Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/rTU6HMS-8zJfFDehn2BAr9lhIVQ.roa
File:                     rTU6HMS-8zJfFDehn2BAr9lhIVQ.roa (raw, json)
Hash identifier:          T3fknaBNt2ukAppEFxsfMOig8oCdil43mVu70Nm/Wlo=
Subject key identifier:   AD:35:3A:1C:C4:BE:F3:32:5F:14:37:A1:9F:60:40:AF:D9:61:21:54
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       01856C25E74589FD438CE4A64A6162F5A12E
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/rTU6HMS-8zJfFDehn2BAr9lhIVQ.roa
Signing time:             Sun 01 Jan 2023 07:05:01 +0000
ROA not before:           Sun 01 Jan 2023 07:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6786
IP address blocks:        185.39.48.0/23 maxlen: 23
                          2a04:7a00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:e7:45:89:fd:43:8c:e4:a6:4a:61:62:f5:a1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan  1 07:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad353a1cc4bef3325f1437a19f6040afd9612154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:05:4d:c5:8a:06:4e:52:8c:eb:c5:b6:fb:
                    c6:6b:aa:a2:77:76:ff:85:71:fa:cc:df:b2:e1:90:
                    27:4b:82:4b:77:62:07:3e:75:40:8d:9d:dd:31:09:
                    5c:97:1e:12:95:82:3d:43:75:f5:a8:0b:59:93:4f:
                    65:a8:b3:96:57:63:92:4f:d8:af:04:06:22:c7:0a:
                    5e:be:c4:55:e2:b2:b9:fc:19:ba:0f:d8:60:d0:a0:
                    c4:b2:70:fa:3b:79:94:80:54:17:7c:e4:c0:b7:3a:
                    16:79:a1:b6:d0:ae:f5:0e:52:14:0f:f5:94:12:73:
                    0b:ee:ed:d0:2e:11:e7:76:ae:8d:17:5d:8d:c2:0e:
                    35:9a:44:9e:22:c3:dc:5f:2e:48:6e:b4:01:69:20:
                    08:4d:e4:32:07:98:b4:af:82:ec:5b:24:f1:b5:82:
                    8a:1f:e7:c8:eb:20:d4:ce:8b:8c:4c:c6:8b:e8:4a:
                    7b:5b:0b:f9:c6:76:20:50:1b:75:34:ea:9e:ca:08:
                    73:5f:7a:41:ac:e6:0c:97:52:29:dd:21:60:ff:88:
                    14:87:4f:32:70:33:a3:5d:c8:ec:1d:2c:ee:14:39:
                    a4:9f:a4:10:6d:ee:fc:a3:f0:88:17:6e:65:79:6a:
                    84:9d:c6:14:3c:78:5b:c6:71:9f:97:20:70:91:c4:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:35:3A:1C:C4:BE:F3:32:5F:14:37:A1:9F:60:40:AF:D9:61:21:54
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/rTU6HMS-8zJfFDehn2BAr9lhIVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.48.0/23
                IPv6:
                  2a04:7a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:39:e0:21:8a:ba:a5:ce:b1:5a:5e:92:1a:6f:42:4e:d8:
         a8:a0:17:d1:ec:60:1c:60:24:da:b7:28:a5:1e:79:0d:c9:40:
         4f:ea:0f:d5:a0:16:73:95:bf:fc:36:b6:28:71:0e:25:7d:28:
         0d:3a:39:a3:a9:f5:76:0d:f2:09:2a:9f:e5:23:44:98:30:c0:
         68:fb:1c:c8:00:b9:c7:4b:5b:88:e0:14:97:12:0d:6d:28:34:
         31:ef:d8:e5:db:84:61:fc:3b:83:27:aa:e2:53:65:66:e1:4d:
         7b:8e:d8:5a:ba:e8:69:1b:fb:fa:c5:bc:ae:77:95:49:92:1b:
         45:21:ca:2f:d4:7f:86:c2:54:aa:c2:bf:ae:45:f0:39:5b:aa:
         52:e5:0b:fe:d3:fc:fc:d0:7a:a7:af:a5:f6:66:66:c9:9f:f7:
         af:12:5b:d5:58:4d:31:9e:bf:a2:8b:60:7a:0f:c2:a2:86:4b:
         f6:5a:66:c6:9e:e9:e4:88:84:fe:30:f1:75:70:c5:2f:43:7d:
         9d:cb:bc:e8:84:1f:c4:44:47:c3:63:34:42:d2:f7:1b:26:4f:
         fa:9d:20:02:b0:a4:ee:93:bd:a9:04:50:bc:26:fd:25:e8:a8:
         b7:ef:fe:cc:b4:6e:18:5b:72:ba:8e:cb:01:52:55:37:ec:07:
         76:49:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----