Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/ewVukve3v-MvtKT_PMUja1PCILg.roa
File:                     ewVukve3v-MvtKT_PMUja1PCILg.roa (raw, json)
Hash identifier:          GisdsRe0VZooLIBEmQA0GVvpsyG+xAZ/25AhOupRKR8=
Subject key identifier:   7B:05:6E:92:F7:B7:BF:E3:2F:B4:A4:FF:3C:C5:23:6B:53:C2:20:B8
Certificate issuer:       /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial:       018571D78898CE1AB31C2748679CBE58AA8B
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/ewVukve3v-MvtKT_PMUja1PCILg.roa
Signing time:             Mon 02 Jan 2023 09:37:08 +0000
ROA not before:           Mon 02 Jan 2023 09:37:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56641
IP address blocks:        91.226.74.0/23 maxlen: 24
                          2a00:9520::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:88:98:ce:1a:b3:1c:27:48:67:9c:be:58:aa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
        Validity
            Not Before: Jan  2 09:37:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b056e92f7b7bfe32fb4a4ff3cc5236b53c220b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:60:18:93:ab:70:dd:2e:d8:3f:9b:73:ce:
                    9f:56:c2:11:8a:67:b4:ab:97:7e:35:01:98:42:e7:
                    0c:d1:26:a2:81:67:c5:87:cb:5f:33:8b:34:e7:f7:
                    a9:cc:52:18:4a:1b:52:3f:c0:85:4d:78:08:2f:03:
                    4b:df:61:1b:e6:02:a1:16:33:bb:45:f1:98:15:77:
                    7e:88:f5:07:45:43:20:ed:af:f2:90:c1:dd:13:d8:
                    95:46:c3:b5:13:4e:00:d2:6f:c6:78:ca:f5:ea:8f:
                    3a:e5:76:d9:b1:d2:90:55:5f:41:55:71:db:f8:92:
                    67:57:f4:77:7e:c9:f9:bd:b5:7e:21:ec:24:c5:3e:
                    69:30:b1:5a:87:a6:58:34:47:d7:31:9d:41:b3:bf:
                    d9:9b:29:b2:48:d6:73:be:4b:ed:03:48:6a:f1:00:
                    be:04:a6:33:8e:13:26:3d:41:f6:99:35:61:5f:5f:
                    ab:dc:09:2d:ce:7a:6c:f7:5a:6d:8f:90:af:45:76:
                    ea:69:21:db:bd:b9:e3:1a:24:60:5e:a0:ea:aa:b3:
                    d6:60:f8:14:65:e0:09:a8:0f:94:1c:82:2d:9e:12:
                    7d:0e:12:ac:5c:70:5c:7b:50:1b:de:f7:1d:e8:fd:
                    42:a4:1b:d2:de:aa:17:95:b2:d9:d0:26:9d:8a:14:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:6E:92:F7:B7:BF:E3:2F:B4:A4:FF:3C:C5:23:6B:53:C2:20:B8
            X509v3 Authority Key Identifier:
                keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/ewVukve3v-MvtKT_PMUja1PCILg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.74.0/23
                IPv6:
                  2a00:9520::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:b2:e4:c1:04:34:ae:e7:69:f0:ce:22:5c:b5:7c:16:cf:c9:
         a0:de:e9:b7:a8:1a:5c:34:4c:b2:53:12:22:e4:96:f5:a8:ef:
         d7:11:77:d5:c8:3a:95:96:89:51:97:ff:d3:d0:e4:cb:79:00:
         4f:e7:36:bb:f9:29:ef:9d:43:7f:2e:f5:cb:dd:5d:d8:54:19:
         82:06:45:67:3c:9b:f3:49:18:c8:03:68:0d:4e:65:db:1d:a2:
         64:96:39:a2:f0:4a:ab:70:a2:3f:15:5c:c3:d8:37:44:e2:71:
         9e:81:22:8c:87:d3:55:40:3f:b6:5a:b8:e7:03:2d:54:35:08:
         c6:1a:37:53:bb:fa:1c:78:17:5e:87:d5:24:47:92:9b:85:94:
         1a:e8:0a:c1:35:f6:97:e3:49:0f:87:1f:05:73:38:11:71:11:
         66:6f:a0:a6:a2:4d:d0:73:78:f5:42:d4:5a:83:ea:f1:25:05:
         69:b1:74:1e:6d:bc:c3:48:51:64:34:32:7a:d2:be:4b:0f:36:
         73:de:55:fb:4a:f5:5e:0a:11:83:72:8d:34:d9:f9:f1:c4:a2:
         d1:79:9f:b5:f9:e0:57:49:77:e2:fc:fb:72:f7:0f:dd:fc:bd:
         40:00:06:84:0f:38:77:a5:22:be:44:c6:45:0b:7f:20:61:bc:
         fc:b6:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----