Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/B_B823aAZvAYvcMvAhpyUvNQIK0.roa
File:                     B_B823aAZvAYvcMvAhpyUvNQIK0.roa (raw, json)
Hash identifier:          4LahjNe6YAAMPNPQ7NTisvocfHlNnRHkngFOArvAoik=
Subject key identifier:   07:F0:7C:DB:76:80:66:F0:18:BD:C3:2F:02:1A:72:52:F3:50:20:AD
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       01856C013868D3EB450594D5BEE236812945
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/B_B823aAZvAYvcMvAhpyUvNQIK0.roa
Signing time:             Sun 01 Jan 2023 06:24:57 +0000
ROA not before:           Sun 01 Jan 2023 06:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        185.177.46.0/23 maxlen: 23
                          2a0a:2f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:38:68:d3:eb:45:05:94:d5:be:e2:36:81:29:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Jan  1 06:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07f07cdb768066f018bdc32f021a7252f35020ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:13:02:48:d8:d1:51:4b:3e:fb:9d:f0:23:
                    26:b5:83:82:78:b3:ad:09:33:19:a8:18:69:01:17:
                    74:da:93:97:69:4f:9b:67:34:44:10:5e:b2:f8:9c:
                    08:90:04:96:9f:82:d0:6a:db:cf:d1:ea:79:51:ef:
                    fe:bb:2c:ec:88:c2:3a:0f:c7:ed:84:db:37:ef:fb:
                    58:29:b6:54:f3:dd:41:4d:da:5f:44:53:56:ba:45:
                    dd:54:a6:09:bc:8f:ff:df:9d:77:90:cb:05:02:d4:
                    ac:50:4a:cc:b6:85:ff:7a:b4:cb:7c:62:26:77:5a:
                    63:0d:47:76:ac:57:d8:09:ef:5a:73:e0:7d:2d:2a:
                    88:f6:e1:c9:47:04:75:6b:be:c6:f3:36:10:c7:69:
                    57:3f:a2:ef:e0:f0:53:3f:8f:7a:3a:d2:01:91:0f:
                    ce:ab:b5:f2:5b:b3:98:77:65:cb:d3:67:99:7b:fc:
                    8d:07:79:f7:4a:e8:cf:d4:bf:db:8a:84:79:fc:12:
                    96:0a:ec:af:b4:1b:37:a7:3e:0f:3c:91:59:ed:72:
                    50:d2:37:b7:64:26:17:e8:99:40:ee:06:9f:5b:7c:
                    48:e1:ee:d5:94:9d:f4:5e:cf:69:87:d4:ef:c4:87:
                    48:07:49:88:8d:2e:c6:86:20:7e:ee:71:73:0e:2a:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:7C:DB:76:80:66:F0:18:BD:C3:2F:02:1A:72:52:F3:50:20:AD
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/B_B823aAZvAYvcMvAhpyUvNQIK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.46.0/23
                IPv6:
                  2a0a:2f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:90:a2:be:99:34:a0:68:6a:4e:72:7f:83:75:4a:bb:b7:
         e4:2e:92:21:91:a0:83:45:67:8a:99:b4:4f:3c:9e:bf:75:e8:
         2c:57:af:68:05:80:3a:4b:6e:0b:a7:a9:24:2c:08:17:1b:52:
         b9:5e:1e:40:e7:f6:b7:21:40:24:0b:f8:09:f8:c5:58:3d:b8:
         fa:36:db:77:b5:c6:3f:69:88:db:0a:70:0a:ee:a0:91:11:08:
         f7:93:4d:fc:67:3d:f1:58:fc:b8:03:b0:f5:16:f4:15:f2:15:
         a2:3b:21:37:7f:7b:e9:58:50:a7:44:a0:ed:f3:6c:27:71:71:
         41:b8:94:f0:96:f4:4d:2f:1b:58:71:db:6a:30:d5:13:f5:d0:
         11:c3:b9:54:bd:dd:f4:64:aa:76:90:d6:5e:8c:b4:96:d8:6a:
         12:0b:60:0a:e4:c3:38:14:f0:fc:82:e3:ba:f7:1d:be:52:c4:
         23:f9:55:90:85:2a:34:ea:c2:6e:d5:51:24:50:22:6f:69:25:
         d6:44:50:6c:2d:e1:28:6b:3f:2f:80:98:85:75:0e:9c:fd:e5:
         ee:a6:e1:5e:d7:d2:0d:4f:79:67:02:37:2f:8c:c2:b8:fc:74:
         4a:a0:7d:52:79:f1:79:c9:9b:88:58:3a:88:1f:38:33:d1:4e:
         8e:c2:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----