8e:b9:01:36:5b:1d:31:2e:db:d6:ce:c4:94:
                    d6:0c:f3:08:35:67:ed:11:1d:22:98:07:b5:f9:d6:
                    c1:0e:5b:85:cc:b4:9f:52:7a:72:3d:16:01:e0:d0:
                    8c:43:01:26:ed:ae:01:c4:15:95:33:52:c1:03:8c:
                    b3:c4:a7:d2:95:5e:0d:51:a0:fa:1d:48:65:fd:8e:
                    85:73:8d:38:21:92:11:bf:22:e1:86:32:8e:9d:60:
                    85:a7:00:f7:2c:c9:17:a3:de:4a:39:e1:4c:9f:d8:
                    a9:aa:30:bf:a9:ba:5f:69:7a:dc:74:f7:e4:9f:09:
                    67:65:55:7f:d4:09:97:97:c6:a0:e0:71:81:58:bb:
                    28:27:e4:7c:85:16:79:eb:06:a8:29:cb:c2:02:34:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F5:05:89:5A:0F:12:D2:B5:D8:41:25:92:31:5C:1C:18:E2:6C:63
            X509v3 Authority Key Identifier:
                keyid:10:64:2F:DD:40:46:E5:A5:3D:83:4C:C7:B2:CA:27:58:A8:AB:DA:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGQv3UBG5aU9g0zHssonWKir2lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/562e48-9e2b-499d-92bd-e27411f07945/1/tvUFiVoPEtK12EElkjFcHBjibGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/562e48-9e2b-499d-92bd-e27411f07945/1/EGQv3UBG5aU9g0zHssonWKir2lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.64.0/22
                IPv6:
                  2a0f:1c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:c1:1a:d7:40:ea:b7:c7:dd:73:fe:b0:b6:61:ac:9f:f3:
         e9:8e:c8:fd:15:9d:67:cd:6d:e6:43:68:2d:d4:40:a2:53:7b:
         0f:63:69:08:b9:79:bc:45:77:80:be:6d:e9:fc:dc:37:fa:ce:
         e9:2b:76:89:55:f7:96:0f:27:17:55:b3:60:27:b0:73:9f:14:
         93:bf:ce:99:ca:5e:48:7f:4a:b9:b2:05:66:a9:d2:5c:14:5e:
         f4:17:7d:9b:b8:71:21:ae:df:ca:47:fb:a1:91:8d:15:4b:31:
         90:b9:19:5f:93:84:ff:2c:19:b0:15:a1:3a:4b:9c:9a:f8:ab:
         c4:d0:d2:e0:fb:6c:ef:fd:3d:06:40:26:67:1a:26:07:68:fb:
         2d:ec:3f:fb:d9:ca:7d:cd:83:42:be:74:5d:74:ba:9a:94:45:
         b2:9b:13:f5:75:08:df:30:08:34:13:c3:9f:41:0a:66:6f:9d:
         d6:91:cf:bb:6f:cf:3f:28:ea:77:73:59:ae:9d:90:04:89:21:
         f9:0a:09:3b:db:3f:33:57:62:c6:05:c2:28:ee:cb:bf:48:c3:
         e8:64:3f:38:69:99:1c:b2:a8:f7:3e:ec:00:0e:a5:c0:b8:81:
         36:82:f9:d1:3d:ee:48:df:72:44:54:37:97:45:3e:c3:6f:3a:
         8c:a7:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----