Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/NrePmsAGjzp5hRgVn140eDsz-eA.roa
File:                     NrePmsAGjzp5hRgVn140eDsz-eA.roa (raw, json)
Hash identifier:          fgAN5caxGvaBci4UwlXPjQqpTv3u3gBSPzNiAROpaiI=
Subject key identifier:   36:B7:8F:9A:C0:06:8F:3A:79:85:18:15:9F:5E:34:78:3B:33:F9:E0
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       018962F85CC17128AC1FD427B72F44491468
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/NrePmsAGjzp5hRgVn140eDsz-eA.roa
Signing time:             Mon 17 Jul 2023 08:29:51 +0000
ROA not before:           Mon 17 Jul 2023 08:29:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        185.177.46.0/24 maxlen: 24
                          2a0a:2f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:f8:5c:c1:71:28:ac:1f:d4:27:b7:2f:44:49:14:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Jul 17 08:29:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36b78f9ac0068f3a798518159f5e34783b33f9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:86:e7:ee:c0:a3:e9:8f:04:b5:6e:0d:ec:
                    03:dc:72:5c:b6:67:1b:3f:3c:38:8d:3b:69:46:45:
                    be:76:45:3c:94:94:2c:20:80:47:91:a2:b1:ff:43:
                    01:10:f9:92:dc:6b:0e:dc:5c:80:ce:2d:47:dc:f9:
                    0e:be:38:14:17:b2:ee:d5:f3:73:19:c5:80:58:25:
                    13:28:b5:0b:8c:f5:38:fb:2a:e4:9a:46:ad:2e:6e:
                    8a:8d:32:0e:e2:98:46:f8:ef:dc:e9:ec:8c:ff:1c:
                    db:72:98:0d:a7:e3:59:e3:dc:64:12:4c:0a:63:49:
                    c7:14:c4:3f:4c:9c:03:12:22:38:c4:f5:ae:a5:02:
                    14:5a:25:6a:96:48:84:98:de:b6:d9:7c:1d:27:25:
                    4f:4e:96:f8:5c:b5:5d:a6:94:86:13:ea:27:4f:0e:
                    70:a5:fa:55:bb:c0:45:a9:1d:06:75:38:e8:7f:61:
                    da:4b:d9:90:43:ba:45:19:cc:10:76:c8:22:ad:38:
                    14:38:3c:f9:42:da:98:ea:91:b6:6d:50:3f:00:26:
                    54:f8:c4:66:67:5e:61:67:9b:b0:b9:dc:fe:d0:7f:
                    f7:a6:60:d5:27:95:11:9b:c3:96:84:35:41:43:68:
                    f7:6e:ff:88:44:36:8d:06:93:52:61:ed:19:11:af:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:8F:9A:C0:06:8F:3A:79:85:18:15:9F:5E:34:78:3B:33:F9:E0
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/NrePmsAGjzp5hRgVn140eDsz-eA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.46.0/24
                IPv6:
                  2a0a:2f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:94:d7:2c:73:4b:13:38:58:46:40:9a:52:05:8e:b6:b4:2c:
         26:b4:ea:37:d7:73:f5:1f:f0:e1:cd:02:06:06:8f:9f:59:06:
         4d:f1:7c:f1:d7:55:5a:eb:38:e4:2d:9b:7f:42:1f:8d:59:a0:
         04:40:3e:94:0c:27:16:01:ae:56:3f:15:bc:d5:2f:9f:d7:bc:
         e7:f5:d8:d4:2c:a7:3f:37:8b:f6:39:fb:f8:1d:d2:c9:5f:fa:
         a8:7d:6b:dc:e9:ac:ba:47:7c:f4:d0:0b:01:a6:87:59:a9:44:
         87:61:ee:9e:6c:ce:d0:fa:3f:99:54:fc:1a:dd:be:dc:58:84:
         0d:38:e4:d9:6b:b5:e7:99:18:de:74:cc:5a:0e:70:91:2f:64:
         0c:c5:dd:c0:b8:a2:c4:f3:8b:cd:50:05:19:88:50:c2:7c:7c:
         da:fd:16:89:a3:ab:f2:fb:cc:3d:43:e5:ff:60:81:c2:53:4c:
         19:e4:91:b2:49:c9:5c:83:f0:cb:3b:c3:11:a7:d0:c8:a6:65:
         1c:c2:1d:f7:ad:de:10:1f:62:4a:31:d0:9e:45:7b:33:93:a3:
         f1:5f:8d:7c:bd:b6:ae:ef:7f:25:84:f2:66:d1:94:be:3d:95:
         dc:19:dd:22:c4:4b:a4:f5:a5:13:80:2c:24:fb:6e:7a:e7:be:
         09:7e:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----