Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/vdduhSsbsuJE_QJ_t14-BCK-Qrs.roa
File:                     vdduhSsbsuJE_QJ_t14-BCK-Qrs.roa (raw, json)
Hash identifier:          ewO4dBlA2EWhPBj8i7bOOvH0oKC2926FqXeJX3nNlm4=
Subject key identifier:   BD:D7:6E:85:2B:1B:B2:E2:44:FD:02:7F:B7:5E:3E:04:22:BE:42:BB
Certificate issuer:       /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial:       018572B41045C7F0E146A85FE12B6A1FB4BE
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/vdduhSsbsuJE_QJ_t14-BCK-Qrs.roa
Signing time:             Mon 02 Jan 2023 13:38:01 +0000
ROA not before:           Mon 02 Jan 2023 13:38:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60390
IP address blocks:        185.31.180.0/22 maxlen: 23
                          2a00:bf60::/32 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:10:45:c7:f0:e1:46:a8:5f:e1:2b:6a:1f:b4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Validity
            Not Before: Jan  2 13:38:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdd76e852b1bb2e244fd027fb75e3e0422be42bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:f9:8b:e3:e5:11:a8:04:e4:2f:b2:ce:71:
                    ad:f2:d8:02:c7:32:33:3b:8c:69:03:72:2d:2e:f7:
                    35:9f:82:1f:c1:d7:1d:d7:5c:a8:2c:8a:ee:d8:9b:
                    7d:c7:b1:3a:fa:80:cf:80:d7:02:38:45:33:e7:b0:
                    5e:59:9f:c7:72:f7:4f:a2:b0:e6:e9:06:2a:71:7c:
                    09:e0:61:02:f5:cc:2d:74:a1:18:01:80:31:0a:0b:
                    77:45:0f:e4:f2:94:eb:4a:6a:61:7e:1e:67:cd:37:
                    37:cc:07:fa:e2:65:a8:75:c9:57:9e:94:3c:21:39:
                    39:fb:74:49:f9:86:7e:8a:56:82:0d:ae:8d:94:de:
                    5f:d1:b1:06:66:3f:d2:d8:f7:47:d4:f2:80:82:84:
                    90:ff:fd:4f:b7:84:53:e5:88:4d:ef:25:3f:ba:e4:
                    2f:06:e3:23:89:ad:ad:e2:f4:84:45:60:b1:dd:85:
                    02:3b:aa:90:52:fd:b4:e6:12:ce:13:d0:45:b4:06:
                    90:22:a4:78:c9:62:3f:72:71:61:66:f6:9e:6d:bf:
                    4d:88:77:00:29:18:ad:ea:cd:de:01:d9:f8:cc:98:
                    c6:05:33:cb:8b:ce:19:bb:7d:29:37:47:d8:3b:4d:
                    39:3d:b5:2b:30:7f:9e:b4:7b:f3:56:de:ed:d5:1c:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:6E:85:2B:1B:B2:E2:44:FD:02:7F:B7:5E:3E:04:22:BE:42:BB
            X509v3 Authority Key Identifier:
                keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/vdduhSsbsuJE_QJ_t14-BCK-Qrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.180.0/22
                IPv6:
                  2a00:bf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:19:70:e2:5b:8d:a9:3f:bb:9d:40:f7:ce:83:89:15:a3:
         8a:2d:98:32:d7:26:23:23:ee:98:bf:b6:3c:cf:3e:ac:37:e6:
         1d:14:41:5c:b7:21:d8:b2:c1:d9:0c:88:5f:2c:be:3b:56:69:
         2a:01:07:20:f9:9c:cc:9f:ea:2f:00:a1:fa:e5:23:d1:cd:35:
         b5:52:f6:37:47:10:50:31:40:36:53:d9:0e:01:01:1c:cd:51:
         eb:96:d7:0a:83:57:61:a6:38:bf:6d:bf:e9:a5:f6:ea:ae:2b:
         c5:31:4e:3d:fb:f6:ab:fc:fb:c9:42:33:48:f4:e4:01:e3:eb:
         2a:1e:f5:46:47:db:ad:18:90:a3:3c:7c:3d:ca:0d:8e:42:82:
         dc:bd:63:0c:fd:a3:bf:2f:29:ac:bb:07:35:cc:b5:3e:2b:43:
         37:de:a8:1b:14:43:e1:08:af:a6:9b:e9:c1:56:a1:03:53:6c:
         52:6c:4a:11:78:da:df:e9:16:9d:54:ac:f1:37:74:37:77:df:
         4c:b7:6c:5f:a6:58:d4:67:bf:6b:db:63:3c:63:44:c9:29:fa:
         10:53:48:3c:85:dd:55:61:70:ad:05:e5:ac:ee:92:b8:19:b4:
         b6:0f:3d:b9:85:35:0f:d1:ba:07:c8:6a:26:fd:4b:45:6d:cb:
         c1:94:9c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----